PRIVACY POLICY

Effective date: January 1, 2026  ·  Last updated: April 18, 2026

1. Who We Are

DATSpeed ("DATSpeed," "we," "us," or "our") is an independent Chrome extension designed to enhance the DAT One load board experience for freight dispatchers. DATSpeed is not affiliated with, endorsed by, or in any way connected to DAT Freight & Analytics, RTS Financial, or Google LLC.

For questions about this policy, contact us at support@datspeed.app.

2. What Data We Collect

Account & Subscription Data

When you subscribe, our payment processor (Stripe) collects your payment information. We store only a minimal subscription record containing: a hashed device identifier, your subscription status (trial / active / cancelled), and the subscription expiration date. We do not store your name, address, or payment card details — those remain with Stripe under their own privacy policy.

Extension Settings

Your preferences (email template, truck location, filter toggles, keyboard shortcuts) are saved using Chrome's local chrome.storage.local API. This data lives entirely on your device and is never transmitted to our servers.

License Verification

The extension makes periodic requests to our license API (datspeed.app) to verify your subscription status. These requests include only a hashed device ID — no personally identifying information.

3. What Data We Do NOT Collect

• We do not read, store, or transmit any of your Gmail messages, contacts, or inbox data. DATSpeed requests only Send permission via Google OAuth — it can send emails on your behalf but cannot access your inbox, drafts, sent mail, or any existing messages.
• We do not store your RTS Pro credentials or session tokens. Your RTS session token is captured in your browser and used locally to fetch broker credit data. It is never sent to DATSpeed servers.
• We do not log, record, or transmit your load search queries, the loads you view, or any DAT One activity.
• We do not collect your IP address, browser fingerprint, geographic location, or device hardware identifiers.
• We do not use tracking pixels, analytics SDKs, or advertising networks of any kind.

4. Gmail Integration

DATSpeed uses Google OAuth 2.0 to request the following Gmail permission:

• https://www.googleapis.com/auth/gmail.send — used to send rate confirmation emails to freight brokers on your behalf when you click the Send button on a load listing.

DATSpeed can only send emails. It cannot read your inbox, access your contacts, modify or delete messages, or perform any other Gmail action. Your Google credentials are handled entirely by Google's own OAuth infrastructure — DATSpeed never sees your password or refresh tokens.

You can revoke DATSpeed's Gmail access at any time by visiting myaccount.google.com/permissions.

5. Google User Data — Access, Use, Storage, and Sharing

This section specifically addresses how DATSpeed accesses, uses, stores, and shares Google user data in compliance with the Google API Services User Data Policy.

Data Accessed

DATSpeed requests the following Google OAuth scopes:

• gmail.send — Permission to send emails via Gmail on the user's behalf
• userinfo.email — The user's Gmail address, used to identify their DATSpeed account
• userinfo.profile — The user's name and profile picture, displayed in the extension UI

How We Use Google User Data

• gmail.send — Used exclusively to send a single outbound email to a freight broker when the user explicitly clicks the Send button on a load listing in DAT One. The email content is composed by the user (using their own template). DATSpeed triggers the send via Gmail API on the user's behalf. This is the sole purpose of this permission.
• userinfo.email — Used to create and identify the user's DATSpeed account. Their email address is stored in our database (Supabase) solely for account management and subscription tracking purposes.
• userinfo.profile — Used to display the user's name in the extension UI. Not stored on our servers beyond what is necessary for account identification.

Storage of Google User Data

• DATSpeed does not store Gmail message content, inbox data, sent mail, contacts, or any other Gmail data on our servers.
• OAuth access tokens are managed entirely by Chrome's built-in identity infrastructure and are never transmitted to or stored on DATSpeed servers.
• Only the user's email address and display name are stored in our database, solely for account management purposes.
• Email content composed and sent through DATSpeed is transmitted directly to Gmail's API and is never logged, retained, or stored by DATSpeed.

Sharing of Google User Data

• DATSpeed does not sell, share, transfer, or disclose any Google user data to third parties.
• Google user data is never used for advertising, analytics, or any purpose other than providing the core features described above.
• DATSpeed's use of Google user data fully complies with the Google API Services User Data Policy, including the Limited Use requirements.

6. Data Security & Protection

We take the security of your data seriously and have implemented the following measures to protect it:

• Encryption in transit — All communications between DATSpeed and our servers (datspeed.app) are encrypted using HTTPS/TLS. Google user data accessed via OAuth is transmitted exclusively over encrypted connections.
• Minimal data collection — DATSpeed requests only the narrowest OAuth scope necessary (gmail.send). We do not collect, store, or transmit the content of any Gmail messages, inbox data, contacts, or any other Google user data beyond what is required to send a single outbound email at the user's explicit request.
• No server-side storage of Google data — Google OAuth tokens are managed entirely by Chrome's identity infrastructure and are never transmitted to or stored on DATSpeed servers. Email content composed and sent by the extension is transmitted directly to Gmail's API and is not logged or retained by DATSpeed.
• Security procedures — Security procedures are in place to protect the confidentiality of your data. Access to our backend systems (Supabase database, Netlify functions) is restricted by API key authentication and is not publicly accessible.
• Limited access — Only authorized personnel have access to the minimal account data we store (subscription status and account identifiers). We do not use Google user data for any purpose other than providing the email-sending feature you explicitly activate.

If you believe your data has been compromised or have a security concern, please contact us immediately at support@datspeed.app.

7. RTS Pro Integration

The RTS credit rating feature works by reading your existing RTS Pro session from your browser after you complete a one-click login. The session token is stored in browser memory and used to make API requests to RTS Pro on your behalf when you view a load detail.

This token is temporary (expires after 24 hours), is never written to disk by DATSpeed, and is never transmitted to DATSpeed servers. If RTS Pro's authentication infrastructure changes, this feature may stop working until updated.

8. Data Sharing

We do not sell, rent, trade, or otherwise share your data with any third party except:

• Stripe — our payment processor, for subscription billing. Stripe's privacy policy governs how they handle your payment data.
• Legal requirements — if required by law or court order, we may disclose the minimal account data we hold.

9. Data Retention

Subscription records are retained for as long as your account is active, plus 90 days after cancellation (for billing dispute resolution). After that period, your record is permanently deleted. You may request immediate deletion by emailing support@datspeed.app.

10. Children's Privacy

DATSpeed is intended for professional use by freight dispatchers and is not directed at individuals under 18 years of age. We do not knowingly collect any data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of DATSpeed after any changes constitutes acceptance of the updated policy. Material changes will be communicated via the extension popup or to the email address on file.

11. Contact

If you have questions or concerns about this Privacy Policy or your data, please contact us at support@datspeed.app. We will respond within 5 business days.