Privacy Policy

Last updated October 2026

Starter draft. This document is a starter draft and must be reviewed by a lawyer before launch.
Permit Book organizes your records and sends reminders. It is not legal advice and does not guarantee compliance. Always verify current FMCSA and state requirements.

1. What we collect

  • Contact details: phone number and email address, used to sign in and to send reminders.
  • Company details: name, USDOT/MC numbers and address.
  • Documents and records you or your drivers upload, such as licenses, medical cards, insurance certificates, registrations and maintenance receipts.
  • Usage data: actions in the app and an audit log of changes and document views.

2. How we use it

To run the service: show document status, send reminders and one-time sign-in codes, support your account, keep the service secure and bill you.

3. Service providers

We use processors to operate the product: application and database hosting, SMS delivery, email delivery, private file storage, and payment processing. They handle data only to provide those services to us.

4. Access to your data

Your documents are stored privately and opened only through short-lived links. Staff of your company see data according to their role. Our support staff may access an account temporarily for support, after recording a reason; this is logged.

5. Retention

  • Driver qualification file records: kept for the length of employment plus 3 years.
  • Maintenance records: kept for 1 year, plus 6 months after the equipment is disposed of.
  • Audit logs: kept at least 3 years.

Retention periods are starting points, not legal advice. Verify the periods that apply to you.

6. Export and deletion

You can ask us to export your organization's data or delete it. Some records may be kept where we must retain them or where deletion would break required retention periods you have configured.

7. Security

Sign-in uses one-time codes, data access is scoped to each company, and files are not publicly accessible. No system is perfectly secure.

8. Changes and contact

We will post updates to this policy here. For privacy requests, use the contact method published on our website at launch.