Privacy Policy

1. Data We Collect

We collect the following categories of information:

• Account data: email address, organization name, hashed password
• Organization & fleet data: truck details, cost profiles, operating parameters
• Evaluations: load evaluations, decisions, and calculation snapshots
• Financial data: expenses, P&L calculations, break-even analyses
• AI Advisor queries: questions you ask and responses generated
• Usage data: pages visited, features used, timestamps
• Billing metadata: Stripe customer ID, subscription ID (we never store card numbers)

2. How We Use Your Data

We use your data to: (a) provide and improve the Service, (b) calculate financial metrics and generate reports, (c) power the AI Advisor feature, (d) process billing, (e) send transactional emails (verification, password reset), and (f) respond to support requests.

3. Third-Party Processors

We share data with the following processors, only as necessary to operate the Service:

• Stripe — payment processing
• Resend — transactional email delivery
• OpenAI — AI Advisor responses (tenant-scoped data only, no personal data beyond your financial inputs)
• Render — application hosting and database
• Cloudflare R2 — file storage (reports)

4. Data Security

We implement industry-standard security measures including: encryption in transit (TLS), hashed passwords (bcrypt), session-based authentication, CSRF protection, tenant isolation via server-side org_id scoping, and least-privilege access controls.

5. Data Retention

• Account & evaluation data: retained until you delete your account
• AI Advisor logs: retained for 90 days, then automatically purged
• Audit logs: retained for 1 year
• Billing records: retained as required by law (typically 7 years)

6. Account Deletion

You may delete your account at any time from the Settings page. Upon deletion, we permanently remove your organization, user data, evaluations, cost profiles, expenses, and AI logs within 30 days. Backup copies may persist for up to an additional 30 days. Billing records are retained as required by law.

7. Your Rights

You have the right to: (a) access your data (available via in-app exports and Settings), (b) correct inaccurate data (editable in-app), (c) request deletion of your data (via Settings or by contacting us), and (d) request a copy of your data. Contact us at support@tnhiq.com for any data requests.

8. Cookies

We use a single essential session cookie for authentication. We do not use tracking cookies, advertising pixels, or third-party analytics cookies. No cookie consent banner is required as we only use strictly necessary cookies.

9. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or in-app notice. Continued use after changes constitutes acceptance.

11. Contact

For privacy-related questions or data requests, contact us at support@tnhiq.com.

TNHIQ LLC
Texas, United States