Privacy Policy

Last updated: May 4, 2026

This Privacy Policy explains how Logbaza ("we", "us", "our") collects, uses, shares, and protects information about you when you use logbaza.com and our services (the "Services"). It applies to visitors, registered users, and people whose information is in our public databases (e.g. FMCSA Census).

1. What we collect

Account information — name, email, phone, password (hashed), company name, role, USDOT/MC numbers when registering.

Profile + content — vehicle photos, driver records, fleet details, ratings, applications you submit on the marketplace.

Authentication providers — if you sign in with Google, we receive your name, email, and Google account ID (no password).

Automatically collected — IP address, browser type, OS, referring URL, pages visited, device fingerprint subset (screen size, language). Stored in server logs and cookies.

Public records — FMCSA Company Census data (legal name, DOT/MC, address, fleet size, safety rating). Sourced from data.transportation.gov, refreshed weekly.

Cookies — see our Cookie Policy for the full list.

2. Why we use it

  • Operate the marketplace — match dispatchers and truck owners, process applications, support ratings.
  • Authenticate you and protect your account.
  • Send transactional email — application status, password reset, account verification.
  • Send product updates and marketing email if you opted in (you can unsubscribe in every email).
  • Analyze usage to improve the product (only with your analytics-cookie consent).
  • Detect fraud, abuse, scraping, and CSAM.
  • Comply with legal obligations (e.g. subpoenas, FMCSA reporting).

3. Legal basis (GDPR)

If you are in the EEA / UK / Switzerland, our legal bases are:

  • Contract — to deliver the marketplace service you signed up for.
  • Consent — analytics cookies, marketing emails, optional profile fields.
  • Legitimate interest — fraud prevention, security, product improvement, public-records aggregation (FMCSA).
  • Legal obligation — tax records, lawful subpoenas.

4. Who we share with

  • Other users — your public profile (company name, fleet, ratings) is visible to other registered users on the marketplace by design.
  • Service providers (sub-processors) — hosting (DigitalOcean), email delivery (Amazon SES), analytics (Google Analytics, only if you consent), error tracking. Each is bound by data-processing terms.
  • Government / law enforcement — if compelled by a valid legal process, or to prevent imminent harm.
  • Buyers / successors — in a merger, acquisition, or asset sale, with notice to you.

We do not sell your personal information to third parties for monetary value, and we do not "share" it for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.

5. Your rights

Regardless of where you live, you can:

  • Access — request a copy of the personal information we hold about you.
  • Correct — fix anything inaccurate. Most fields are editable in your account; for the rest, email us.
  • Delete — request erasure of your account and personal data. Some records may be retained when required by law.
  • Export / portability — receive your data in a machine-readable format (JSON / CSV).
  • Object / restrict — opt out of marketing email, analytics, certain processing.
  • Withdraw consent — at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, email privacy@logbaza.com with the subject "Data Request — <your right>". We respond within 30 days. We may need to verify your identity before fulfilling requests.

EEA / UK residents can also lodge a complaint with their local data protection authority.

6. California rights (CCPA / CPRA)

California residents have the rights above plus:

  • Know the categories of personal information collected, sources, purposes, and recipients in the past 12 months.
  • Opt out of "sale" or "sharing" for cross-context behavioral advertising — though we do not engage in either.
  • Limit use of "sensitive personal information" — we do not collect sensitive PI as defined by CPRA.
  • Non-discrimination for exercising any right.

Submit requests via our Do Not Sell page or privacy@logbaza.com. We will not require you to create an account to make a request.

7. Retention

  • Active account data — kept while your account is open and for 90 days after deletion (to handle reversals + disputes).
  • Server logs — 30 days, then aggregated.
  • Backups — 90 days rolling.
  • Legal records (tax, subpoenas) — as required by law (typically 7 years).
  • FMCSA Census records — refreshed weekly; old snapshots dropped on overwrite.

8. Security

We use industry-standard measures: TLS in transit, hashed passwords (bcrypt), least-privilege access, encrypted backups, audit logs. No system is 100% secure — if we discover a breach affecting your data, we will notify you and competent authorities as required by GDPR (within 72 hours where applicable) and US state breach laws.

9. International transfers

Logbaza is hosted in the United States. If you access from the EEA / UK / Switzerland, your data is transferred to the US under Standard Contractual Clauses with our processors and additional safeguards.

10. Children

Logbaza is for business users (carriers, dispatchers) and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us data, contact us — we will delete it.

11. Marketing communications

We send marketing email only if you opt in. Every marketing email includes an unsubscribe link (CAN-SPAM compliant). Transactional email (password reset, application status, account verification) is sent regardless and cannot be opted out of while you have an active account.

12. Cookies + tracking

We use a minimal set of cookies. Essential cookies (login, CSRF, session) are always on. Analytics and marketing cookies fire only with your consent — you can change preferences at any time via the . Full list: Cookie Policy.

13. Do Not Track

We honor the Global Privacy Control (GPC) signal. When your browser sends GPC, we treat it as an opt-out of "sale" / "sharing" under CCPA — though as stated above, we do not sell or share for behavioral advertising regardless.

14. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted here with a new "Last updated" date and (for registered users) emailed at least 14 days before they take effect. Continued use after the effective date constitutes acceptance.

15. Contact

Questions, requests, complaints — email privacy@logbaza.com or write to us at the postal address listed in our footer. We do not currently have a designated EU representative; if you need one, contact us and we will appoint one.