Privacy Policy

Last updated: July 22, 2026

This policy explains what information Operator 91 collects, how we use and protect it, and the choices and rights you have. It covers three groups of people: the transport companies that use our platform (our customers), the people whose records our customers manage in the platform (their employees, drivers, and job applicants), and visitors to this website. Our approach is simple: your operational data is your company's, it stays isolated to your company, and we never sell it.

1. Our role: processor vs. controller 2. Customer operational data 3. Driver & applicant data 4. Website & prospect data 5. How we use information 6. Sharing & subprocessors 7. Security 8. Retention & deletion 9. Your privacy rights 10. Cookies & tracking 11. Children 12. Changes 13. Contact

1. Our role: processor vs. controller

For the operational data our customers put into the platform — loads, drivers, equipment, rates, settlements, and the like — Operator 91 acts as a data processor (service provider). The customer is the controller; they decide what data goes in and why, and we process it on their behalf under our agreement with them. For information we collect directly about website visitors and sales prospects, and about our own customer contacts, we act as the controller.

2. Customer operational data

When a customer uses the platform, it holds the records they choose to bring in or generate, which may include:

Company, terminal, and region records; user accounts and roles.
Driver and employee records: name, contact details, license and medical-certificate information, qualification (DQ) documents, employment history, and training records.
Operational records: loads, lanes, rates, fuel transactions, maintenance and inspection records, safety events, and settlement/pay data.
Data mirrored from the customer's connected tools (telematics, cameras, fuel cards, TMS, factoring, and similar) through the customer's own credentials.

Sensitive identifiers are never stored in the clear. Where the platform needs a government identifier only to match a person (for example, an SSN used during driver qualification), we store a one-way keyed hash plus the last four digits for display — the raw number is never persisted, logged, or returned. We never move money. Payment, factoring, fuel-card, and settlement data is a read-only mirror; the platform prepares files a human takes to their own financial system, and initiates no payments or transfers.

Isolation. Every customer's data is scoped to that customer (multi-tenant isolation), enforced in code and covered by automated tests. One customer cannot see another's data. Access within a customer's account is governed by roles the customer controls, and money and HR/safety data sit behind hard role gates.

3. Driver & applicant data

Our customers use the platform to recruit and qualify drivers. When a person applies to one of our customers through an application link, the information they submit — contact details, work history, license and medical-card images, and the consents required for a DOT driver-qualification file — is collected on behalf of that carrier, who is the employer and the controller of that data. Operator 91 processes it for the carrier and does not use applicant data for our own marketing. If you applied to a carrier and want to access, correct, or delete your application data, contact that carrier; we will support their request.

4. Website & prospect data

If you request a demo, join the early-access list, or email us, we collect what you send — typically your name, work email, company, and any details you share — to respond and to evaluate fit. We use this only to contact you about Operator 91 and to shape your setup. We do not sell it and we do not add you to unrelated mailing lists.

5. How we use information

To provide, operate, secure, and improve the platform for the customer.
To power Operators — advisory AI features. Operators read a customer's own data to suggest next actions; they propose into an approval queue and never act without a person confirming. AI processing uses the customer's configured provider key and is scoped to that customer's data.
To respond to sales and support requests, and to send service and security notices.
To meet legal, tax, and contractual obligations.

We do not sell personal information, and we do not use customer operational data to train general-purpose AI models.

We share information only as needed to run the service: with infrastructure and subprocessors that host or support the platform (for example, our cloud hosting and database provider, our email-delivery provider, and the AI provider a customer configures), each under contract and only for the purpose of providing the service; when a customer directs us to (for example, connecting one of their own tools); and where required by law. A current list of subprocessors is available to customers on request, and our customer agreement includes a data-processing addendum.

7. Security

Security is core to the product, not an afterthought. Highlights: per-tenant isolation enforced in code and tested in CI; role-based access with hard gates on money, HR, and safety data; sensitive identifiers stored as one-way hashes; encrypted secrets; and no movement of funds. Full detail is on our Security page. No system is perfectly secure, but we design conservatively and keep the surface small.

8. Retention & deletion

We keep customer operational data for as long as the customer's account is active, and thereafter as needed to comply with legal obligations or resolve disputes. Customers can export their data (the platform round-trips core records as CSV) and can request deletion of their account data, subject to any records we must retain by law. Website and prospect data is kept only as long as needed for the purpose it was collected.

9. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to opt out of certain processing. Several U.S. states (including, among others, California, Texas, and Virginia) grant such rights, and their thresholds can apply to businesses of many sizes. For operational data held on a customer's behalf, please direct requests to that customer (the controller); we will assist them. For data we control (website and prospect information), contact us using the details below and we will respond as required by applicable law. We do not discriminate against anyone for exercising these rights.

10. Cookies & tracking

This marketing website uses no third-party advertising or analytics trackers and sets no advertising cookies. The application uses only the cookies strictly necessary to keep you signed in and secure. If we add privacy-respecting analytics in the future, we will update this policy and honor recognized opt-out signals such as Global Privacy Control (GPC).

11. Children

Operator 91 is a workplace tool and is not directed to children. We do not knowingly collect personal information from anyone under 16.

12. Changes

We may update this policy as the product and the law evolve. We will change the "last updated" date above and, for material changes affecting customers, provide notice through the service or by email.

13. Contact

Questions, or a privacy request? Email [email protected]. For general support, [email protected].