This policy explains how Powerload processes personal data as a controller for accounts, billing, support, security, website use and communications. When customers upload personal data about their own employees, drivers, customers or suppliers to manage their operations, Powerload may act as a processor on behalf of that customer.
1. Controller
Powerload, LLC, 1111B South Governors Avenue, Dover, DE 19904, United States. Privacy contact: info@powerload.us. Powerload, LLC acts as controller for the platform, TMS, freight marketplace, subscriptions and digital services it provides in its own name. POWER LOAD SL is a separate legal entity and may act as an independent controller for personal data processed in its own transport operations in Spain, providing the applicable privacy information for those operations.
2. Data we may process
- Account and identity data: name, email, phone number, company, role and credentials.
- Commercial and billing data: legal name, address, tax information, plan, payments, invoices and commercial communications.
- Transport operations data: loads, routes, trips, vehicle registrations, vehicles, drivers, suppliers, customers, documents, incidents, signatures and other information entered into the TMS.
- Location data when tracking, geocoding or planning features require it and are enabled.
- Technical and security data: IP address, device, browser, logs, session identifiers, security events and technical usage.
- Support and communications data: messages, requests, incidents, emails and content sent to Powerload.
- Integration data when a user connects external services such as email, maps, payments or other supported tools.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Create and administer accounts, provide the TMS and execute requested features. | Performance of a contract and pre-contractual steps. |
| Manage subscriptions, payments, invoicing and accounting obligations. | Performance of a contract and legal obligations. |
| Security, abuse prevention, fraud prevention, unauthorized-access detection and service continuity. | Legitimate interests in protecting the platform and, where relevant, legal obligations. |
| Support, service communications and incident handling. | Performance of a contract and legitimate interests in assisting users. |
| Non-essential website analytics and measurement. | Consent where required by applicable law. |
| Electronic marketing and personalized advertising. | Consent or another basis permitted by applicable law, with opt-out rights where applicable. |
| Product improvement, internal statistics and technical diagnostics. | Legitimate interests where necessary or aggregated data is used; consent where optional technologies are involved. |
4. Customer data and processor role
Customers may enter personal data relating to drivers, employees, contacts, customers or suppliers into Powerload. In those cases, the customer normally determines the essential purposes and means of processing and must have a lawful basis to provide the data.
Where Powerload processes that data solely to provide the service on the customer’s instructions, Powerload acts as a processor. Applicable processor obligations may be set out in a Data Processing Agreement (DPA).
5. Providers and recipients
We may use service providers that support cloud infrastructure and hosting, payments, email and communications, maps and geocoding, support, security, analytics or advertising.
Depending on the feature used and the user’s settings, services may include AWS, Stripe, Google services, Tidio and Tawk.to. Optional analytics, advertising or support tools are loaded according to cookie preferences where consent is required.
We may also disclose information where required by law, in response to a valid authority request, or where necessary to establish, exercise or defend legal claims.
6. International transfers
Powerload, LLC is established in the United States and certain providers may process data outside the European Economic Area. Where the GDPR or other applicable law requires safeguards, recognized transfer mechanisms are used, such as applicable adequacy decisions, Standard Contractual Clauses or other legally valid safeguards.
7. Retention
We retain data for as long as needed to provide the service and fulfill the purposes described above. After the relationship ends, certain data may be retained for periods required by tax, accounting, contractual or security obligations or to defend legal claims.
Marketing data is retained until consent is withdrawn or an applicable objection is made. Cookie and similar technology durations are described in the Cookie Policy.
8. Security
We apply reasonable technical and organizational measures designed to protect confidentiality, integrity and availability. No Internet-connected system can guarantee zero risk, so measures are reviewed and adapted as the service evolves.
9. Your rights
Where applicable, you may request access, rectification, erasure, restriction, portability and objection, and you may withdraw consent without affecting processing that was lawful before withdrawal.
You can exercise your rights by emailing info@powerload.us. We may request reasonable information to verify your identity. If you are in the EU/EEA, you may also complain to the competent supervisory authority.
10. Automated features and artificial intelligence
Powerload may provide automation, recommendations, data extraction or AI-assisted features. These features are designed as operational support. Unless expressly stated otherwise, users should review commercial, operational or contractual decisions before execution.
11. Children
Powerload is a business and professional service and is not directed to children.
12. Changes to this policy
We may update this policy to reflect product, provider or legal changes. Material changes will be communicated by reasonable means where appropriate.
