Privacy Policy

Last updated: August 13, 2026

This Privacy Policy explains how XPMaps ("XPMaps," "we," "us," or "our") collects, uses, shares, and protects information when you use our websites, web platform, mobile applications, and related support and communications services (collectively, the "Services").

1. Information We Collect

Account and contact information. We collect information such as your name, email address, telephone number, profile image, login identifiers, account role, company, and organization memberships.

Trip, fleet, and compliance information. We collect routes, stops, dates, load and cargo details, vehicle and trailer information, axle and dimension data, company records, permit information, state requirements, assignments, trip status, and related operational records that you or your organization provide.

Precise location and movement information. When a driver enables trip navigation or tracking and grants location permission, the mobile app may collect precise GPS coordinates, timestamps, accuracy, speed, and heading. When background location is enabled, this collection may continue while the app is minimized, the screen is off, or the app is otherwise not visible, for the active trip-tracking or navigation function.

Communications and files. We process chat messages, support requests, call and voicemail records, notification activity, and files you upload, such as trip, company, vehicle, bill-of-lading, and permit-related documents.

Payment and transaction information. We process billing details, transaction amounts, payment status, invoices, refunds, and limited payment-method references. Payment-card details are handled by our payment processor; XPMaps does not store full card numbers.

Device and usage information. We may collect IP address, browser or device type, operating system, app version, push-notification tokens, session and security information, request and error logs, and interactions needed to operate, secure, diagnose, and improve the Services. Our website also uses cookies as described in our Cookie Policy.

2. How We Use Information

We use information to authenticate users; generate and save routes; estimate and process permits and trip costs; manage fleets, trips, dispatch, and documents; provide navigation, live tracking, arrival, and route-deviation features; deliver chat, calls, notifications, and support; process payments; prevent fraud and misuse; maintain audit and compliance records; troubleshoot the Services; and meet legal obligations.

We do not use precise location data for advertising, and we do not sell personal information or precise location data.

3. Mobile Location and Background Tracking

Precise location supports driver navigation, route progress, dispatch visibility, arrival and stop workflows, route-deviation detection, and trip history. If you use the Services through an employer, carrier, dispatcher, or other organization, authorized users of that organization may view your current or recorded trip location and related alerts.

The mobile app must ask for device permission before accessing location. You can deny or revoke that permission in your device settings. Disabling location may prevent navigation, live dispatch, arrival, or other location-dependent features from working. Your organization may separately establish lawful workplace requirements for drivers; questions about those requirements should be directed to that organization.

4. How We Share Information

We share information only as needed to provide and protect the Services, including with:

• authorized users in your account or organization, such as administrators, managers, dispatchers, assigned drivers, and permit staff;
• service providers that support hosting, storage, authentication, maps and geocoding, routing, payments, email, messaging, calling, notifications, monitoring, and customer support;
• government agencies, permit authorities, or other parties when you ask us to process a permit or compliance service;
• law enforcement, regulators, courts, or other parties when required by law or reasonably necessary to protect rights, safety, and the integrity of the Services; and
• a successor or transaction participant in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate protections.

Key service providers include Google Cloud and Firebase, Stripe, Twilio, and email, mapping, routing, and geocoding providers. They process information under their own terms and privacy obligations. We require providers that handle personal information for us to provide protections consistent with this policy and applicable law and to comply with their contractual privacy and security obligations.

5. Data Retention and Deletion

We retain information for as long as reasonably necessary to provide the Services, maintain trip, permit, payment, safety, security, and audit records, resolve disputes, and comply with legal, tax, accounting, and regulatory obligations. Retention periods vary by the type of information and the purpose for which it is used.

You may request access, correction, or deletion of your personal information by contacting us. We may need to verify your identity and authority, and we may retain information that we are legally required or permitted to keep. If your account is managed by an organization, some requests may need to be coordinated with its account administrator. To delete your account or request deletion, see Delete Your Account.

6. Security

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, authentication, encryption in transit, and restricted service access. No storage or transmission method is completely secure, and we cannot guarantee absolute security.

7. Your Choices

Depending on your device, account, and applicable law, you may update profile information, manage notification settings, control cookies, revoke mobile permissions, and request access, correction, or deletion. Revoking a permission does not delete information already collected; contact us if you also want to request deletion.

8. Children

The Services are intended for businesses and adult transportation professionals and are not directed to children under 18. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this policy as the Services or legal requirements change. We will post the updated version here and revise the date above. We will provide additional notice when required by law.

10. Contact Us

For privacy questions or requests, contact us at support@xpmaps.com.