Privacy Policy

At DAT Filter ("we," "our," or "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Chrome extension and related services.

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address, name (when you sign up via Gmail or Outlook OAuth)
• Filter Preferences: Your saved filter settings (distance, rate, weight, locations)
• Saved Loads: Loads you bookmark from DAT loadboards
• Email Templates: Custom email templates you create
• Payment Information: Processed securely through our payment processor (we do not store credit card details)

1.2 Information Collected Automatically

• Usage Data: How you interact with the extension, features used, loads filtered
• Device Information: Browser type and version, operating system
• Log Data: IP address, access times, error logs

1.3 OAuth Information

When you connect your Gmail or Outlook account for email sending:

• We store OAuth access and refresh tokens (encrypted)
• We access your email address and name
• We send emails on your behalf only when you click "Send Email"
• We do NOT read your existing emails or access your inbox

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our service
• Process your payments and manage subscriptions
• Send emails to brokers on your behalf (only when you initiate)
• Save and sync your filter preferences across devices
• Improve and personalize your experience
• Communicate with you about updates, support, and promotional offers
• Monitor and analyze usage and trends
• Detect, prevent, and address technical issues or fraud

3. How We Share Your Information

We DO NOT sell your personal information. We may share information in these situations:

3.1 Service Providers

• Supabase: Database and authentication services
• Payment Processors: To process subscription payments
• Analytics Services: To understand usage patterns
• Email Services: Gmail/Outlook APIs for sending emails on your behalf

3.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

3.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Security

We implement appropriate security measures to protect your information:

• All data transmitted is encrypted using SSL/TLS
• OAuth tokens are encrypted at rest
• Database access is restricted and monitored
• Regular security audits and updates
• SOC 2 compliant infrastructure

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

5. Data Retention

• Active Accounts: We retain your data as long as your account is active
• Saved Loads: Automatically deleted after 30 days unless you extend them
• After Cancellation: We retain data for 90 days to allow reactivation, then permanently delete
• Legal Obligations: Some data may be retained longer if required by law

6. Your Rights and Choices

6.1 Access and Update

You can access and update your information through:

• Extension settings panel
• Dashboard at your account page
• Contacting [email protected]

6.2 Delete Your Data

You can delete your account and all associated data by contacting [email protected]. We will permanently delete your data within 30 days.

6.3 Opt-Out

• Marketing Emails: Unsubscribe via link in any email
• Analytics: Disable in extension settings
• OAuth Permissions: Revoke access via Google/Microsoft account settings

7. Third-Party Services

Our extension interacts with:

• DAT Loadboards: We access publicly available load data (subject to your DAT subscription)
• Gmail/Outlook: We send emails only when you initiate (subject to their privacy policies)
• Chrome Web Store: Installation and updates (subject to Google's policies)

These services have their own privacy policies. We are not responsible for their practices.

8. Children's Privacy

Our service is not intended for users under 18. We do not knowingly collect information from children. If we discover we have collected information from a child, we will delete it immediately.

9. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how we use it
• Request deletion of your personal information
• Opt-out of the sale of personal information (we do not sell your data)
• Non-discrimination for exercising your rights

To exercise these rights, contact us at [email protected]

10. GDPR Compliance (European Users)

If you are in the European Economic Area (EEA), you have additional rights:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

Our legal basis for processing your data is: (1) your consent, (2) contract performance, (3) legal obligations, or (4) legitimate interests.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new policy on this page
• Updating the "Last Updated" date
• Sending you an email notification (for significant changes)

Your continued use of the service after changes constitutes acceptance of the new policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us: