Privacy Policy
Last updated: {date}
This policy is a template for operational use and should be reviewed by qualified counsel before it is relied on as your company's final legal document.
1. Introduction
This Privacy Policy describes how Goliath Dispatch ("we", "us") collects, uses, discloses and retains information in connection with the Goliath Dispatch platform, its marketing site, and related services. It applies to visitors to our marketing site, prospective and onboarded carriers, drivers, dispatch company personnel, and customers who receive a tracking link.
2. Data we collect
We collect information you provide directly — name, email, phone, company and DOT/MC numbers on a contact, quote or carrier-signup form; onboarding documents such as a Certificate of Insurance, Certificate of Authority, W-9 and Notice of Assignment; account and profile information once you're a registered user. We also collect information generated by using the platform — load, document and communication records, device and browser information, IP address, and, where consented, driver and vehicle location during an active load.
3. How we use data
We use data to operate the platform: evaluating carrier onboarding, verifying FMCSA authority, computing settlements and invoices, dispatching and tracking loads, evaluating oversize/permit and escort requirements, responding to inquiries, and meeting legal, tax and regulatory obligations. We do not sell personal information.
4. Electronic signature consent
Where the platform requests an electronic signature — for example, on an onboarding agreement or a rate confirmation — your action to sign electronically constitutes your consent to conduct that transaction by electronic means, and a record of the signature, including the signer, timestamp, IP address and document hash, is retained as described below.
5. Text messages (SMS)
Goliath Dispatch does not send text messages. We do not use your phone number for SMS, there are no marketing or operational texts, and so there is nothing to opt out of: system notices go out by email and inside the application. We store the phone numbers you enter as contact details for your company, your customers and your drivers, and they are handled like the other contact data described in this document. If we ever do send text messages, we would ask for your consent before the first one, and this policy would be updated beforehand, not afterwards.
6. Tracking, location data and driver consent
Location data is collected from a driver's device or a vehicle's tracking hardware only while a load is active, and only with the driver's or carrier's consent, recorded and revocable through account settings. Customers who receive a public tracking link see shipment status and estimated timing, not a driver's precise real-time location or personal information.
7. Data retention
Operational records — loads, documents, tracking history and related communications — are kept in the active system for the period each dispatch company sets, 24 months by default, and are then archived: still stored, marked as archived, and out of day-to-day use. Permanent deletion afterwards is an option each installation turns on separately; where it is on, it happens no later than 5 years after archival. Financial records, invoices, signed agreements and signature certificates are retained for a minimum of 7 years, consistent with tax and audit requirements, and some records — signature records and a load’s status history — are never deleted. A legal hold suspends any scheduled deletion for the records it covers.
8. Subprocessors
We use vetted service providers to operate the platform: hosting and database infrastructure, transactional email delivery, payment processing, and motor carrier authority verification (FMCSA). Each subprocessor is bound by a written agreement limiting its use of data to the services it provides us. Routes and load progress are computed inside the application from the stops you enter: they are not sent to a mapping provider or to a tracking data provider. We do not use any text messaging service or any automatic document text extraction service.
9. Your rights
Depending on your state of residence, you may have the right to request access to, correction of, deletion of, or a portable copy of your personal information, and to opt out of certain uses. Submit a request through the Contact page; we will verify your identity before acting on it and respond within the time required by applicable law. Some information cannot be deleted before its required retention period — see Data Retention above.
10. Data security
Documents and signature records are stored in private object storage with access granted only through short-lived signed URLs. Administrative access to tenant data is scoped and logged, and financial and operational records carry an append-only audit trail.
11. Children's privacy
The platform is intended for business use by adults. We do not knowingly collect personal information from anyone under 18.
12. Changes to this policy
We will post any material change here with an updated "Last updated" date and, where required, seek renewed consent before the change applies to you.
13. Contact us
Questions about this policy or a request concerning your data can be sent through the Contact page or to the privacy contact address listed there.