Privacy Policy

1. Who we are & scope

This Privacy Policy explains how Asritsolutions LLC (“Asritsolutions LLC”, “we”, “us”, or “our”) collects, uses, shares, and protects personal information when you use the AITMS website at https://asrit.ai, the AITMS web platform, and the AITMS mobile applications for iOS and Android (together, the “Services”).

AITMS is a business platform used by motor carriers, freight brokerages, shippers, and logistics providers (“Customers”) and their dispatchers, drivers, carriers, and other authorized users. When we process information on behalf of a Customer — for example, your employer or the carrier you haul for — we act as that Customer’s service provider (processor), and the Customer’s own privacy notice also applies. Where we decide how and why information is processed — for example, website visitors, demo requests, and account security — we act as the controller.

2. Information we collect

Information you provide

• Account & contact details — name, email address, phone number, job title, company, and login credentials.
• Onboarding & compliance documents — for drivers and carriers, items your organization requests, such as driver’s license / CDL details, medical certificate, MC/DOT numbers, insurance certificates, W-9 or tax information, and bank details for settlements.
• Operational content — loads, stops, rate confirmations, proof-of-delivery, bills of lading, DVIR inspections, photos, notes, and messages you create or upload.
• Communications — demo requests, support tickets, survey responses, and replies to SMS or email updates.

Information collected automatically from the apps

• Precise location — GPS location of the device, including in the background, while you are signed in and on duty or assigned to an active load (see “Location data” below).
• Device & app information — device model, operating system, app version, language, time zone, and a push-notification token.
• Diagnostics — crash logs, performance data, and error reports used to keep the apps stable.
• Usage data — features used, screens viewed, and actions taken, used to operate and improve the Services.

Information from connected sources

• Telematics & ELD data — hours-of-service records, duty status, vehicle location, engine and diagnostic data from ELD, GPS, and telematics providers your organization connects.
• Dashcam data — video, images, and safety events from camera providers your organization connects.
• Business integrations — accounting, payment, load-board, and communications tools your organization enables.

Website information

When you visit our website we collect standard log data (IP address, browser type, pages visited, referring URL) and use essential cookies to keep the site working. If we use analytics cookies, we use them only to understand aggregate site usage, never for cross-site advertising.

3. Mobile app permissions

The mobile apps request device permissions only when a feature needs them. Every permission is optional and can be turned off at any time in your device settings; some features will not work without it.

4. Location data

The AITMS driver app collects precise location data to enable live load tracking, ETA updates, geofence arrival and departure events, and hours-of-service compliance — even when the app is closed or not in use — while you are signed in and on duty or assigned to an active load.

• Location collection stops when you go off duty, complete your assigned loads, or sign out.
• Location is shared with your organization (for example, your dispatcher) and, for loads you are hauling, with the broker or shipper on that load for shipment visibility.
• We never use location data for advertising and never sell it.
• You can revoke location permission at any time in your device settings. Doing so will disable live tracking and may affect your organization’s compliance workflows.

5. How we use information

• Provide, operate, and maintain the Services — dispatch, tracking, messaging, documents, billing, settlements, and reporting.
• Support regulatory compliance, including FMCSA ELD and hours-of-service record keeping.
• Power AI-assisted features such as load building from rate confirmations, driver and route suggestions, ETA prediction, and anomaly or fraud detection.
• Verify identity (for example, one-time passcodes sent by SMS or email) and secure accounts.
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Send service messages, such as load assignments, alerts, and account notices.
• Respond to support requests and demo inquiries.
• Improve and develop the Services using aggregated or de-identified data.
• Comply with legal obligations and enforce our Terms of Service.

We send marketing emails only to business contacts who have requested information or where permitted by law, and every marketing email includes an unsubscribe link. We do not send marketing push notifications without your consent.

6. AI features

Some features use machine-learning models, including models provided by vetted third-party AI vendors, to process documents, messages, and operational data and return suggestions. These vendors process data only to provide the feature to us, under contracts that prohibit them from using your data to train their own general-purpose models.

AI suggestions are designed to assist people, not replace them. Decisions that affect drivers — such as assignments or settlements — remain under the control of your organization.

7. How we share information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share information only as follows:

• With your organization — the Customer account you belong to (for example, your carrier or brokerage) can see information associated with your use of the Services, including location, duty status, documents, and messages.
• With load partners — shipment status and location for a specific load may be shared with the broker, shipper, or consignee on that load.
• With service providers — cloud hosting, databases, maps and geocoding, SMS and email delivery, push notifications, payment processing, crash reporting, customer support, and AI vendors that process data on our behalf.
• With integrations you enable — ELD, telematics, dashcam, accounting, and other third-party services your organization connects.
• For legal reasons — to comply with law, legal process, or government requests, or to protect the rights, safety, and property of our users, the public, or us.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

Every third party that receives personal information from us is bound by written agreements that require it to protect the data with safeguards at least as protective as those described in this Policy, and to use it only for the purpose we disclosed it.

8. Advertising & tracking

We do not display third-party advertising in our apps, we do not use advertising identifiers (IDFA / Android Advertising ID), and we do not track you across apps and websites owned by other companies. We do not share data with data brokers.

9. Data retention

We keep personal information only as long as needed for the purposes described in this Policy:

• Account information is kept while your account is active.
• Hours-of-service and ELD records, and supporting documents, are retained for at least the period required by law (currently six months under 49 CFR 395.8) and longer if your organization’s settings or legal obligations require it.
• Operational and financial records (loads, invoices, settlements) are kept for the duration of the Customer’s contract and as required for tax and accounting purposes.
• Location history is retained according to your organization’s settings and then deleted or de-identified.
• Diagnostics and logs are generally deleted within 90 days.

When information is no longer needed, we delete it or de-identify it so it can no longer be linked to you.

10. Deleting your account & data

You can request deletion of your account and associated data at any time — no app required. Email privacy@asrit.ai from the email address on your account (or include the phone number on your account) with the subject “Delete my account”.

We will verify your request, then delete your account and personal data within 30 days. Residual copies in encrypted backups are overwritten within 90 days. We may retain limited information where required by law or legitimate business need — for example, ELD and hours-of-service records that motor carriers must keep, financial records required for tax purposes, or information needed to resolve disputes or prevent fraud. Retained data remains protected by this Policy and is deleted when the retention period ends.

If your account is managed by an organization, we may notify that organization so it can meet its own record-keeping obligations. You can also ask to delete specific data (such as uploaded documents or photos) without deleting your whole account by contacting us.

11. Your rights & choices

Depending on where you live, you may have the right to:

• Know and access the personal information we hold about you.
• Correct inaccurate information.
• Delete your information.
• Receive a portable copy of your information.
• Withdraw consent, or object to or restrict certain processing.
• Opt out of the sale or sharing of personal information (we do not sell or share it).
• Not be discriminated against for exercising these rights.

California residents: under the CCPA/CPRA, the categories of personal information we collect are identifiers, commercial information, geolocation data, audio/visual information (photos and dashcam footage), professional or employment-related information, internet or device activity, and sensitive personal information (precise geolocation, account login, and driver’s license numbers), each used for the business purposes described above. We use sensitive personal information only to provide the Services.

EEA, UK & Swiss residents: we rely on contract performance, legitimate interests, legal obligations, and consent (where required) as legal bases, and you may lodge a complaint with your local data protection authority.

To exercise any right, email privacy@asrit.ai. If your data is managed by your organization, we may refer your request to them. We will respond within the time required by law (generally 30 to 45 days). You may use an authorized agent, and you may appeal a decision by replying to our response.

12. Security

We protect information with industry-standard safeguards, including encryption in transit (TLS) and at rest, tenant isolation, role-based access controls, audit logging, and regular security reviews. Access to personal information is limited to personnel and service providers who need it. No system is perfectly secure, so we cannot guarantee absolute security; we will notify affected users and authorities of a data breach as required by law.

13. International transfers

We are based in the United States and may process information in the United States and other countries where we or our service providers operate. When we transfer personal information across borders, we use appropriate safeguards such as Standard Contractual Clauses.

14. Children’s privacy

The Services are intended for business use by adults and are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us and we will delete it.

15. Changes to this Policy

We may update this Policy from time to time. We will post the updated version on this page with a new “Last updated” date and, for material changes, notify you by email or in the app before the changes take effect.

16. Contact us

Questions or requests about this Policy or your data: