Privacy Policy
CargoDox is a marketplace for truck parking. We connect drivers who need a space with the people who own the lots. We do not own or operate any lot.
This policy explains what we collect, why we collect it, who we share it with, and how to get it deleted.
What we collect
What you give us
- Your name, email address, and phone number when you create an account.
- Your carrier or company name, if you give it.
- Your vehicle's license plate, so the lot knows which truck belongs in the space.
- Your booking details — which lot, which space, which dates, what you paid, and the tax on it.
- Anything you write to us: contact-form messages, and reviews you leave after a stay.
What we collect automatically
- A cookie that keeps you signed in.
- A record of the cookie choice you made, stored in your browser.
- If you accept analytics cookies: which pages you visit and which buttons you click. These records are tied to an internal account number — never your name, email, phone, or plate. We do not record your screen.
- Error reports when something on the site breaks, so we can fix it. These do not include your personal details.
- A record of changes made to your booking, for our own accountability. This includes the IP address the change came from.
- Your approximate location, only if you allow it, and only to show you the closest lots.
What we do not do
- We do not sell your data. We do not rent it. We never have.
- We do not run advertising, and we do not share your data with advertisers or data brokers.
- We do not collect fingerprints, face scans, or any other biometric information. We own no cameras and operate no gates. Some lots have their own security equipment — that belongs to the lot owner, not to us, and we do not receive footage from it.
- We do not store your card number. Card and bank details go straight to our payment processor.
Who we share it with
We share only what a company needs in order to do its job for us:
- Stripe handles payments. Stripe receives your email address and the amount owed, and collects your card or bank details directly. We never see or store them.
- Supabase stores our database and runs the sign-in system.
- Vercel hosts our websites.
- PostHog provides analytics — only if you accepted analytics cookies.
- Sentry collects error reports so we can fix what breaks.
- MapTiler provides our maps and address search.
- Cloudflare checks that form submissions come from a person, not a bot.
- Google, only if you choose "Continue with Google" to sign in.
- Expo delivers push notifications to the mobile app, if you turn them on.
- When we start sending booking emails, our email provider will receive your email address and the contents of that email. We are not sending customer email yet.
The owner of the lot you book can see your booking: your name, your carrier, your license plate, your dates, your email address, and your phone number. That is how they know which truck to expect and how to reach you. Lot owners never see your card or bank details, and they cannot see anything about bookings at other lots.
We will hand over data if the law requires it — a subpoena, a court order, or a tax audit.
Cookies
We use three kinds of browser storage:
- A sign-in cookie. Required — without it you cannot stay signed in.
- A record of your cookie choice. Required, so we do not ask you every visit.
- Analytics cookies. Optional. They are off by default. They stay off unless you press Accept, and pressing Decline keeps them off permanently.
You can change your mind at any time using the Cookie settings link in the footer.
How long we keep it
- Your personal information — name, email, phone, saved vehicles, your login — is permanently deleted 30 days after you ask us to delete your account.
- Your financial records — bookings and invoices — are kept for about seven years for tax and accounting reasons, but your personal details are stripped out of them first. What is left is dates and dollar amounts, attached to nobody.
- Tax records are kept as long as the law requires, which for parking tax in Illinois and Cook County has no fixed end. These records contain no personal information about you — only what tax was charged on which booking.
- Our accountability records — the log of who changed a booking, and messages sent through the contact form before you had an account — are kept as records of what happened, so they are not removed when an account is deleted.
Deleting your account
Go to cargodox.com/delete-account, or open the mobile app and use Delete Account.
- You will need to cancel or finish any active booking first.
- After you request it, you have 30 days to change your mind— sign back in and press "Cancel deletion."
- After 30 days it is permanent and cannot be undone.
Your other rights
Email info@cargodox.com to ask what we hold about you, to correct something that is wrong, or to ask a question about this policy. We will respond as required by law.
Security
Access to customer data is restricted by database-level permissions, not just by what a screen shows. Staff accounts require two-factor authentication. We will notify you as required by law if your data is ever exposed.
Children
CargoDox is a service for commercial truck drivers. It is not directed to anyone under 18, and we do not knowingly collect information about minors.
Changes to this policy
If we change this policy we will update it here and change the effective date at the top of the page.