Privacy Policy

HUB TMS ("we", "us", "our") is committed to protecting the privacy of our customers and their data. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using the Service, you agree to the collection and use of information as described here.

Account Information

When you create an account, we collect your name, email address, company name, and billing information (processed by Stripe — we do not store raw card data).

Business Data You Enter

The Service stores data you input, including:

• Load and shipment records
• Customer, carrier, driver, and shipper information
• Invoice and payment records
• IFTA fuel and trip data
• Documents and files you upload

This data is yours — we process it only to provide the Service.

Usage Data

We collect standard server logs including IP addresses, browser type, pages visited, and timestamps. This is used for security, debugging, and improving the Service.

Cookies

We use a single authentication cookie (auth-token) to maintain your login session. We do not use advertising or tracking cookies.

• To provide, operate, and maintain the Service
• To process payments and manage your subscription
• To send transactional emails (invoices, delivery confirmations, password resets)
• To respond to support requests
• To detect and prevent fraud or abuse
• To comply with legal obligations

We do not sell your data, use it for advertising, or share it with third parties except as described in Section 4.

We use the following third-party services to operate the platform:

• Stripe — Payment processing. Subject to Stripe's Privacy Policy.
• Railway — Cloud hosting and database infrastructure.
• Cloudflare R2 — Document and file storage.
• Resend — Transactional email delivery.
• Intuit QuickBooks — Optional accounting integration (only if you connect your account).

These providers are contractually obligated to protect your data and may only use it to provide services to us.

• HTTPS encryption for all data in transit
• Encrypted authentication tokens (JWT with HS256)
• Database access restricted to application servers
• Role-based access controls within your company account

We retain your data as long as your account is active. If you cancel your subscription:

• Your data remains accessible for 30 days after cancellation
• You may export all data during this window
• After 30 days, your data is permanently deleted from our systems

We may retain anonymized, aggregated data for analytics purposes after deletion.

You have the right to:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate data
• Deletion — Request deletion of your account and associated data
• Portability — Export your business data via the Reports section
• Opt-out — Unsubscribe from non-essential communications

To exercise any of these rights, contact us at support@hubtms.com.

The Service is not directed at children under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will delete it.

We may update this Privacy Policy periodically. When we make material changes, we will notify you by email or via an in-app notice. The "Last updated" date at the top of this page indicates when the policy was last revised.