Freight Check privacy policy

What we collect

• Your email address — only when you subscribe or purchase, and only to license the product and send your key, receipts, and essential service notices.
• The MC/DOT numbers and domains you actively look up — the specific identifier you hover on in Gmail or run through the right-click lookup. We use it to fetch the record and to enforce your free-tier count.
• An anonymous install ID — a random identifier generated on install, not tied to your name, used to associate your entitlement and free-lookup count with your copy of the extension.
• Your persona preference — whether you chose broker or carrier mode, stored so the right card leads.
• Usage counts — how many lookups you've run, for the free-tier limit and basic aggregate product metrics.

What we never collect

• Email content. The body of your emails is never transmitted to us.
• Sender or recipient addresses. We never read, store, or transmit who your email is from or to.
• Page content. We do not scrape, log, or transmit the content of the web pages you visit.
• Browsing history. We do not track the sites you visit or build a profile of your activity.

How detection works

Detection happens locally, in your browser. Freight Check runs a regular-expression scan for MC and DOT number patterns against Gmail message bodies only. That scan never leaves your device. Nothing is transmitted to Keelway unless you take an action — hovering a detected number in Gmail, or highlighting text and choosing the right-click lookup. The shipper legitimacy check is user-initiated only; it never runs on its own. When you do take one of those actions, the only thing that reaches us is the single identifier or domain you looked up.

Data retention

• Lookup logs — the identifiers you looked up are retained for 12 months, then deleted.
• Cached FMCSA responses — retained up to 30 days so repeat lookups are fast and don't re-hit the source unnecessarily.

Payments

Payments are processed by Stripe. We never see or store your card numbers — Stripe handles card data directly under its own PCI-compliant systems. We receive only the subscription status and the email you used at checkout.

Third parties & subprocessors

We use a small set of subprocessors to run the service:

• Stripe — payment processing and subscription billing.
• Resend — transactional email (license keys, receipts, service notices).
• Supabase — application database and licensing records.
• Vercel — hosting for the API and these pages.

Our data sources for the lookups themselves:

• FMCSA — the public QCMobile database for carrier and broker records. Keelway is not affiliated with or endorsed by FMCSA.
• Public DNS and RDAP — for the shipper domain legitimacy signals.

Your rights & deletion

You can request a copy of the data associated with your install or account, or ask us to delete it, at any time. Email support@keelway.com and we'll handle it. Deleting the extension stops all local detection immediately; email us to also purge your server-side lookup logs and licensing record.

A note on the shipper check

The shipper check is a legitimacy screen — not a credit score. Payment-history scores are coming in Credit Pro. It confirms a company looks like a real, operating business; it does not tell you whether a shipper pays on time, and we do not collect or infer payment behavior from it.

Changes

If we change this policy we'll update the effective date at the top and, for material changes, notify subscribers by email. Questions about anything here go to support@keelway.com.