Your BOL data stays private. We never sell, share, or disclose your Bill of Lading images or scan results to third parties. BOL images are automatically deleted after 90 days unless you choose to retain them. We do not store your credit card number — payments are processed by Stripe.
When you use LoadLegit, we collect the minimum data necessary to provide the service:
| Data Type | What It Is | Why We Collect It |
|---|---|---|
| BOL Images / PDFs | The Bill of Lading file you upload for scanning. May contain shipper PII, carrier information, hazmat details, and shipment data. | To perform the compliance scan |
| Scan Results | Extracted shipment data and compliance check output from the AI analysis | To display results and maintain your scan history |
| Account Information | Email address and hashed password (if you create an account) | To authenticate and associate your scan history |
| Payment Information | Billing email and payment status (subscription tier, renewal date). We never see or store your full card number — that is handled entirely by Stripe. | To manage your subscription and billing |
| Usage Data | Anonymous page visits and scan counts with no personal identifiers attached | To understand product usage and improve the service |
We do not collect location data, device identifiers, or any data beyond what is listed above.
We use your data only for the following purposes:
We do not use your data for advertising, do not sell your data to brokers, and do not build advertising profiles from your usage.
Your data is stored on secure cloud infrastructure in the United States. We implement industry-standard security measures including:
No security system is perfect. While we take reasonable precautions, we cannot guarantee absolute security of your data. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.
We do not sell, rent, trade, share, or disclose your Bill of Lading images, extracted shipment data, or scan results to any third party. Period.
The only circumstances under which we access or transmit your BOL data are:
LoadLegit uses the following third-party services to operate. Each provider has their own privacy policy and data handling practices:
| Provider | Purpose | Data Shared |
|---|---|---|
| Stripe, Inc. | Payment processing for subscriptions | Billing email, payment method details. Stripe handles all card data — we never store card numbers. Stripe Privacy Policy → |
| OpenAI, L.L.C. | AI-powered OCR and compliance analysis of BOL images | BOL image files are sent to the OpenAI API for analysis. OpenAI is contractually prohibited from storing or training on your BOL images under their API data usage policy. OpenAI Privacy Policy → |
| Render Services, Inc. | Application hosting and infrastructure | Server logs may contain IP addresses and request metadata. Render Privacy Policy → |
| Neon, Inc. | Cloud PostgreSQL database hosting | All application data (user accounts, scan results, BOL metadata) is stored on Neon's infrastructure within the United States. Neon Privacy Policy → |
We do not use any advertising networks, social media tracking pixels, or behavioral analytics providers.
BOL images and scan results are automatically deleted 90 days after the scan date, unless you have explicitly chosen to retain them in your account settings.
Account information is retained while your account is active. If you delete your account, all associated scan data is deleted within 30 days. We may retain anonymized usage analytics derived from your data after deletion.
Billing records are retained for as long as required by applicable law and Stripe's retention requirements (typically 7 years for financial records).
Anonymous usage analytics contain no personal identifiers and are retained indefinitely.
LoadLegit uses a lightweight, privacy-respecting analytics system to count page visits and scan volume. This system assigns an anonymous identifier stored in your browser's local storage — it is not tied to your identity, does not track you across the web, and is not shared with any advertising network.
We use session cookies for authentication (keeping you logged in). These cookies are essential for the Service to function and do not track your activity for advertising purposes.
We do not use third-party advertising cookies, remarketing pixels, or behavioral tracking technologies.
You have the right to:
To exercise any of these rights, contact us at loadlegit@polsia.app. We will respond within 30 days.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
Your CCPA Rights:
Right to Know — You can request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of collection, the business purpose for collection, and any third parties with whom we share it.
Right to Delete — You can request deletion of personal information we have collected about you, subject to certain exceptions (such as retaining financial records as required by law).
Right to Correct — You can request correction of inaccurate personal information we maintain about you.
Right to Opt-Out of Sale — We do not sell personal information. We do not share personal information for cross-context behavioral advertising. You do not need to opt out because we do not engage in these practices.
Right to Non-Discrimination — We will not discriminate against you for exercising your CCPA rights.
To submit a CCPA request, contact us at loadlegit@polsia.app with the subject line "CCPA Rights Request." We will verify your identity and respond within 45 days.
LoadLegit is a commercial tool for professional drivers and logistics operators. We do not knowingly collect personal information from anyone under 18 years of age. If you believe we have collected information from a minor, contact us at loadlegit@polsia.app and we will promptly delete it.
We may update this Privacy Policy from time to time. The "Last updated" date at the top indicates when changes were last made. For material changes, we will notify registered users via email before the change takes effect.
Privacy questions, data requests, or CCPA inquiries? Contact us at:
Khilco Holdings LLC dba LoadLegit
loadlegit@polsia.app