Privacy statement

What the software stores today

Load Lounge is the broker desk. An account is an email address and a password held by Supabase Auth, plus the name you enter. A workspace stores the business name, phone, billing email, and address that an owner types. Customers, carriers, quotes, and loads are rows in that workspace. People in one workspace are not supposed to see another workspace. This draft does not claim that the live database policies were re-checked.

Files for loads and carriers go in Supabase Storage buckets named load-documents and carrier-documents. The schema marks those buckets private. The org-assets bucket, used for a workspace logo, is marked public in the schema. Do not put a private document there.

Sign-in uses Supabase session cookies. The app also stores the selected workspace in a cookie named tll_org. There is no cookie banner and no record of cookie consent.

If a server FMCSA WebKey is set, a carrier lookup sends the MC or DOT number you entered to the FMCSA QCMobile service. If the key is not set, that lookup does not run. The app does not use Stripe, DocuSign, or a separate analytics product.

Vercel hosts the site and can run the carrier re-check job. That job uses a server-only service role key. The browser receives the Supabase anon key, not the service role key.

What is not live

Structured experience ratings, private report evidence, and tax-ID verification are designs in unmerged work or are not built. They are not part of the site this draft describes as running. If tax-ID verification is added later, the plan is a specialist provider. Raw Social Security numbers are not to be typed into this app, into chat, or into a general upload. That provider is not connected.

Checkout uses a Square hosted page. This site does not store card numbers. It stores a purchase record, the product, the amount, and the time someone checked the terms box. A no-refund agreement stores the user, the policy version, the time, and the IP address and browser sent with that request. A mentorship application stores the name, email, phone, city, state, and the answers on the form. It does not ask for a Social Security number or an EIN, and it does not take a card payment.

Access and deletion

The product has no export button and no deletion button. A request cannot be completed inside the app. No contact address for those requests has been published. Until the owner adds one, this draft cannot promise a response time.

Owner checklist

• Legal entity name that would be the operator of Load Lounge.
• A published contact for privacy, access, and deletion requests. None is in the product.
• How long account, file, and log data are kept. No retention period is set.
• Whether production Supabase storage policies match the schema in this repository. That has not been verified.
• Counsel review of the requested Georgia governing law and Rabun County venue.
• Counsel review of the requested NDA and the requested noncompete of two years plus six months after departure, including the states where people work.
• Whether a one-time document package still includes updates if an account closes or a base plan lapses.
• When the one month of LTL quoting included with the LTL course would start, and whether it renews. It must not turn into a paid plan by itself.
• Mentorship commission and exit terms. The fee is due only after acceptance, and the program asks for a two-year commitment. The required course is any completed Lounge course, not one named title.
• DocuSign integration key and secret. Envelopes are not sent.
• Monthly software or reporting prices other than the $79 Prospect CRM. Earlier figures were recommendations only and are not in this catalog.