TruckTuck

Privacy

Policy

RoadSide Retreat LLC d/b/a "TruckTuck" — United States (FL, IL, OK, TX, AL, KY, GA)

Version 1.5 — Last Updated: May 31, 2026

This Privacy Policy explains how RoadSide Retreat LLC d/b/a TruckTuck ("TruckTuck," "we," "us") collects, uses, shares, and protects information in connection with the TruckTuck platform, mobile application, and truck-parking yards (collectively, the "Services"). It is incorporated into, and should be read with, the TruckTuck Truck Parking License Agreement and the Platform EULA.

1. SCOPE

This Policy applies to account holders, authorized drivers, and visitors who use the Services in the United States. The Services are operated in the United States and are not intended for individuals in the European Union or jurisdictions subject to the GDPR or LGPD.

This Policy is an informational and regulatory notice describing TruckTuck's data practices. It is not the contractual vehicle of your consent and is not incorporated by reference into the Platform EULA or the Parking License Agreement. Your consent to the collection and processing of personal data — including precise and background location, which is treated as sensitive and obtained on an opt-in basis — is collected at the application interface layer, through the in-app operating-system permission prompts and the clickwrap acceptance flows presented at registration and booking, and may be withdrawn through your device settings or in-app controls.

2. INFORMATION WE COLLECT
  • Account and contact data: name, company, email, phone, billing details, USDOT/MC number.

  • Device and location data: real-time and background device location associated with a booking, device identifiers, app usage, and diagnostics.

  • Vehicle and access data: license plate (via ALPR), gate and sensor logs, entry and exit times, and credentials.

  • Surveillance data: CCTV video and still images of the yard (no audio at general surveillance locations).

  • Telematics: telemetry or electronic logging device (ELD) data, where integrated.

  • Payment data: processed by third-party payment processors; we do not store full card numbers.

2A. Information From Property Owners and Yard Hosts

We collect tax identification information (SSN, EIN, ITIN), Form W-9 data, banking and payout details, and transaction history from Property Owners and Yard Hosts as necessary to issue Form 1099-K and other tax information returns, calculate and remit Taxes, comply with IRS and state Department of Revenue requirements, and support audits. This information is retained for the longer of (i) four (4) years from the relevant tax year or (ii) the period required by applicable federal or state tax law, including any extended period for non-filers or fraud.

3. HOW WE USE INFORMATION

We use information to: provide and secure the Services; control and authenticate gate access; prevent and investigate overstay, abandonment, fraud, theft, and misuse; bill and audit; defend claims and chargebacks; comply with law; and improve and develop the Services. We may create aggregated and de-identified data, which is not subject to this Policy.

4. SURVEILLANCE, ALPR, AND BIOMETRICS

Our yards are under video surveillance, and ALPR systems read vehicle license plates only. We do not perform facial recognition and do not collect, capture, store, use, sell, or disclose "biometric identifiers" or "biometric information" as defined by the Illinois Biometric Information Privacy Act (BIPA) or the Texas Capture or Use of Biometric Identifier Act (CUBI). Should any biometric identifier ever be incidentally captured, it is not used or disclosed and is permanently destroyed. Surveillance materials are retained as described in Section 7. We treat precise geolocation as sensitive data; we collect it based on your consent (the device permission you grant), you may withdraw consent at any time through your device settings, and active location tracking ceases upon checkout. No audio is recorded at general surveillance locations, consistent with applicable eavesdropping laws; audio may be recorded only at intercom points where you initiate communication and are separately notified.

4A. Tax Compliance and Transaction Records

We use transaction, location, Yard address, ZIP code, billing, vehicle, and account data to determine applicable Taxes; validate exemption certificates; prepare invoices and tax filings; respond to audits, subpoenas, and governmental inquiries; and comply with tax, accounting, and recordkeeping obligations.

4B. Fleet Accounts and Driver Privacy

Where a booking is made or paid under a Fleet Account, the related booking history, gate logs, and yard entry/exit times are shared with the Fleet Account holder for legitimate business purposes such as safety, compliance, and billing. By contrast, a booking that a driver makes and pays for personally (for example, during off-duty rest time) is treated as that driver's private booking and is not shared with any carrier or fleet except with the driver's express opt-in consent or as required by law. We do not track an off-duty driver's location for, or disclose it to, a carrier outside an active Fleet Account booking.

5. HOW WE SHARE INFORMATION

We may share information with: law enforcement and government agencies (where lawful); insurers, claims adjusters, and surety providers; motor carriers, brokers, shippers, consignees, and cargo owners with a colorable interest; attorneys, courts, and arbitrators; taxing authorities, state Departments of Revenue, the IRS, auditors, and tax professionals where reasonably necessary for tax determination, registration, collection, remittance, audit defense, or compliance with applicable tax law; our affiliates, service providers, and cloud-storage providers under confidentiality obligations; and successors or purchasers of our business or assets. We may also share where reasonably necessary to protect persons, property, or legal rights.

6. WE DO NOT SELL PERSONAL DATA

We do not sell personal data for monetary consideration, and we do not engage in "sales" of personal data or "targeted advertising" as those terms are defined under the Florida Digital Bill of Rights (FDBR), the Texas Data Privacy and Security Act (TDPSA), or analogous state laws. Disclosures for security, fraud prevention, legal compliance, claims defense, at your direction, or to processors under confidentiality obligations are not "sales."

7. DATA RETENTION

We retain surveillance materials and related data for up to five (5) years from capture for safety, security, fraud prevention, claims defense, and compliance. We retain tax, billing, transaction, exemption-certificate, Form 1099/W-9, and audit-support records for as long as required by applicable law, and in any event for no less than the period necessary to respond to tax audits, assessments, appeals, and chargebacks (generally four to seven years, longer where extended limitations apply). Deletion or correction rights do not override retention obligations imposed by tax, accounting, fraud-prevention, or claims-defense purposes.

8. DATA SECURITY AND BREACH NOTIFICATION

We maintain reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the data. No system is perfectly secure, and we do not guarantee that safeguards will prevent all unauthorized access. If a security incident affecting personal data occurs, we will notify affected individuals and authorities as and to the extent required by applicable law.

8A. United States Processing

The Services are operated in the United States, and information is collected, stored, and processed in the United States. By using the Services, you acknowledge and consent to the processing of your information in the United States under U.S. law. The Services are not offered to, and are not intended for, individuals in the European Union, United Kingdom, or other jurisdictions whose data-protection laws (such as the GDPR or LGPD) would impose conflicting obligations, and we do not assume obligations under those laws.

9. YOUR STATE PRIVACY RIGHTS
9.1 Florida (FDBR).

To the extent the Florida Digital Bill of Rights applies, you may request to access, correct, delete, or obtain a portable copy of your personal data, and opt out of any sale or targeted advertising. We will respond as required by law and will not discriminate against you for exercising these rights.

9.2 Texas (TDPSA).

To the extent the Texas Data Privacy and Security Act applies, you have rights to access, correct, delete, obtain a portable copy of, and opt out of the sale of, your personal data and targeted advertising, and to appeal a denied request.

9.3 Illinois (BIPA).

We do not collect biometric identifiers or biometric information as defined by BIPA. ALPR captures license plates only.

9.4 California (CCPA/CPRA).

If you are a California resident, the CCPA/CPRA may protect you regardless of where you park or where our yards are located. To the extent it applies, you may request to know, access, correct, and delete personal information, limit the use of sensitive personal information, and opt out of "sale" or "sharing"; we do not sell or share personal information as defined by the CCPA, and we will not discriminate against you for exercising these rights.

9.5 Other States (OK, AL, KY, GA).

We comply with applicable surveillance, eavesdropping, and consumer-protection laws in each state where we operate, and will honor privacy rights to the extent required by applicable state law.

General limitation. Requests to delete, correct, or limit processing may be denied to the extent the information is required to complete a transaction, comply with tax, accounting, or recordkeeping obligations, detect security incidents or fraud, or establish, exercise, or defend legal claims.

10. HOW TO EXERCISE YOUR RIGHTS

Submit a verifiable request to info@trucktuck.com or 90 Fort Wade Road, Suite 100 #10167, Ponte Vedra, FL 32081. We may need to verify your identity and the equipment or account associated with your request. An authorized agent may submit a request with proof of authorization. We will respond within the timeframe required by applicable law.

11. CHILDREN'S PRIVACY

The Services are intended for commercial users and are not directed to children. We do not knowingly collect personal information from anyone under 18. If we learn we have collected such information, we will delete it.

12. COOKIES AND ONLINE TRACKING

Our website and Platform may use cookies and similar technologies for authentication, security, and analytics. You can control cookies through your browser or device settings; disabling them may limit functionality. We honor recognized opt-out preference signals to the extent required by applicable law.

12A. Communications and Marketing

We use your contact information to send operational, transactional, and (where permitted) marketing communications by email, SMS, push notification, and phone, as further described in the Platform EULA. You may opt out of marketing communications at any time by replying STOP to a text, using an email unsubscribe link, or adjusting app settings; opting out does not stop operational or transactional messages necessary to provide the Services.

12B. Third-Party Services and Links

The Services integrate or link to third-party services (such as maps, payment processors, ALPR or insurance-verification providers, and telematics). We are not responsible for the privacy practices or content of those third parties, and their handling of your information is governed by their own policies.

12C. De-Identified and Aggregated Data

We may create and use de-identified or aggregated data that does not identify you, including de-identified or aggregated telemetry and location data. We will maintain and use such data only in de-identified form and will not attempt to re-identify it except as permitted by law. Such data may be used and retained for any lawful purpose, including to train, develop, and improve machine-learning and artificial-intelligence models, optimize yard operations, capacity, and availability, prevent fraud, and produce analytics and commercial reports. De-identified and aggregated data is not subject to this Policy.

12D. Dispute Resolution

This Policy is an informational and regulatory notice and does not itself create contractual obligations or an independent agreement to arbitrate. However, to the extent any dispute relating to our handling of your information also arises out of or relates to your use of the Platform or constitutes a claim under the Platform EULA or the Parking License Agreement, it is subject to the mandatory individual arbitration, jury-trial waiver, and class, collective, and representative action waiver set forth in those agreements, to the fullest extent permitted by applicable law. Nothing in this Policy waives any right that cannot be waived under applicable law.

13. CHANGES TO THIS POLICY

We may update this Policy from time to time. We will post the updated version with a new "Last Updated" date and, where required, provide additional notice. Continued use of the Services after the effective date constitutes acceptance.

14. CONTACT US

Questions or requests regarding this Policy may be directed to RoadSide Retreat LLC d/b/a TruckTuck at info@trucktuck.com, (904) 552-2100, or 90 Fort Wade Road, Suite 100 #10167, Ponte Vedra, FL 32081.