1. Notice at Collection and Data Categorization

We collect information to facilitate real-time logistics, service proximity queries, and algorithmic vetting. We rigidly categorize this data to ensure compliance and protect consumer privacy:

• Commercial Business Information: Data collected during our multi-phased "Chain of Trust" verification protocol for third-party providers (including Secretary of State legal standing records, municipal licensing numbers, DOT vehicle photographs, and Certificates of Insurance) is explicitly classified as commercial business information, not consumer Personally Identifiable Information (PII).
• Consumer Data: Information provided by standard users to access the platform, create profiles, or execute service requests.

2. Precise Geolocation and Sensitive Personal Information (SPI)

Truckers-Friend explicitly states that precise geolocation coordinates (latitude and longitude) are harvested exclusively to facilitate user-requested functionalities, such as calculating the Haversine distance to the nearest verified service provider, mapping the proximity to hospital emergency rooms, or routing distress signals to local Highway Patrol dispatchers.

This data is strictly ring-fenced; it is never utilized for secondary purposes such as behavioral profiling or targeted advertising. Because this data is processed solely to perform the services reasonably expected by an average consumer who requests them, we rely on statutory exemptions under the CPRA regarding the limitation of SPI.

3. Data Retention and Destruction Protocols

We do not engage in indefinite data retention.

We enforce a defensible Data Retention Policy aligned with federal and provincial mandates:

• Ephemeral Data (Immediate Deletion): Precise geolocation data collected for Haversine proximity routing or SOS emergency matching is permanently purged, anonymized, or overwritten immediately upon the termination of the active user session or the completion of the routing request.
• Financial and Tax Records: W-9 forms, payment processing, and transaction histories are retained for a standard period of seven (7) years to comply with the audit requirements of the United States Internal Revenue Service (IRS) and the Canada Revenue Agency (CRA).
• Security and Audit Logs: System access records, audit logs, and security incident reports are retained for six (6) years.
• Verification Evidence: Commercial vetting documentation (DOT photos, Certificates of Insurance, licenses) is retained for the active life of the account plus three (3) years.

4. Algorithmic Transparency and Automated Decision-Making

Truckers-Friend employs automated artificial intelligence mechanisms to evaluate the "Chain of Trust" of third-party providers, assign verification badges, and calculate performance metrics based on peer reports. If you are subject to these automated decisions, you have the right to be informed of this processing, understand the principal factors and parameters leading to the automated decision, and request human intervention or the correction of inaccurate algorithmic conclusions.

5. Consent Models and Universal Opt-Outs

Your consent requirements are dictated by your accessing jurisdiction:

• United States (Universal Opt-Outs): We technically recognize and honor Universal Opt-Out Mechanisms (UOOMs), including the Global Privacy Control (GPC) signal, as a valid, immediate withdrawal of consent for data sharing and targeted advertising.
• Quebec (Law 25 Explicit Opt-In): For users accessing the platform from a Quebec IP address, all non-essential cookies, trackers, and precise geolocation features are disabled by default. Data collection will not occur without explicit, affirmative, and specific opt-in consent provided via our Consent Management Platform.

6. Cross-Border Data Transfers

To ensure seamless operation, user data will be transferred to and processed on secure cloud infrastructure located in the United States, a jurisdiction whose legal framework may differ from your province or state of residence. By using Truckers-Friend, you explicitly consent to this cross-border transfer. We maintain documented Privacy Impact Assessments (PIAs) and Transfer Risk Assessments (TRAs) to ensure that destination jurisdictions and third-party cloud providers offer a level of protection equivalent to the stringent standards dictated by Quebec Law 25.

7. Advanced Data Subject Rights

Depending on your jurisdiction, including provisions activated under Quebec Law 25, you may have the right to request:

• Data Portability: The extraction of your complete data profile, delivered in a structured, commonly used technological format within a thirty-day statutory window.
• De-indexation: The cessation of the dissemination of your personal information if continued publication causes harm or violates statutory frameworks.