Legal
Effective date: August 30, 2026
DumpTruckBoss LLC ("DumpTruckBoss," "we," "us," or "our") operates the DumpTruckBoss platform — a cloud-based SaaS product for dispatch, ticketing, invoicing, and fleet management for dump truck and hauling companies.
This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data. It should be read together with our Terms of Service and Security pages. By using our platform, you agree to the practices described here. If you disagree, please discontinue use of the Service.
A note on roles: for the account and billing information you give us directly, we act as a controller. For the operational data you enter about your business — including your drivers, subcontractors, their contact details, ticket photos, and location/GPS data — you (the trucking company) are the controller and DumpTruckBoss acts as your processor, handling that data only to provide the Service on your instructions. See Section 3.
When you create an account, we collect your name, email address, company name, company address, and phone number. This information is required to operate your account and communicate with you about the Service.
DumpTruckBoss stores all operational data you input into the platform, including: driver names and contact information, load tickets, job assignments, dispatch records, client company records, invoices and invoice line items, revenue and payment data, expense records, and subcontractor information. This data belongs entirely to you and is processed solely to provide the Service.
To provide the Service, your account may contain personal information about your drivers and subcontractors (names, phone numbers, email addresses, ticket photos, pay information, and — where you enable live tracking — precise location). This information is provided and controlled by you; see Sections 3 and 4.
DumpTruckBoss stamps ticket submissions with the device's approximate GPS coordinates, and — for accounts that enable the Live Fleet Tracking feature — collects precise location from a driver's or subcontractor's device while they are on an active shift and using the app. Because this is sensitive information, it is described in detail in Section 4.
Payments are processed by Stripe, Inc., a PCI-DSS-compliant third-party processor. We do not store your full credit card number, CVV, or raw payment credentials. We do retain billing records including transaction amounts, dates, subscription plan details, and Stripe customer and subscription IDs for accounting, support, and subscription management purposes.
We automatically collect certain technical data when you interact with the platform: IP address (stored in anonymized form for our first-party analytics), browser type and version, device type, operating system, pages and features visited, time spent, and session timestamps. This data is used to monitor platform performance, debug issues, and detect abuse.
If you contact our support team via email, we retain a record of that correspondence. If you opt into email notifications (invoice alerts, ticket approvals, missing ticket alerts), we retain your email address for that purpose and send transactional emails via our email providers.
When you upload ticket photos, documents, or company logo images, those files are stored in secure cloud storage. File uploads are associated with your company account and used solely to display information within the platform.
We use the information we collect to:
We do not sell, rent, or trade your personal information or business data. See Section 10 for how the terms "sell" and "share" are used under California law.
DumpTruckBoss plays two different roles depending on the data:
As the controller of your drivers' and subcontractors' data, you are responsible for having a lawful basis to collect it and for providing any required notices or consents to those individuals — including notice of live location tracking where you enable it.
Two features involve location. (a) Ticket geotagging: when a driver or subcontractor submits a ticket, the app records the device's approximate coordinates at that moment. (b) Live Fleet Tracking (a Fleet Pro feature the account owner turns on): while the person is clocked in to an active shift and has the app open, the app collects their device's precise location at intervals and sends it to the platform.
To attach a location to ticket records (proof of work at the jobsite) and, for Live Fleet Tracking, to show the account owner where their on-shift drivers/subcontractors currently are and the route they traveled during the shift. We do not use location data for advertising and do not sell it.
Live Fleet Tracking streams location only while a worker is clocked in and actively using the app. It does not track location when the worker is off shift, clocked out, or (in this version) when the app is closed or in the background.
Location data is visible only to the trucking company account that owns it (the owner and authorized team members) and to DumpTruckBoss staff strictly as needed to operate and support the Service. It is isolated per company; other companies cannot see it.
The most-recent position is kept for the live map for the current shift. Historical location "breadcrumbs" used for route history are retained for approximately 90 days and then deleted automatically. Ticket geotags are retained with the associated ticket for as long as that ticket exists in your account.
Location collection requires device-level permission, which the individual can grant or deny in their device settings. Denying it disables the feature for that person. The account owner controls whether Live Fleet Tracking is enabled at all, and is responsible for notifying and obtaining any required consent from drivers and subcontractors before enabling it.
Your data is stored in the United States on servers operated by our infrastructure providers. We implement appropriate technical and organizational safeguards, including:
No system is completely secure. If you believe your account has been compromised, contact us immediately at mj@dumptruckboss.com.
DumpTruckBoss uses the following third-party service providers ("sub-processors") to operate the platform. Each provider accesses data only as needed to perform its service and is bound by its own privacy terms and by data-processing or confidentiality obligations:
| Provider | Purpose |
|---|---|
| Supabase | Database hosting, authentication, and file storage (USA / AWS) |
| Vercel | Web application hosting and deployment (USA) |
| Stripe | Payment processing and subscription billing |
| Resend | Outbound transactional email (invoices, alerts, invites) |
| Postmark | Inbound email processing (invoice/ticket forwarding) |
| Anthropic (Claude) | AI document reader — extracting data from uploaded tickets/invoices |
| Mapbox | Map tiles for the Live Fleet Tracking map |
| Sentry | Application error monitoring and diagnostics |
| Upstash | Rate limiting / abuse protection |
| Intuit / QuickBooks | Optional accounting sync — only if you connect QuickBooks |
| Twilio | SMS notifications — only for accounts where SMS is enabled |
| Meta (Facebook) | Advertising measurement pixel on our marketing website only (not in the app) |
This list may change as we add or remove providers. To request our current sub-processor list, or a Data Processing Agreement (DPA) for your organization, email mj@dumptruckboss.com.
We do not sell or rent your personal data. We share it only in these limited circumstances:
We share data with the sub-processors listed above solely to operate and improve the platform. These vendors may not use your data for their own purposes.
We may disclose information if required by law, court order, subpoena, government request, or regulatory requirement, or if we reasonably believe disclosure is necessary to protect the rights, property, or safety of DumpTruckBoss, our users, or the public.
If DumpTruckBoss LLC is acquired by or merges with another company, your information may be transferred as part of that transaction. We will provide notice by email and/or a prominent platform notice before your data becomes subject to a different privacy policy.
We may share information with other parties if you explicitly consent to such sharing.
We retain data for as long as your account is active, and by data type as follows:
You have the following rights with respect to your personal data:
To exercise any of these rights, email us at mj@dumptruckboss.com. We will verify your identity and respond within the timeframe required by law (generally within 30–45 days). If you are exercising a right on behalf of drivers or subcontractors whose data lives in your account, note that you (as controller) may be the appropriate party to handle their requests.
If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you specific rights. This section serves as our notice at collection and describes those rights.
In the past 12 months we may have collected: identifiers (name, email, phone, IP address); commercial information (subscription/billing records); internet or network activity (usage and analytics data); precise geolocation (ticket geotags and, where enabled, live tracking — treated as "sensitive personal information"); audio/visual data (uploaded photos and documents); and professional/employment-related information about drivers and subcontractors that you enter.
We do not sell personal information for money, and we do not "sell" or "share" the personal information or business data you enter into the app for cross-context behavioral advertising. One exception on our marketing website only: we use the Meta (Facebook) advertising pixel, which may disclose limited browsing activity to Meta to measure our ads. Under the CPRA this may be considered "sharing." This applies only to visitors of dumptruckboss.com, never to data inside the product. You can opt out of this (see "How to opt out" below).
You have the right to: know/access the personal information we collect and how we use it; delete it; correct it; opt out of any "sale" or "sharing"; and limit the use of sensitive personal information. We will not discriminate against you for exercising these rights.
We use precise geolocation only to provide the features described in Section 4 — not to infer characteristics about you. This is consistent with the limited purposes permitted under the CPRA.
Because we do not sell your data and do not share in-app data for advertising, most users have nothing to opt out of. To opt out of the marketing-website advertising pixel, you can decline non-essential cookies in our cookie banner, use your browser's tracking controls, or enable a Global Privacy Control (GPC) signal, which we honor as an opt-out request. You may also email mj@dumptruckboss.com with "California Privacy Request" in the subject.
DumpTruckBoss is operated from the United States and our infrastructure is US-based. If you access the Service from outside the US, you understand your data will be transferred to and processed in the United States.
Where the GDPR or UK GDPR applies and we act as a controller, we process personal data on the basis of: performance of a contract (to provide the Service you signed up for); our legitimate interests (to secure, support, and improve the Service); consent (for marketing and non-essential cookies); and compliance with legal obligations. Where we act as a processor for your business data, we do so under your instructions and a data-processing agreement.
For transfers of personal data from the EEA/UK to the US, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, available as part of a DPA on request.
Subject to applicable law, you may have rights to access, correct, delete, restrict, or object to processing, and to data portability, and to lodge a complaint with your local supervisory authority. To exercise these, contact us at mj@dumptruckboss.com.
We use cookies and similar browser storage to operate the platform and understand how our website is used:
You can decline non-essential cookies via our cookie banner, manage cookies in your browser settings, and enable a Global Privacy Control (GPC) signal, which we honor. Disabling essential cookies will prevent you from logging into the platform.
With your account we may send you service-related (transactional) messages — these are necessary to operate your account and cannot be opted out of while your account is active. Separately, we may send product news and promotional emails. You can opt out of promotional email at any time using the unsubscribe link in any such email or by emailing us; opting out of promotional email does not affect transactional messages. We do not sell your email address.
We maintain measures designed to detect and respond to security incidents. If we become aware of a data breach affecting your personal information, we will notify affected customers without undue delay and, where required, within the timeframes mandated by applicable law — by email to your account contact and/or a prominent notice in the platform — including, to the extent known, what happened, the data involved, and the steps we are taking.
DumpTruckBoss is a business-to-business platform and is not directed at children under the age of 16. We do not knowingly collect personal information from anyone under 16. If you believe we have inadvertently collected such information, contact us immediately and we will delete it promptly.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the effective date at the top of this page. Your continued use of the platform after changes take effect constitutes your acceptance of the revised policy.
Change log: August 30, 2026 — added California (CCPA/CPRA) and international (GDPR/UK) sections; added a dedicated Location & GPS Tracking section; clarified our controller/processor roles; expanded the sub-processor list and added DPA availability; added data-breach notification and per-type retention periods.
This Privacy Policy is governed by the laws of the State of Georgia, USA, without regard to conflict-of-laws principles, except where a mandatory consumer-privacy law of your jurisdiction provides you additional rights.
For privacy-related questions, requests, complaints, to request a DPA, or to exercise your data rights:
DumpTruckBoss LLC
Mailing address: available on request
State: Georgia, USA
Privacy contact: mj@dumptruckboss.com
Website: dumptruckboss.com
We aim to respond to all privacy inquiries within the timeframe required by applicable law (generally 30–45 days).