Privacy Policy
Effective: April 5, 2025 | Last revised: September 2, 2026
Who We Are
Veripod Corp — licensed freight broker, DOT# 4550659, MC# 1807190 — operates a technology platform connecting shippers with licensed motor carriers across the United States. Veripod Corp is incorporated in Delaware. For privacy-related questions, contact us at privacy@veripod.ai.
Data We Collect
Account Data
Name, email address, phone number, company name, and role on the platform (shipper, carrier, driver, or admin).
Precise GPS Location
Collected from the Veripod Corp driver mobile app and from ELD hardware integrations. GPS data is classified as Sensitive Personal Information under CCPA/CPRA and Sensitive Data under Virginia's VCDPA. Location collection is required for load tracking and proof-of-delivery and cannot be disabled for active drivers on active loads.
Biometric Identifiers
Collected via Plaid Identity Verification — facial geometry for liveness comparison, government-issued ID scans (CDL front and back), and phone number (collected and SMS-verified by Plaid as part of the IDV flow). See the separate Biometric Data Notice for full disclosure. Plaid acts as both a service provider to Veripod Corp and as an independent data controller with its own direct privacy relationship with end users. Plaid's End-User Privacy Policy and Biometric Policy: plaid.com/legal .
Billing and Settlement Data
Records of brokered transactions — rate, compensation, payer, freight charges collected, and the date paid to the carrier. Veripod Corp is required to keep a record of each transaction for three years under 49 CFR 371.3, and each party to a transaction has the right to review that record.
CDL Extracted Data
License number, state, expiration date, date of birth, and address extracted from Plaid IDV document scans and retained on the driver's verified profile.
Device and Technical Data
Device type, operating system, IP address (geo-enriched), browser/app version, and session identifiers.
Communication Data
In-app messages between shippers, carriers, and dispatchers; email content processed for AI-assisted load creation (only if enabled by the user).
Contact and Sales Inquiries
If you use the contact form on our website, we collect the name, email address, company, phone number (if provided), and message you submit, together with your browser type and a one-way hashed form of your IP address used only to detect abuse. This information is used to respond to your inquiry and, if you become a customer, is superseded by your Account Data.
Load and Transaction Records
Freight postings, bids, acceptances, delivery events, and status history.
Third-Party Data Processors
- Plaid Technologies, Inc. — identity verification and biometric processing. Plaid acts as both a service provider to Veripod Corp and as an independent data controller with a direct privacy relationship with end users. Drivers may manage their Plaid data independently at my.plaid.com or submit a data request at Plaid's data request form. Plaid privacy policy
- Twilio Inc. — transactional SMS (one-time passwords and load status alerts only; no marketing SMS)
- SendGrid (Twilio) — transactional email
- ELD providers — GPS and Hours-of-Service data from carrier ELD hardware integrations
- Weather data providers — weather enrichment for route data
- IP geolocation services — IP address enrichment for visitor analytics and security logging
Data Retention
Veripod Corp is a licensed property broker, not a motor carrier. We do not employ drivers, so the driver-qualification, hours-of-service, and medical-certificate retention duties under 49 CFR Parts 391 and 395 belong to the employing carrier rather than to us. Our own mandatory retention obligation is narrow, and we delete what we are not required to keep.
- Biometric identifiers: deleted at account closure or within 1 year of the end of your active relationship with Veripod Corp, whichever comes first — and in no event later than the 3-year outer limit set by Illinois BIPA. See the Biometric Data Notice. Plaid retains biometric data separately under its own policy.
- Brokered transaction records: retained 3 years, as required by 49 CFR 371.3. Each party to a transaction has a statutory right to review that record, so it cannot be deleted on request within that window.
- GPS/location data, POD and BOL documents: retained for as long as needed to substantiate a delivery in a cargo claim or payment dispute, and covered by the 3-year transaction-record requirement above. Deletion is performed on request.
- CDL extracted data and driver documents: retained while the driver account is active, then deleted on account closure.
- Contact and sales inquiries: retained for up to 24 months from submission, or until the inquiry converts to a customer account, whichever comes first. Deleted on request to privacy@veripod.ai.
- Anonymized analytics: retained indefinitely in aggregated, non-identifiable form.
Records subject to a litigation hold, an open cargo claim, or an unresolved payment dispute are retained until the matter is resolved. To request deletion of your data, contact privacy@veripod.ai.
Do We Sell Your Data?
No. Veripod Corp does not sell, rent, or trade personal data or biometric data to third parties.
Your Privacy Rights by State
California (CCPA/CPRA)
You have the right to know what data we collect and why, to delete your data, to correct inaccurate data, and to opt out of sale (we do not sell). GPS location and biometric data are Sensitive Personal Information — you have the right to limit their use to the core service purpose. Submit requests to privacy@veripod.ai.
Virginia (VCDPA)
You have rights to access, delete, correct, and port your data, and to opt out of profiling for decisions that produce legal effects. Precise geolocation is sensitive data under VCDPA: the Veripod Driver app collects it only after you grant location permission on your device, and you can withdraw that permission at any time in your device settings. Virginia law separately prohibits the sale of precise geolocation data outright; Veripod Corp does not sell precise geolocation data, or any other personal data, to anyone.
Colorado (CPA)
You have rights to access, delete, correct, and port your data, and to opt out of targeted advertising and profiling. Because Veripod Corp does not sell personal data and does not engage in targeted advertising, there is currently no such activity to opt out of. To confirm this status for your account, or to raise a request about an opt-out preference signal, contact privacy@veripod.ai.
Connecticut (CTDPA), Oregon (OCPA), Montana (MCDPA)
You have rights consistent with your respective state law, including access, deletion, correction, and portability. Contact privacy@veripod.ai to exercise any of these rights.
Illinois (BIPA)
Biometric data collection is governed by Illinois BIPA. See the Biometric Data Notice. You may request our retention policy and destruction schedule.
Texas (CUBI)
Biometric data collection complies with the Texas Capture or Use of Biometric Identifier Act. Data is destroyed within one year from last active use, or within the three-year BIPA maximum, whichever is earlier.
SMS Disclosure
Veripod Corp operates a single text-message program: one-time passcodes that confirm a driver's identity when signing in to the Veripod Driver mobile app. One message is sent per sign-in attempt, and only when the driver taps Send Code. We do not send marketing, promotional, or third-party messages, and we do not send messages to any number a carrier has not already provisioned as a driver. Reply STOP to stop receiving texts from Veripod — this stops all messages, including sign-in codes, so a driver who opts out will not receive a sign-in code until they reply START. Reply HELP for help. Message and data rates may apply. Full details, including the exact consent wording shown in the app, are published at /sms-consent. Note: Plaid separately sends a one-time SMS passcode as part of the driver identity verification flow — that message is governed by Plaid's own policies.
Changes to This Policy
We will post updates here and note the revision date. For material changes, we will provide in-app or email notice at least 30 days in advance.
Related legal documents: