Privacy Policy

Last updated: September 27, 2026

1. Information We Collect

Information You Provide

We collect information you provide directly to us, including:

• Account Information: Name, email address, phone number, company name, and billing information when you create an account
• Shipment Data: Origin and destination addresses, commodity details, weight, dimensions, and special instructions
• Carrier & Customer Records: Contact information, MC numbers, DOT numbers, insurance details, and payment terms
• Driver and Worker Records: For the drivers and other workers your company manages: contact details, date of birth, driver's license and medical certificate details, Social Security number, drug and alcohol test results, and safety records such as accidents, citations and inspections
• Tax and Bank Details: Tax ID numbers (an EIN, or a Social Security number for a sole proprietor) and bank account and routing numbers, used to pay carriers and vendors and for tax records
• Documents and Email: Rate confirmations, bills of lading, proof of delivery, invoices and other documents you upload, and the messages in email inboxes you connect
• Communications: Messages, support tickets, and correspondence you send to us
• Payment Information: Credit card or bank account details processed securely through our payment processor (Stripe)

Information Collected Automatically

When you use our services, we automatically collect:

• Usage Data: Actions taken in the application, which we keep in an audit log, and how much you use features that cost us per use, such as AI and text messages
• Device Information: Browser type, operating system, device identifiers, and IP address
• Location Data: Truck, trailer and driver locations (see "Location Data" below)
• Log Data: Server logs, error reports, and performance metrics

Information from Third Parties

We may receive information from:

• FMCSA: Carrier safety ratings and authority information
• EDI Partners: Load tenders and shipment status updates
• Services Your Company Connects: For example ELD and tracking services, load boards, fuel card and accounting systems, which send us locations, driver hours, transactions and records

Location Data

We receive the locations of trucks and trailers from the tracking and ELD services your company connects (such as Samsara, ORBCOMM or FourKites), from trading partners' status messages, and from check calls. A driver can also send their location from a status-update link by tapping a button; their browser asks permission first.

We use location data to track shipments, estimate arrival times, and support detention charges and claims. Your company's users can see it. Customers you share a shipment with see the city and state of its check calls. We keep location history while your company's account is active.

Sensitive Information

Social Security numbers, the tax ID numbers of carriers, vendors and customers, bank account numbers, and drug and alcohol test results are encrypted in our database. Social Security numbers are shown only as their last four digits. Drug and alcohol test results are shown only to users your company gives that permission. We use this information only for the purpose your company collected it for, such as payroll, payments, tax records and safety compliance.

If You Are a Driver

The company you drive or haul for decides what information about you it keeps in Grand Island Express. For questions about your information, contact that company, or contact us at it@giexpress.com.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments and questions
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and abuse
• Read documents, draft messages and answer questions with AI, as described in Section 11
• Personalize and improve your experience
• Comply with legal obligations and enforce our terms

3. Information Sharing

We do not sell your personal information. We may share information as follows:

• With Service Providers: Companies that process information for us, only to provide the Service:
  • DigitalOcean: hosting, database and file storage, in the United States
  • Anthropic: AI features (see Section 11)
  • SendGrid or Microsoft: email delivery
  • Twilio: text messages
  • Google Maps Platform: address lookup, maps and routes
  • Expo: notifications to the driver app
  • Backblaze: encrypted backups
  • Stripe: billing and payments
• With Business Partners: Carriers, customers, and vendors you choose to work with through our platform
• With Services Your Company Connects: When your company connects another service, such as an ELD, load board, accounting system or EDI trading partner, we send it the information that connection needs. That service's own terms and privacy policy apply.
• For Legal Reasons: When required by law, legal process, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you direct us to share information

4. Data Retention

We retain your information for as long as your account is active or as needed to provide services. We also retain information as necessary to:

• Comply with legal obligations (e.g., tax records for 7 years)
• Resolve disputes and enforce agreements
• Maintain business records required by regulations

When your company's account is cancelled, we keep its data until your company asks us in writing to delete it. We delete the data 90 days after that request, and your company can ask us for a copy during those 90 days. Copies in our backups are deleted as the backups expire. To request deletion, contact us at it@giexpress.com.

5. Data Security

We implement industry-standard security measures including:

• Encryption in transit (HTTPS), and encryption of the sensitive information described in Section 1 (AES-256)
• Permissions that control what each user can see and do, and two-factor sign-in
• Checks that stop new passwords that have appeared in known data breaches
• Hosting in DigitalOcean data centers in the United States

While we strive to protect your information, no method of transmission over the Internet is 100% secure.

6. Your Rights and Choices

Access and Portability

You can export lists from the application as spreadsheets, or contact us for a copy of your company's data.

Correction

You can update your account information at any time through your profile settings.

Deletion

You can request deletion of your account and personal data. Some information may be retained as required by law.

Marketing Communications

You can opt out of marketing emails by clicking "unsubscribe" in any marketing message or updating your notification preferences.

Cookies

We use one cookie, which keeps you signed in. We do not use advertising or analytics cookies.

7. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we collect
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell personal information
• Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, contact us at it@giexpress.com.

8. International Data Transfers

Our services are hosted in the United States. If you access our services from outside the US, your information may be transferred to, stored, and processed in the US where data protection laws may differ from your jurisdiction.

9. Children's Privacy

Our services are not directed to children under 16, and we do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date.

11. Artificial Intelligence

Some features send information to Anthropic, whose Claude models read documents you upload or receive by email (such as rate confirmations, bills and remittances), draft emails and messages, answer questions in the in-app assistant, translate messages with drivers who use another language, check that an uploaded rate confirmation is signed, and sort support requests. Each feature sends only the information it needs, such as the document being read.

We do not use your information to train AI models. Under Anthropic's commercial terms, Anthropic does not train its models on the information we send it.

Most AI features make a suggestion that a person accepts or changes. A few act on their own: AI negotiation, when your company turns it on, emails carriers offers and counteroffers within the limits your company sets; the assistant carries out actions a user asks for in the chat, such as sending a rate confirmation; messages to drivers who use another language are translated as they are sent; and a rate confirmation that does not appear signed is returned to the carrier, who can submit it anyway.

We do not use AI to screen job applicants or to score drivers or carriers.

12. SMS / Text Message Communications

If you or your organization uses Grand Island Express's SMS messaging features, we may send text messages to phone numbers you provide, including load availability notifications, freight booking confirmations, rate updates, and other business communications. Message frequency varies based on load availability and business activity.

Message and data rates may apply. You may opt out at any time by replying STOP to any message. Reply HELP for assistance. We do not share your phone number with third parties for their own marketing purposes.

For questions about SMS communications, contact us at it@giexpress.com.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us: