Privacy Policy

TruckPaperwork is a web app for truckers and owner operators. You scan bills of lading, rate confirmations, proof of delivery, and related load documents, build a PDF packet, and email it to a freight broker or factoring company from your own Gmail.

Questions: rohan.devwhiz@gmail.com. Also see our Terms of Service.

TruckPaperwork is free to use today. There is no subscription, no per-page kiosk fee, and no paid plan in the product right now.

We may introduce paid plans, usage limits, or paid add-ons in the future. If we do, we will say so in the product and update this policy and the Terms of Service before we start charging. We will not silently turn a free account into a paid one. You would have to choose a paid plan before we bill you.

We are not promising the service stays free forever. A future paid model might keep a free tier, or it might not. If you do not want to pay, you can stop using the app and ask us to delete your data.

TruckPaperwork uses Google Sign-In and, if you choose, Gmail send. The Google user data we access is limited to what those features need:

• Sign-in (openid, email): your Google account ID, name, and email address to create and authenticate your TruckPaperwork account.
• Gmail connect (gmail.send, optional): permission to send email from the Gmail address you connect. We store the connected email address and an encrypted OAuth refresh token. We do not access or store your inbox, message bodies except what you type into our send form, drafts, labels, or contacts from Gmail.

We use Google user data only to provide and improve TruckPaperwork features you use: sign-in, account management, and sending load packets you initiate. We do not use Google user data for advertising, selling to data brokers, credit decisions, or training AI or machine learning models (including non-personalized models). Google Workspace and Gmail API data are not used to develop, improve, or train generalized AI or ML models.

Trying the scanner without an account. Pages you scan before signing up, and any PDF you build from them, stay in your browser on your device and are not uploaded to us. They are deleted when you delete the document, or the next time you open this site at least 24 hours after you last used them. If you sign up to download or send, they move to your account and upload like any other scan.

Account. When you sign in with Google we get your name, email address, and a Google user ID so we can create and recognize your TruckPaperwork account. We do not get your Google password.

Profile. Company name and other details you type in Settings.

Load documents. Scans and uploads you add to a packet, plus the PDF we generate. That can include BOLs, PODs, rate cons, receipts, load numbers, signatures, and anything else on those pages.

Brokers. Names, emails, phone numbers, notes, and tags you save.

Gmail connection. The Gmail address you connect and an encrypted refresh token so we can send mail you start in the app. We also keep a send log of the packet, from address, recipients, subject, and body you wrote.

Usage. We use PostHog for product analytics: which screens are used, errors, and feedback you send us through the app. That is not used to read your documents, and the scanner and editor are never recorded.

We use this data to run TruckPaperwork for you:

• Sign you in and keep you signed in
• Store and show your packets, pages, and PDFs
• Save broker contacts so you do not retype AP emails
• Send load packets from your Gmail when you hit send
• Fix bugs, keep the service up, and prevent abuse

We do not sell your information. We do not use your load paperwork for advertising.

You choose the broker. When you send a packet, the PDF and email go to the addresses you picked. That is the point of the product.

Vendors that host the app. We use Supabase for auth, database, and file storage, Vercel to run the website, PostHog for product analytics, and Google for sign-in and Gmail send. They process data to provide those services, not to use your paperwork as their product.

We may share data if required by law, or if we need to protect the service or someone's safety. If TruckPaperwork is sold or merged, user data would move with the product under this policy or a successor policy with notice.

We use technical and organizational measures to protect Google user data and other information, including:

• HTTPS (TLS) for data in transit between your browser and our servers
• Authentication required for all app features that access your documents or Gmail
• Per-account isolation for database records (packets, pages, brokers) so each sign-in session only queries data tied to that account
• Page scans and load packet PDFs are stored in a private cloud storage bucket, not on public web links. Paths include your account identifier. You must be signed in to view or download them through TruckPaperwork; our servers fetch files using short-lived signed access and enforce authentication before returning file data.
• Application-level encryption (AES-256-GCM) for Gmail OAuth refresh tokens before they are stored. Document PDFs and scans are not encrypted again by our application; they are protected by sign-in, account-scoped storage, access rules, and our hosting providers’ infrastructure safeguards.
• HttpOnly, secure cookies for OAuth state during Gmail connect

No security method is perfect. When you email a load packet, the PDF goes to recipients you choose. You should not upload documents you are not allowed to keep or send.

We retain Google account profile data (name, email) and your TruckPaperwork content while your account is active so you can use the service. Send logs are retained so you can see what was emailed from the app.

When you disconnect Gmail in Settings, we stop using the refresh token for new sends. When you delete packets or brokers in the app, we remove that content from our systems.

To request deletion of your entire account and Google-related data we store (profile, packets, Gmail tokens, send history), email rohan.devwhiz@gmail.com. We will delete or de-identify data we control within a reasonable time, except where retention is required by law, security, or an active dispute. You can also revoke TruckPaperwork's access in your Google Account permissions.

You can disconnect Gmail in Settings. You can delete packets and brokers in the app. You can sign out anytime.

To delete your whole account and the data we hold, email rohan.devwhiz@gmail.com. We will confirm and take it down. You can also revoke Google access at myaccount.google.com/permissions.

TruckPaperwork is for working drivers and owner operators, not for children. We do not knowingly collect data from anyone under 13.

If we change this policy in a material way, including if we add paid plans that change how we handle data, we will update this page and change the date above. Keep using the app after that date means you accept the updated policy.