Privacy Policy

We collect information you provide directly to us when you create an account, complete your profile, or interact with our platform. This includes:

Personal Identification Information (PII):

• Full name, email address, phone number, and mailing address

• Commercial Driver's License (CDL) number, class, and endorsements

• Employment history, including carrier names, dates, and positions

• Social Security Number (encrypted, for verification purposes only)

• Date of birth and driver photograph

Carrier Information:

• Company name, DOT number, MC number, and FMCSA registration details

• Business contact information and authorized representative details

• Fleet size, operational areas, and hiring requirements

Usage Data:

• Pages visited, features used, and time spent on the platform

• Device information, IP address, browser type, and operating system

• Search queries and filter preferences

FMCSA and DOT Data:

• We may access publicly available Federal Motor Carrier Safety Administration (FMCSA) records to verify carrier credentials, safety ratings, and compliance status

• Pre-Employment Screening Program (PSP) data may be processed with driver consent

We use the information we collect to:

Provide and improve our services: Match drivers with carriers, facilitate job applications, and manage subscriptions and token purchases

Verify identities: Confirm CDL credentials, carrier DOT numbers, and FMCSA compliance status

Process payments: Handle subscription billing, token purchases, and investor distributions through Stripe

Communicate with you: Send service updates, job alerts, application status notifications, SMS text messages, call connection notifications, and support responses

Ensure platform safety: Detect fraud, prevent unauthorized access, and maintain the integrity of driver and carrier profiles

Generate analytics: Provide carriers with aggregated hiring insights and drivers with market data (no individual PII is shared without consent)

Legal compliance: Meet requirements under FMCSA regulations, DOT reporting obligations, and applicable state and federal laws

We take data sharing seriously and only share your information in the following circumstances:

With Your Consent:

• When a carrier unlocks a driver's contact information through our subscription or token system, the driver's contact details are shared with that specific carrier

• Drivers control their profile visibility and can opt out of search results at any time

Service Providers:

Stripe: For payment processing (subscription billing and token purchases)

Amazon Web Services (AWS): For secure data storage and hosting via S3

Twilio Inc.: For SMS text message delivery and call proxy services. Twilio processes your phone number to deliver messages and connect calls. See Twilio's privacy policy at https://www.twilio.com/legal/privacy

Email providers: For transactional notifications and alerts

Legal Requirements:

• We may disclose information when required by law, regulation, or legal process

• To comply with FMCSA audits, DOT investigations, or other regulatory inquiries

• To protect the rights, safety, and property of CDL Empire, our users, or the public

Business Transfers:

• In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the transaction. We will notify affected users before their data is subject to a different privacy policy.

We do not sell your personal information to third parties for marketing purposes.

We implement industry-standard security measures to protect your information:

Encryption:

• All PII is encrypted at rest using **AES-256 encryption**

• Data in transit is protected with TLS 1.2+ encryption

• CDL numbers, Social Security Numbers, and other sensitive identifiers are stored using additional field-level encryption

Access Controls:

• Role-based access control (RBAC) limits data access to authorized personnel only

• Multi-factor authentication is available for all accounts

• API access is secured with JWT tokens with automatic expiration

Infrastructure Security:

• Our systems are hosted on secure cloud infrastructure with SOC 2 compliance

• Regular security audits and penetration testing are conducted

• Automated monitoring detects and responds to potential security threats

FMCSA Data Handling:

• All FMCSA-related data is handled in accordance with federal regulations

• PSP records are accessed only with explicit driver consent and are not stored beyond the verification process

• Carrier safety data is sourced from publicly available FMCSA databases

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We encourage users to use strong passwords and keep their credentials confidential.

You have the following rights regarding your personal information:

Access and Portability:

• Request a copy of the personal information we hold about you

• Export your profile data, employment history, and documents in a standard format

Correction:

• Update or correct inaccurate information in your profile at any time through your dashboard

• Request corrections to information that cannot be self-edited

Deletion:

• Request deletion of your account and associated personal information

• Note: Some data may be retained as required by law or for legitimate business purposes (e.g., payment records for tax compliance)

Opt-Out:

• Opt out of marketing communications at any time via email preferences

• Control your profile visibility in search results

• Withdraw consent for PSP data processing

California Residents (CCPA):

• Right to know what personal information is collected, used, shared, or sold

• Right to delete personal information held by the business

• Right to opt out of the sale of personal information

• Right to non-discrimination for exercising these rights

To exercise any of these rights, contact us at privacy@cdlempire.com or through your account settings.

CDL Empire uses SMS text messages and a call proxy service to facilitate communication between users. This section explains how your phone number and communication data are handled.

Phone Number Collection and Storage:

• Your phone number is collected during account registration or profile setup

• Driver and Carrier phone numbers are encrypted at rest using AES-256-GCM field-level encryption

• Your phone number is only used for Platform-related communications — never sold or shared for marketing

SMS Messages:

• SMS messages are sent via Twilio Inc. from our toll-free number: +1 (833) 712-5562

• Message types include: direct message alerts, service request updates, job application notifications, and account security alerts

• Message frequency varies by account activity (typically 1-10 per week)

• Message and data rates may apply depending on your mobile carrier

• Reply STOP to opt out of all SMS messages at any time

• Reply HELP for assistance

• Opting out does not affect your account or in-app notifications

• SMS delivery metadata (message SID, delivery status, timestamps) is logged for service reliability

• Message content is not stored by Twilio after delivery

Call Proxy Service:

• When you call another user through the Platform, CDL Empire uses Twilio to connect the call

• Both parties see only the CDL Empire toll-free number — real phone numbers are never displayed to the other party

• Call metadata (caller ID, recipient ID, duration, status, timestamp) is logged for quality assurance

• Call audio is NOT recorded by CDL Empire or Twilio

• Call metadata is retained for 12 months, then automatically deleted

Your Controls:

• Enable or disable SMS notifications in account settings (SMS Preferences)

• Toggle specific notification categories: messages, job alerts, applications

• Reply STOP to any SMS to immediately unsubscribe

• Contact privacy@cdlempire.com to request deletion of call logs or SMS delivery records

We use cookies and similar tracking technologies to enhance your experience:

Essential Cookies:

• Required for platform functionality, including authentication, session management, and security

• Cannot be disabled without affecting core platform features

Analytics Cookies:

• Help us understand how users interact with our platform

• Used to improve features, performance, and user experience

• Data is aggregated and anonymized

Preference Cookies:

• Remember your settings, such as language preferences and dashboard layout

• Store search filters and notification preferences

Managing Cookies:

• You can manage cookie preferences through your browser settings

• Disabling certain cookies may limit platform functionality

• We respect Do Not Track (DNT) browser signals

We do not use cookies for third-party advertising purposes.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

CDL Empire Privacy Team

Email: privacy@cdlempire.com

General: info@cdlempire.com

Mailing Address:

CDL Empire

4925 Greenville Ave, Suite 200

Dallas, TX 75206

Response Times:

• Privacy-related inquiries: Within 30 days

• Data access or deletion requests: Within 45 days

• General questions: Within 5 business days

For urgent security concerns, please email security@cdlempire.com.