Privacy Policy

• Account information: name, email address, role, organization and authentication data (including multi-factor settings).
• Customer Data you submit: loads, rate confirmations, proof-of-delivery and other documents, carrier, driver and vehicle records, invoices, and contact details of brokers and drivers.
• Integration data: data exchanged with services you connect, such as accounting and telematics providers (see sections 3 and 4).
• Usage and device data: log data, IP address, browser type, pages and features used, and error reports, collected to operate, secure and improve the Service.

• to provide, maintain and support the Service and the features you request;
• to authenticate users, enforce organization access controls and prevent abuse or fraud;
• to process documents you upload (for example, extracting load details from rate confirmations);
• to communicate with you about the Service, security and changes to our terms;
• to diagnose problems and improve reliability and performance.

We do not sell personal information, and we do not use Customer Data for advertising.

If an organization owner or administrator connects QuickBooks Online, we use Intuit’s OAuth 2.0 authorization. You sign in to Intuit directly; we never see or store your Intuit password.

• What we access: we use the QuickBooks Online Accounting API to look up and create customers (the broker being billed) and to create and update invoices that originate in Spider TMS (invoice number, amount, dates, description and item reference).
• What we store: the connected company identifier (realm ID), OAuth access and refresh tokens, your integration settings, and for each synced invoice the QuickBooks invoice identifier and sync status. QuickBooks access tokens are stored on our servers in an encrypted database (encrypted at rest by our infrastructure provider and protected in transit by TLS). They are never sent to the browser or any client device, are used strictly to synchronize invoices and customers with your QuickBooks company, and are not shared with any third party (other than Intuit itself, when we call the QuickBooks API they were issued for) or with external AI models.
• How we use it: solely to perform the synchronization you request or enable. We do not share QuickBooks data with other customers, do not sell it, and do not send it to advertising or AI model providers.
• Disconnecting: owners and administrators can disconnect QuickBooks at any time in Settings → Integrations → QuickBooks, which revokes the authorization and deletes the stored tokens. You can also revoke access from your Intuit account. Invoices already created in QuickBooks remain in your QuickBooks company.

Use of QuickBooks is also subject to Intuit’s own terms and privacy statement.

We share information only as needed to run the Service:

• Infrastructure providers that host the application, database and file storage on our behalf;
• Document-processing providers used for features you invoke, such as reading uploaded rate confirmations, which receive only the document being processed;
• Integrations you enable, such as telematics or accounting services, which receive the data needed for that integration;
• Within your organization: other members see Customer Data according to the roles and permissions your administrators set;
• Legal and safety: when required by law, or to protect the rights, safety and security of users and the Service.

Service providers are bound to protect the information and to use it only for the services they perform for us.

We protect information with measures that include encrypted connections (HTTPS/TLS), strict isolation between customer organizations enforced at the database level, role-based access controls, optional multi-factor authentication, and restricted server-side handling of integration credentials. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We keep Customer Data for as long as your organization’s account is active and as needed to provide the Service. After an account is closed, we delete or anonymize Customer Data within a reasonable period, except where we must retain it for legal, tax, security or dispute-resolution reasons. QuickBooks access tokens are deleted when the integration is disconnected. Backups are overwritten on a regular schedule. Organization administrators can delete records within the Service, and you may ask us to delete your data at support@spidertms.com.

Depending on where you live, you may have the right to access, correct, export or delete your personal information, or to object to or restrict certain processing. Because we process most data on behalf of customer organizations, we may direct your request to the organization that controls the data. To exercise your rights, contact us at support@spidertms.com.

We use cookies and browser storage that are necessary to keep you signed in, remember your organization and interface preferences, and keep the Service secure. We do not use them for third-party advertising.

Information may be processed in countries other than where you live. Where required, we use appropriate safeguards for such transfers.

The Service is intended for business use and is not directed to children under 16. We do not knowingly collect their personal information.

We may update this Privacy Policy from time to time. We will post the updated version here with a new effective date and, for material changes, notify you in the Service or by email.

Questions or requests about privacy? Write to support@spidertms.com. The controller of this Service is BREGSS EXPRESS LLC (Spider TMS), Indian Trail, NC, USA. This policy is governed by the laws of the State of North Carolina, United States. Our Terms of Service also apply to your use of the Service.