Privacy Policy

This Privacy Policy explains what CheckMyBroker collects, why, the legal basis for it, and your choices. We keep data collection to what the Service needs.

Who we are

CheckMyBroker is an independent service operated from Chișinău, Republic of Moldova. For any privacy question or request, contact support@checkmybroker.ai.

What we collect

Account details: your email address, authentication method, and dated acceptance of the current Terms and Privacy Policy. Optional launch list: your email, the consent version, time and source, founding-interest flag, unsubscribe time, and a suppression record needed to honor an opt-out, bounce or complaint. Content you submit: payment reports, disputes, profile-ownership requests, broker responses, watchlists, private load records, and historical Recovery inputs and drafts. Rate-con scans: a JPG or PNG image is sent to our configured AI vision provider for transcription; the transcription is then sent through our AI gateway to the configured extraction model. The uploaded file itself is not retained in the application; extracted fields and check results are saved to your account. New Recovery generation is paused and sends no new Recovery input to an AI provider. Technical and usage data includes server logs, IP address, browser/device information, page URLs, email-delivery status, pseudonymous diagnostic references, and selected product events used for security, reliability and aggregate product analytics.

Legal basis and how we use it

We process account, security, verification and requested service-message data to provide and secure the Service (performance of our agreement and our legitimate interests). Optional watchlist emails and launch/pricing emails are based on the choice or consent shown in the relevant form and can be turned off or withdrawn. We retain limited suppression data so an opt-out, bounce or complaint is not accidentally reversed. We do not use your data for third-party advertising, and there are no ad networks on the site.

Processors

We disclose data to service providers only as needed to operate the Service, subject to the applicable service terms and any data-protection terms in effect with us:

• Hetzner — hosting (servers in the EU, Finland).
• Cloudflare — CDN, DNS and security.
• Resend — transactional email such as verification and requested notifications.
• Microsoft Azure OpenAI (through our local LiteLLM gateway) — AI processing for rate-confirmation image transcription and structured field extraction.
• Google — only if you choose “Continue with Google”, to authenticate you.
• Telegram — operational error alerting using minimized diagnostic information; recipient email addresses are replaced with pseudonymous references in email-delivery alerts.

International transfers

Our application server is hosted in Finland. Service providers may process data in other countries in which they or their subprocessors operate. Provider locations, terms, subprocessors and any transfer safeguard applicable to a particular transfer can change; contact us for current information. We do not claim that a specific contractual transfer mechanism applies until it has been verified for the relevant provider and data flow.

Retention

Account data is kept until deletion is requested or the account is otherwise removed, subject to legal or security retention needs. Launch-list data is kept until the list is closed or you unsubscribe; a minimal suppression record may remain so we can continue honoring the opt-out, bounce or complaint. Rate-con uploads are processed transiently and not retained in the application; extracted fields and check results remain with the account. Historical Recovery inputs and draft content are retained but quarantined from the user interface pending legal review. Server and security logs are generally rotated after about 90 days. We may retain limited records longer where reasonably needed for security, disputes, legal obligations, assent records, or to document deletion.

About broker profile data

Profiles of freight brokers are built from official FMCSA public records — a category separate from the personal data above. For brokers that are sole proprietors, we process only the business-registry information FMCSA publishes (authority, bond, address of record), on the basis of our legitimate interest in helping carriers verify who they are hauling for. We do not enrich broker profiles with private or credit data, and a broker can dispute a data point or add a public right of reply from its profile page.

Cookies

We use an authentication session cookie, short-lived OAuth security cookies, and a preview cookie for certain pages. Cloudflare Turnstile may process browser/device and network data to prevent abuse. When enabled, our first-party, cookie-free Umami analytics measures page views and selected product events. There are no advertising cookies or ad networks.

Browser privacy signals and cross-site tracking

We do not sell or share personal data for cross-context behavioral advertising and do not use targeted advertising. Because there is no sale, sharing or targeted-advertising opt-out to apply, Do Not Track and Global Privacy Control signals do not currently change the Service’s behavior. We do not authorize advertising companies to track users across unrelated sites. Security, authentication, email, hosting and AI providers may receive technical or submitted data as described above to provide their services.

Your rights

You can request access to, correction of, deletion of, or a portable copy of personal data associated with your account, and can withdraw consent for optional emails. Email support@checkmybroker.ai. We may ask for information needed to verify the request and generally aim to respond within 30 days, subject to applicable law and permitted extensions. You may also have a right to appeal a denied request or complain to an applicable data-protection authority.

No sale of personal data

We do not sell your personal data, and we do not sell or license your payment reports as a data product.

Children

The Service is for business use by adults. It is not directed to anyone under 18, and we do not knowingly collect data from children.

Copyright complaints

Send sufficiently documented copyright complaints to legal@checkmybroker.ai. We may remove or disable access where appropriate. We are not currently registered with the U.S. Copyright Office’s Designated Agent Directory and do not claim a 17 U.S.C. §512 safe harbor.

Changes

We may update this policy; material changes will carry a new effective date at the top of this page.

Contact

Privacy questions and data requests: support@checkmybroker.ai.