Privacy Policy

Fr8Desk is run by Espinosa Freight Systems LLC (“we”, “us”), a Florida company. This policy explains what we collect when you use Fr8Desk, why, and the choices you have. It works together with our Terms of Service.

Fr8Desk handles two kinds of information:

• Your account. Who you are as an Fr8Desk customer. We decide how this is used, as described here.
• Your workspace's business data. The carriers, drivers, leads, brokers, loads, documents and messages you put in. You (the dispatcher) decide what goes in and how it's used; we only process it to run Fr8Desk for you. If you are one of a dispatcher's carriers or leads, that dispatcher's own privacy notice applies, and they're the right person to ask first.

• Account details: your name, email, phone number, password (stored only as a secure hash), company name, MC number, time zone, and your Google account id if you sign in with Google.
• Business data you put in: everything you add to your workspace, including other people's names, phone numbers, emails, addresses, documents (W-9, COI, authority letters, void checks) and truck locations you record.
• Payment details: handled by Stripe. We never see or store your full card number; we keep the Stripe customer and subscription ids, the amounts and dates.
• Usage and device data: sign-in times, the IP address and browser of each signed-in session, and error logs, to keep accounts secure and fix problems.
• Support conversations: what you send us when you ask for help.

• to provide Fr8Desk: your account, your workspace, its features and its messages
• to bill your subscription and show the processing fee upfront
• to keep Fr8Desk secure: spotting abuse, limiting sign-in attempts, investigating problems
• to give you support, including looking inside your workspace when you ask us to
• to email you about your account, billing and important changes (these aren't marketing)
• to meet legal obligations, like keeping payment records

We don't sell personal information, we don't share it for advertising, and we don't use your workspace's business data to train AI models.

We share information with these service providers only so they can do their part of running Fr8Desk. Each one is bound to protect it.

Vercel

Hosts the app and stores uploaded files (Vercel Blob).

Turso

Hosts each workspace's private database and our account database.

Stripe

Takes subscription payments, and runs Stripe Connect when a dispatcher connects their own account.

Authorize.net

Takes invoice payments when a dispatcher connects it.

Resend

Sends email: account emails and the emails dispatchers send from their desk.

Twilio

Sends and receives the text messages dispatchers send from their desk.

Google

Sign in with Google, when you choose it.

Google and Microsoft

Send email from a work mailbox you connect (Gmail, Outlook).

Anthropic

Reads rate confirmations you upload, to fill in a load for you.

Map and route providers

Mapbox, Photon (Komoot), OSRM and OpenFreeMap turn addresses into map points, draw maps and plan routes.

FMCSA

Public carrier records, looked up by MC or DOT number when you ask.

We may also share information if the law requires it, to protect people's safety or our rights, or as part of a sale or merger of our business (the new owner would be bound by this policy).

Fr8Desk is hosted in the United States. Every workspace has its own separate database; one dispatcher's data never shares a table with another's. Uploaded documents are encrypted before they're stored, and so are saved keys and connection tokens.

• While your subscription is active, we keep your workspace data until you delete it.
• When a subscription ends, the workspace becomes read-only for 30 days, then its database and every uploaded file are deleted.
• When the workspace owner deletes a workspace, it's deleted right away and can't be recovered.
• Accounts that no longer belong to any workspace are deleted with it.
• Payment records (amounts and dates) are kept as long as tax and accounting laws require, without your business data.
• Backups made by our providers roll off on their own schedules, usually within weeks.
• Marketplace records (signed Lead Exchange Agreements, carrier consent records, orders, payments, reports and ratings) are kept for at least 5 years after the trade, even if a workspace closes, so either party, a court or a regulator can rely on them.
• The Marketplace do-not-contact list is kept for as long as Fr8Desk runs, so a carrier's request is always honored. It holds only the USDOT number, phone or email and the reason.

You can see and correct your account details in Settings → My Profile, export your workspace data from Settings → Our Data, and delete your workspace from the Danger Area in Settings. You can also ask us to access, correct or delete your personal information; we'll answer within 30 days. Depending on where you live, you may have more rights under your state's law, and we'll honor them.

If you're a dispatcher's carrier or lead and want your information removed, ask that dispatcher first: they control their workspace. If you can't reach them, contact us and we'll help.

Dispatchers send texts and emails from Fr8Desk to their own leads and carriers; those messages come from the dispatcher's business, and the dispatcher is responsible for having consent. You can always reply STOP to a text, or use the unsubscribe link in an email, and Fr8Desk will stop that workspace's automated messages to you. We never use phone numbers or emails in a workspace to market Fr8Desk.

On Network, carriers, dispatch companies and Scouts who match can message each other. Those messages are private to the people in the conversation: the members of each company who can open it. They're encrypted when stored, and Fr8Desk staff don't read them.

• When you ask for help. Anyone in a conversation can ask Fr8Desk for help from it. Only then can a Fr8Desk admin read that conversation, including earlier messages, and only until the case is closed. Both sides are told when help is asked for and when the case closes, and every time staff open it is recorded.
• Resolution chats. Staff may open a separate chat with both sides to work things out. Everyone in it, Fr8Desk included, can read it, and it stays readable to them after the case closes.
• Reports. When you report a message, Fr8Desk sees only who sent it, when, and the words you choose to quote, not the conversation.

On the Fr8Desk Marketplace, Scouts (independent sellers running their own businesses, not Fr8Desk agents or employees) list carrier leads, and Fr8Desk subscribers buy them. Fr8Desk runs the venue; it doesn't sell, rent or share carrier information itself, and it contacts a carrier only to confirm an opt-out request. Each Scout is responsible for how it obtains a lead and the carrier's consent. Here is how the information moves:

• Teaser. Before a sale, anyone sees only a teaser: unit kind, state, fleet size, authority age, equipment, the seller's pitch and price, and the seller's public profile. Signed-in subscribers and Scouts also see the city, the lanes and the carrier's application answers. Never the carrier's name, USDOT or MC number, contact person, phone or email.
• Contact details. The carrier's identity and contact details are visible only to the Scout who listed it, Fr8Desk staff and, after payment, the one buying subscriber, who may copy them into its own workspace. The buyer becomes responsible for them under its own privacy notice.
• Carrier consent records. When a Scout sends a carrier a consent link, the carrier's representative enters their name and title, the phone and email they want to be reached at, and the channels they allow. We record that, the exact consent words (and their fingerprint), and the time, IP address and browser used. The record is shown to the Scout, the buyer of that lead and Fr8Desk staff.
• Do-not-list. Whatever a carrier enters at /optout (a USDOT number, a phone or an email) goes on Fr8Desk's do-not-list right away, and no listing with that USDOT number, phone or email can be offered on the Marketplace from then on. A phone or email also blocks texts, calls and emails to it from desks once it's confirmed from our link, or once a consent the carrier confirmed that carries it is revoked from the carrier's consent link, by its seller or by Fr8Desk staff, and no other consent that still stands carries it. We use the list for nothing else.
• Payments. Stripe processes Marketplace payments and payouts; we keep the order and payment records described in the Lead Exchange Agreement.

Carriers can revoke consent at any time from their consent link or at /optout. Anything entered there blocks new listings right away. Because anyone can look up a carrier's USDOT number, phone and email, consents a carrier already gave are revoked only when the carrier taps the confirmation link we send to a phone or email on its consent record, at most once a day (it works for 72 hours, and opening it changes nothing until the button is pressed). Sent to the contact FMCSA lists for the carrier, or one it gave two or more unrelated Scouts, the link revokes every consent the carrier gave; sent to any other contact on file, it revokes the consents that carry that phone or email. A phone or email entered on its own gets that link itself. If we can't text a phone and its consent has no email, a request with that phone revokes that consent right away. Every buyer of a revoked consent's lead is told to stop, and listings not yet sold are withdrawn. We may share Marketplace records with the parties to a trade, with a court or regulator when the law requires, or to defend a legal claim.

Fr8Desk uses essential cookies only, all our own. Your light or dark theme is saved in your own browser. We don't use advertising or analytics cookies in the app.

Sign-in

Keeps you signed in, until you sign out or the session ends.

Sidebar

Remembers whether you like the desk's sidebar open or narrow.

Sign-up

Ties a sign-up to the browser that started it, so only that browser is signed in after checkout. 24 hours.

Google sign-in

Short-lived cookies that make Sign in with Google (and One Tap) safe against forgery, while it runs.

Work mailbox

Short-lived, while you connect Gmail or Outlook to send email.

Demo

Which demo you opened (8 hours), and the referral you came with (30 days), so a sign-up credits it.

Application pages

A dispatcher's public application page sets one visitor cookie (180 days). It counts visits and ties a visit to the application sent from it; it doesn't track you across sites.

A dispatcher may add their own Meta Pixel to their public application page, to measure their ads. When they do, Meta may set cookies on that page only. That is the dispatcher's choice and covered by their privacy notice.

We use encryption in transit and for stored documents and secrets, separate databases per workspace, hashed passwords, rate limits on sign-in and audit logs for staff access. No system is perfectly secure; if a breach affects your information, we'll tell you as the law requires.

Fr8Desk is a business tool for adults. We don't knowingly collect information from anyone under 16. If you think a child gave us information, contact us and we'll delete it.

We'll update this policy when Fr8Desk changes. The date at the top shows the latest version, and we'll tell workspace owners about significant changes before they apply.

Questions or requests about your privacy? Sign in and use Help → Contact support inside the app. If you can't sign in, use Forgot Password? on the sign-in page first, or ask the owner of your workspace to contact us.