This policy explains what information LaneRally collects about people, why, who receives it, how long we keep it, and the choices you have. It covers lanerally.com, the LaneRally app at app.lanerally.com, the LaneRally Carrier apps for iPhone and Android, our phone numbers and phone assistant, and the emails we send. The iPhone and Android apps are being tested with invited testers; what this policy says about them describes them as they are built. It applies to people in the United States and in Canada: loads run between the two, and carriers, drivers, shippers and brokers in both use LaneRally. Section 17 adds what applies to people in Canada.
1. Who we are
LaneRally is operated by Lane Rally LLC, an Arizona limited liability company, at 2718 W Estrella Dr, Chandler, AZ 85224-7813. In this policy, "LaneRally", "we" and "us" mean that company.
LaneRally is software and a network for shippers, carriers and freight brokers. Lane Rally LLC is also a freight broker (USDOT 6662937, MC 54695737), under that name. It arranges freight only while its FMCSA broker authority is verified. Until then it arranges no transportation: its assistant's quoting and booking tools refuse, it gives no quotes and books no loads, and any load it shows on LaneRally's load board or website is a test. During that time its sales calls and emails may still introduce it to businesses as a freight brokerage, without claiming a license or giving an authority number.
This policy covers:
- visitors to our websites;
- people who apply for or hold a LaneRally account (carriers, shippers, broker applicants, outside brokers, and the partners of Lane Rally LLC or of another brokerage that uses LaneRally's software), and their teammates;
- people who call our numbers, and people our phone assistant or our team calls or emails;
- people at businesses we may contact who have never signed up (section 4);
- people at pickup and delivery places, such as receivers, whose contact details a shipper gives us;
- a carrier's insurance agent or insurer, when we ask the carrier's insurance agency for a certificate of insurance, when it sends us one, or when our team calls the agent or the insurer to confirm the carrier's cover (section 2);
- carriers in Lane Rally LLC's Core Carriers program, and carriers we invite to it (section 2);
- invited testers.
Lane Rally LLC's partners are companies that introduce shippers to Lane Rally LLC and are paid by it a share of its profit on those shippers' shipments. Outside brokers are other freight brokerages that post their own loads on LaneRally's load board. Other brokerages that use LaneRally's software may also run partner programs of their own. Section 2 says what each of them gives us and sees.
Some brokerages and dispatch services may use LaneRally's software, including the phone assistant, for their own business. In this policy, a "calling company" is any company whose calls the assistant makes or answers, including Lane Rally LLC. When another calling company contacts you, that company decides whom to contact and what it does with what it learns, and its own privacy policy also applies. We handle that information to provide our service to it.
2. What we collect
We collect what LaneRally's features use. Here it is, grouped by where it comes from.
What you give us
- Sign-up details: your full name, email, a password, and your company. We store the password only as a one-way scrambled value (a hash), never as readable text.
- Carriers also give an MC or USDOT number, equipment types and fleet size, and may add a mobile number. They may add their trucks' details, the lanes they want, a home base and a minimum rate (for load alerts and auto-book), and, in the Core Carriers program, their home time (section 2), and post available trucks (a truck's city, date, equipment and asking rate), which only Lane Rally LLC's dispatch desk sees. A carrier may also choose how many times in 7 days Lane Rally LLC's assistant may call it about loads (3, 5 or 10, or no weekly limit; no weekly limit until it chooses), and change that choice at any time in its preferences or by asking us: we keep that choice and each change to it, with who made it (the carrier, or our team when the carrier asks) and when. The assistant calls a carrier at most twice about the same load, the second time only if the rate it offers went up. They may give their insurance agent's email so we can ask the agent for a current certificate of insurance: we email the agent a fixed request that names the carrier, and keep the address with the carrier's certificate.
- Shippers give a company email (free email addresses aren't accepted for shipper accounts) and may add a mobile number. To book a shipment, they give the name and phone of the contact at each delivery place, and may give that contact's email ("Receivers and delivery appointments", below). A pickup place may also have a contact, such as its shipping office, whose name and phone the shipper gives.
- Broker applicants give an MC or USDOT number, a work email at the brokerage's own domain and a mobile number. They sign our load-posting agreement by typing their name, and may answer our reviewers' questions.
- Outside brokers and Lane Rally LLC's partners give what their own parts below describe.
- Your choice about calls from our assistant, if you make one: the exact words you agreed to, the phone number, your name, and your company and title if you give them, with the time, IP address and browser.
- What you tell us on calls, in emails or on our forms. On calls this can include your name, title, email and direct phone; the lanes you ship or run, how many loads you move, your equipment, who you use today and what isn't working for you; for a load, the driver's name and phone, truck and trailer numbers, rates, pickup and delivery details, arrival times, and the city and state or province a truck is in; and messages you leave and when to call you back.
- Email you send us. Our team may paste a shipper's email or load details into LaneRally so our tool can pick out the load details. Email sent to a load's own paperwork address is handled as "Paperwork by email", below, describes.
- Your name and email, when a teammate invites you to their company's team.
- Loads, offers, bookings, messages and documents you create or upload in the app, such as a certificate of insurance or a proof of delivery. The app refuses uploads of tax forms, voided checks, bank forms and notices of assignment.
What is created when you use LaneRally
- Sign-in records: the IP address and browser (user agent) of each session, when it started and when it was last active, and when you last signed in. You can see your sessions on your account page.
- Records of what you accepted or signed: which text, its version, the name you typed, and the time, IP address and browser.
- Signatures on documents: when you sign a rate confirmation or a bill of lading in the app, we also keep the title you typed and the account you signed from, with your IP address and the kind of device you used (such as an iPhone or a Windows computer). A signed rate confirmation shows your name and title, your company, your account's email (only its first letter and domain), the time, your IP address and the kind of device you used. A signed bill of lading shows only your name and title, your company and the time: your IP address, your device and your account stay in our records. They aren't on the signed copy that your company's people, the carrier and its drivers open, or on any printed copy of it. Everyone who can open a signed copy, or is shown or handed a printed copy of it, sees all of what it shows (section 10).
- Security records (our audit trail): sign-ins, failed sign-ins, codes sent, sign-ups, reviews and actions our team takes. In the audit trail a phone number shows only its last four digits and an email only its first letter and domain.
- Network checks: when a carrier signs up, sends the page a Core Carriers invite link opens, agrees to calls from our assistant, changes where or how it is paid, or asks to book its first load, we record the internet (IP) address, the country Cloudflare says it comes from, and whether it is on public lists of VPN providers, data centers, mobile networks, Apple's iCloud Private Relay or Tor exits. One from outside the United States (and its territories) and Canada, or through a VPN, a data center or Tor, puts the carrier on hold for our team's review; the step itself still goes through. We also look for the same device (a browser's laneagent_device mark, kept with each sign-in as a scrambled value, or an app install) used by people of two or more carrier companies, the same home or office internet address at those steps for two or more carrier companies, and the same trailer VIN given by two carriers; our team reviews each one. These records are for our team only, used to prevent fraud.
- Opt-out records: each request to stop calls, texts or emails, and its history. These keep the full phone number or email address, because that is what they stop.
- For one-time codes, only a scrambled check value, never the code itself.
- Call records (section 5), and email and text records (sections 6 and 7).
- Notices: the in-app notifications LaneRally shows you. If you turn on push notifications on a phone or computer: the push address its browser gives us, the browser's keys for it, the browser's name and the dates, kept until you turn push off there, sign out there, or sign out everywhere.
The LaneRally Carrier app (iPhone and Android)
The app shows the same pages as app.lanerally.com, signed in the same way. It adds:
- The app's own record of the phone: an install number the app makes for itself, the platform (iPhone or Android), the phone's operating system version, and the app's version and build. The server also reads which of the app's features the build has, only to choose what a page shows.
- The app's own sign-in: a random token the app keeps in the phone's secure storage (the iPhone Keychain or the Android Keystore, never backed up or moved to another phone). We keep only a scrambled value of it. It is tied to your web sign-in and ends with it: at the latest after 14 days, or when you sign out, sign out everywhere, change your password, or your access ends.
- Push tokens: when you turn on "Alerts on this phone", the address Apple's push service (APNs) or Google's Firebase Cloud Messaging gives the app for this phone. We keep it until you turn alerts off, sign out of the app, sign out everywhere, the push service tells us it no longer works, or your account is deleted.
- POD scans: the pages you scan stay in the app's own storage on the phone (never your photo library, and not backed up) until LaneRally confirms it received them; then they're deleted from the phone. Scans waiting to send belong to the sign-in that made them, and you're asked to send or delete them when you sign out. On the server a POD is kept like any other upload.
- Two readings the app sends with each location while you share it: whether a VPN is on on the phone, and whether the phone reports the position as simulated (a mock location). On iPhone, the VPN reading is the app's best guess from the phone's network settings. We use them only to look for faked locations (below), and only our team sees them.
- The app keeps no history of your location (below).
Location
Only while you share it on an active load. The broker of record sees the truck's location; the shipper on the load sees the city; tracking links, which the shipper may share and our desk may email to the load's receiving contact, show milestones and city only. No partner, other carrier or other broker sees it. On Lane Rally LLC's loads it also records when the truck reached the delivery, for the rate confirmation's On-time delivery item, and a point near the truck, rounded to about 15 miles and with nothing that names the driver, the truck or the load, is looked up in public government severe-weather alerts (the truck's own position is never sent). On Lane Rally LLC's loads, we also use when sharing was on and off (not the truck's position) to apply the rate confirmation's tracking fee. Sharing ends when the load is delivered, and the last exact position is deleted.
Faked locations. When a location update looks faked (it comes through a VPN, a data center or Tor, the position is in the United States or Canada while the internet connection is from another country, or the app reports a VPN or a simulated position), our team is alerted and we keep a record of it: the load, the time, the internet (IP) address and the country it's in, the device, the readings, and the country the position was in. The record never keeps the position itself or the place near it. Nothing stops the load. These records are for our team only, used to prevent fraud.
In the LaneRally Carrier app, sharing keeps running in the background and while the phone is locked, but only on that phone, and only from the moment the person holding it taps Turn on: the first time on the app's location sharing notice, which names who sees the location, and after that with one tap on the load's page. If that person isn't the load's driver, the app first asks whether they are in the truck. A company's default or a status update can only offer sharing; nothing starts without that tap. The app asks for location only while it's in use ("While Using the App" on iPhone, never "Always"; Android's "Allow only while using the app", never "Allow all the time"). While it shares, iPhone shows its blue location indicator and Android a notification with a Stop button (without notifications allowed, Android shares only while the app is on screen). It sends the newest position only, with whether it's precise or approximate, whether the truck is moving or stopped, and the app's two readings (a VPN, a simulated position). Besides the position, the broker sees whether the truck is moving or stopped and since when, and when the phone stopped reporting. The app keeps no history: without signal it holds only the newest unsent position, sent when the phone is back online and deleted on Stop. Sharing stops at delivery, when you tap Stop, when the load is released, cancelled or ended, when you sign out of the app or ask for your account to be deleted, and on its own after a set time without a report; it never restarts by itself. Locate me on the carrier app's map uses your phone's exact location on your phone only: the exact position is never sent to LaneRally or kept. In the LaneRally Carrier app, Locate me asks the app for one position and gives it to the map on your phone only, the same way. To show places, the map asks LaneRally for the places in the whole-degree squares on your screen (about 70 miles a side), which shows roughly the area you're looking at, and so, after Locate me, roughly where you are; that request is answered and not kept. A city, ZIP or place you search the map for is looked up and not kept.
LaneRally Core Carriers
Lane Rally LLC's Core Carriers program is a small group of vetted carriers that get first look at its loads on their lanes. It is by invitation: our carrier desk may send a carrier an invite link, email one to the address on the carrier's FMCSA record (also when the carrier calls us, section 5), or send it a recruiting email (section 7). We collect:
- what the carrier gives on the page the link opens: its lanes, its equipment and whether it runs a 53-foot dry van, the lowest pay per mile it accepts, its home base and its home time (how many days out before going home, and the days it's home), and, only if it chooses, an agreement to calls from our assistant with the phone number it covers, which we confirm by calling that number with a code first (section 5);
- its membership record: its status (invited, applied, being vetted, member, paused or removed), its tier, the reasons our team records for a change, and their history;
- its vetting record: the checks our team makes, who made each one, when, and the result;
- its insurance: the liability and cargo filings FMCSA's records show for it (insurer, policy number, amount and dates). The carrier names its insurance agency; we find the agency's website, email and phone ourselves (with our AI research tool, section 8, and public records) and check how long its email domain has been registered. We email the agency asking for a certificate of insurance, and again every 90 days. Its answer comes to an address for that request only and is received the way email to a load's paperwork address is (below), with the same checks. Of each certificate we keep the sender, what our receiving service says about the sender's email, the file, what we read from it (the insurers, policies, limits, dates, the certificate holder and the agency's contact details) and our checks of it, including whether each insurer's NAIC code (the number the National Association of Insurance Commissioners gives each insurer) and name match the public lists of insurers below. Our team may also call the agent or the insurer at a number we find ourselves, never the one on a certificate, and records who called, whom they called, the number dialed, where we found it, the agency, the date, the cover confirmed and the result;
- its trailers' VINs, which we decode with the U.S. National Highway Traffic Safety Administration's public VIN service, and, if we ask for it, a photo of the trailer's data plate;
- its scorecard (section 3).
The carrier's people see its status, what's still missing and its own scorecard figures on the Core Carriers page of the carrier app. Its answers, vetting record and scorecard aren't shown to other carriers, shippers or partners, and how a scorecard is combined into a score stays with our team.
Owner ID check
In some cases Lane Rally LLC asks the owner of a carrier company to confirm who they are before the company joins Core Carriers or books Lane Rally LLC's loads: when the company's operating authority is less than 12 months old or we don't know its date, when the phone, email or address on its FMCSA record changed less than 90 days ago, when a network check put it on hold (above), or when our team asks for it. Only the company's owner is asked (or, in a company with no owner, its admin), never a driver. Until a person at Lane Rally LLC decides, the company gets no first look and can't book Lane Rally LLC's loads; the rest of LaneRally keeps working. Before anything is sent, the owner is shown a notice that says why we ask, who sees the photos, how they are compared and when they are deleted. We collect:
- photos of the front and back of the owner's driver's license and a selfie, taken or chosen in the LaneRally Carrier app or at app.lanerally.com;
- the license number, expiry date and issuing state the owner types.
Our server reads the barcode on the back of the license and compares the name, number and expiry date in it with what the owner typed and the name on the owner's LaneRally account. A person at Lane Rally LLC then looks at the photos and decides whether the selfie and the license show the same person and whether the license belongs to the company's owner. No face-matching or other biometric software is used: no software compares the faces, and we don't make or keep a face template or any other biometric identifier. If the photos aren't clear, the owner may send them once more; after that, our team calls the company.
The photos are stripped of their metadata (such as the phone's location), encrypted on our server before they're stored, and kept in a storage area of their own at Amazon Web Services (section 10), never in our database, our files or our backups. Only Lane Rally LLC's owners and LaneRally's platform administrator can view them, only through LaneRally, and each view is recorded. The photos are deleted 30 days after our decision, and at once if the check is cancelled, the company closes its account or the owner asks for their account to be deleted. Of the check we keep only: when it was asked and why, who decided, when, the decision and our team's note, the license's issuing state, its expiry date and the last four characters of its number, and whether the barcode matched what was typed (and whether the license had expired). We never keep the full license number, the date of birth or the address on the license. The owner's data download (section 13) includes the result.
Lane Rally LLC's partners
A partner company and its people use LaneRally's partner portal. We collect:
- the company's name, state and country, and the name, email, role and sign-in records of each of its owners, admins and members;
- its acceptance of the partner agreement, and its answers to our statements that it has no conflict of interest with the shippers it introduces;
- the shippers it introduces, with the company, website, city, state, contact person, phone and notes it gives for each (section 4);
- the questions its people ask about their statements, and our answers;
- for a partner that finds carriers for its shippers' loads: whether each of its owners and admins agrees to take carriers' calls, and, for those who do, the confirmed phone on their account;
- a log of what its people do in the portal, with their sign-ins, the IP address they came from and the kind of device (phone, tablet or computer).
For each partner we keep the shippers attached to it, the share set for each, and its earnings, statements, payouts and questions. We use these to run the program: to check each shipper a partner introduces against Lane Rally LLC's own customers and prospects and against the partner's own team (for example, someone on the partner's team who works for that shipper), to work out the partner's share, to issue its statements, to answer its questions and to pay it. We may ask a shipper whether the partner introduced it, and keep its answer. Lane Rally LLC's staff who oversee partners see these records and the activity log.
Partner payouts and tax. Lane Rally LLC pays its partners by bank transfer through Melio. A partner gives its W-9 (or W-8) through Melio's vendor onboarding, or may email it to Lane Rally LLC's accounting address, and gives its bank details only to Melio, never to LaneRally. Our team records the legal name, entity type and tax classification on the form, which form is on file and, for a partner outside the US, whether it performs services in the US; never the tax ID. A W-9 that reaches us by email is kept with that email and used only to pay that partner and to file tax information returns. We record the payee name Melio shows and the last four digits of the payout account. The partner's owners and admins see them on their Account page, with each payout's date and reference. Before we record a change of payout account, we call the partner at a number we already have on file, keep a note of that call, and email its owners at the addresses on file. We use these records to pay partners, to file information returns such as Form 1099-NEC where the law requires, and to keep our accounts.
What a partner sees. A partner sees, for the shippers attached to it only:
- each shipment's LaneRally number, its lane as city and state, its pickup and delivery dates, and its status in the words the shipper's own portal uses;
- whether each invoice has been sent and paid, and any amount it was short-paid by, only while the shipper shares that with it. Sharing is on once someone at the shipper accepts the Shipping Terms that describe partners, and any of the shipper's people can turn it off, or on again, on their portal's Partner page, which names the partner;
- for its owners and admins, the partner's own earning on each load. A load earns only once it has cleared, which follows the shipper's payment. Where the shipper shares its invoice status, a load shows as earned once it has cleared, and as unpaid when we close it as unpaid or when no payment is recorded 120 days after delivery (or another number of days Lane Rally LLC sets). Where the shipper doesn't share it, each of its loads shows as Pending, with no amount, until the partner's earning on it is on one of the partner's statements, and the partner's balance and totals count that earning only from then;
- for its owners and admins, on its statements: each of those shippers' loads that earned, with its net profit and the partner's share. Where the shipper shares its invoice status, each load also shows its revenue (mostly what the shipper paid for it) and the costs taken from it. Where it doesn't, a statement shows no revenue or costs for that shipper's loads, and a later change to one of them shows only as a change in its figures, with the change in its net profit and in the partner's share. While the shipper doesn't share it, the partner's pages don't show what that shipper's loads were billed either: a quote's price shows there only until the shipment is booked;
- where a shipper's owner or admin lets the partner book shipments for it: the places the shipper shares with the partner, their receiving contacts, and the shipments it books;
- where the partner finds carriers for those shippers' loads: for each such load still to be covered, a list of carriers that may fit it, with each carrier's name, why it's listed, its FMCSA authority, safety and insurance status and LaneRally's vetting of it, and the messages carriers leave for the partner. The partner may have Lane Rally LLC's offers sent to those carriers, or ask our phone assistant to call them (section 5). Carriers deal with Lane Rally LLC, which stays the broker of record.
A partner never sees a shipper's invoices or balance, how it pays, its credit or terms, a carrier's or driver's phone or email, a document, a truck's location, a Pickup PIN (the code a driver gives the shipping office at pickup), or what a carrier is paid on a load. Partners never see each other: no partner sees anything of another partner, or of another partner's shippers.
Other brokerages' partner programs. A brokerage that uses LaneRally's software may run its own partner program on it. For that brokerage we then hold its partners' accounts and people, the businesses they introduce, the shares, earnings, statements and tax details it records, and a log of what its partners' people do in the portal; that brokerage's staff see the log's sign-ins with the day, the time and the kind of device, never the IP address. That brokerage decides what its partners see of its own shippers, oversees them and pays them itself, and its own privacy policy also applies. Its partners never see Lane Rally LLC's records, and Lane Rally LLC's staff never see its partners. LaneRally's platform administrators may open a support view of its partner program; each one is logged with its reason.
Outside brokers on the load board
Outside brokers post loads only once we open LaneRally's load board to them, and this part applies from then. An outside broker is the broker of record on the loads it posts: it contracts with and pays its carriers itself, and its own privacy policy also applies to what it gets.
What we collect from an outside broker: its application (above); the results of our daily checks of its authority and bond with FMCSA; its postings, with the email of the person who posted each, which its rate confirmations print; its answers to carriers' offers and its counters; its rate confirmation terms; its messages with carriers; its requests for carrier packets; its disputes of pay reports; and a log of what its people do.
What an outside broker sees about carriers. When a carrier makes an offer on one of its postings: the carrier company's name and MC number, whether it passes LaneRally's checks, the offer and, when an offer needs a check, a phone number to call: the one on the carrier's FMCSA record, or the carrier's number from before a recent change. Once a carrier books one of its loads, the broker sees what any broker of record sees (section 10): the rate confirmation with the driver's name and phone; the signed copy with the signer's details (above); the load's status updates, arrival and departure times and PODs; the truck's location while the driver shares it ("Location", above); and the messages on the load. If it asks the carrier for its carrier packet (the carrier's papers for setting up with a broker) and the carrier sends it, it also sees the carrier's certificate of insurance, authority letter and FMCSA profile, never a W-9, a tax ID, bank details, a voided check or a notice of assignment. Outside brokers never see carriers' truck posts.
Pay reports. A carrier may report in the app the day an outside broker paid it for a load, or that a load hasn't been paid some time after delivery. The broker sees each report about its loads and may dispute it once; the carrier and LaneRally's staff see what the broker wrote, and our staff decide a disputed report. From these reports, carriers see each outside broker's days to pay, and LaneRally may mark a broker whose carriers report slow payment a "Slow payer". Reports from test bookings never count.
What Lane Rally LLC's desk sees. LaneRally's staff run Lane Rally LLC's desk as well as the board. That desk sees each outside broker's postings in full: every change, the amount and time of each carrier's offer and of the price it asks (without the carrier's name), the broker's counters and the booking. It also sees figures about each outside broker by name, such as how many loads it posts and books and how its posted rates compare with booked rates and LaneRally's estimates. LaneRally's staff who run the platform may also see an outside broker's account, postings, offers, bookings, rate confirmations and messages, to review accounts, support it, decide disputed pay reports, moderate messages and keep the board safe. The offers on a posting and the broker's counters are never shown to another broker, or to any carrier other than the one they're with.
Receivers and delivery appointments
To book a shipment, the shipper (or a partner booking for it, or our desk) gives the name and phone of the contact at each delivery place, and may give that contact's email. We keep them on the load, and on the shipper's saved place for its next booking. The rate confirmation and the carrier's load page show the receiving contact's name and phone, so the driver can reach the receiver. A shipper may also choose to have shipment updates emailed to the receiving contact.
On Lane Rally LLC's loads, when we have the receiving contact's email:
- We email it about the delivery appointment: a request to confirm it, a reminder if it isn't confirmed, and a check the day before delivery, which names who confirmed it. Each has a link to a page that needs no sign-in.
- Our desk may also email it the expected arrival time or a delay, with a tracking link that shows milestones and city only.
- These emails never carry a price, the carrier's pay or the Pickup PIN, and each has a link that stops Lane Rally LLC's emails to that address.
- The page shows the load's reference, the shipper's name, the PO and reference numbers, the commodity, pieces and weight, the pickup date, that delivery place and its appointment, who confirmed the appointment, and the carrier company's name once one is assigned; never a price, the Pickup PIN, the driver's phone or a location. We keep no record of who opens it, apart from our server's ordinary logs (section 11).
- When someone uses the page to confirm the appointment, propose another time, say no appointment is needed, or say they have no such order, we record the name they type, what they chose, the time, their IP address and their browser (user agent). Notes they type are for our desk only; the carrier sees them only if our desk copies them into the carrier's instructions.
- Our desk may also record a confirmation it got by phone, with the name of the person it spoke to, or on the receiver's own scheduling website, with its confirmation number.
- The carrier on the load sees whether the appointment is confirmed, its time or the receiving hours, its confirmation number, and the name of whoever confirmed it: the name typed on the page, or the person our desk spoke to.
- A link stops working 48 hours after delivery, when the load is cancelled, when the delivery place or the receiving contact's email changes, or when our desk replaces it.
Paperwork by email
Each load Lane Rally LLC books has its own email address for the signed bill of lading or proof of delivery. The rate confirmation prints it, and replies to the rate confirmation email go to it.
- Email to it is received by Amazon Web Services' email service (Amazon SES), which checks it for spam and viruses and keeps the message in Amazon's storage only until LaneRally takes it, and for at most 7 days.
- Of each message we keep the sender's and recipients' addresses, the subject, the message's identifier, a summary of its headers and its attachments. We don't keep the message's text, except the sender's own words (up to 1,000 characters, without the quoted history) when an address the carrier has on file sends no paperwork or seems to ask about the rate confirmation, so our desk can answer.
- Attachments from the carrier's addresses on file (its people's, the driver's on that load and the one on its FMCSA record) become PODs for our desk's review once the load has reached its delivery, like an upload in the app. Anything else waits for our desk, which attaches it to a load or dismisses it.
- Every attachment goes through the checks every upload has: pictures are rebuilt from their pixels, PDFs with active content are refused, and PDFs are scanned for viruses on our own server.
- We reply automatically: to the carrier's address on file, that we received it or what we couldn't read; to any other sender, a receipt that names no load. We never reply to an automatic message, and we limit how many replies an address gets.
We keep these messages and attachments as section 11 describes.
What we get from other sources
- FMCSA records. When you give an MC or USDOT number, we look the company up in the Federal Motor Carrier Safety Administration's public records and keep its legal and trade names, USDOT and MC numbers, city and state, number of power units, operating authority and when it was granted, insurance and bond on file, safety data, and the phone and email on the record. We don't request officers' names or cell phone numbers.
- Daily FMCSA checks. For the carriers we work with (carriers with a LaneRally account, carriers Lane Rally LLC's desk keeps as contacts, Core Carriers members and carriers on Lane Rally LLC's active loads), we read the U.S. Department of Transportation's public daily files every day: operating authority and its history, insurance and bond filings and their cancellations, revocations and suspensions, process agents, out-of-service orders, and the company census with its phone, email and address. We confirm a change to authority, insurance or an out-of-service order with FMCSA's data service before we act on it (section 3). We keep the history of these checks for each of those carriers, including each change to the phone, email or address on its FMCSA record, with the old and new details and their dates. To catch such changes, we also read each day's census updates for all carriers (the company phone, email and address on each record updated in the last few days) and keep them for 120 days.
- Public government records and business directories, which we use to find businesses that may want our services.
- Public lists of insurance companies, which we use to check the NAIC code and name of each insurer on a certificate of insurance: the Iowa Insurance Division's list of insurance companies that may do business in Iowa (it contains data from the Iowa Insurance Division, used under the Creative Commons Attribution 4.0 license, CC BY 4.0), New York State's open data list of insurers, and the U.S. Department of the Treasury's list of certified surety companies (Circular 570). These lists are about insurance companies, not people.
- Public websites. Our AI research tool searches the web for a company's published main phone, general email and website, and notes where it found them. We may also visit a company's website to confirm a phone number.
- Lists our team imports.
- Twilio Lookup, which tells us whether a phone number is valid, whether it is a landline or a mobile line, and which phone company serves it.
- Mail-server records (DNS), which show whether an email address's domain can receive mail.
LaneRally's app doesn't ask for Social Security numbers, tax ID numbers, or bank or card details. It asks for a driver's license only in the owner ID check (above), and only from a carrier company's owner; of the license we keep only its issuing state, its expiry date and the last four characters of its number. Its payment features run only in test mode today, for invited testers, and no real money moves through LaneRally. When they're used, card and bank details, and a carrier's W-9 for payouts, are given only on the payment services' own pages, never to LaneRally: we keep what those services report back, such as a card's brand and last four digits, whether the W-9 was received and the legal name on it. A carrier setting up with a brokerage may still email it a W-9, which shows a tax ID. If one reaches us, we keep it with that email and use it only to set up that carrier.
If a carrier asks Lane Rally LLC to pay its factoring company, we keep the factor's name and contact and the remit-to address (where the factor asks to be paid) that the factor confirms when we call it, and we pay the factor for that carrier's loads; the factor then learns which loads we pay it for, and how much. Partners' tax forms and payouts are described above.
3. How we use it
- To run accounts: signing in, keeping you signed in, one-time codes, password resets, and showing you where you're signed in.
- To check companies: FMCSA lookups; a one-time code, by voice call or email, to the contact on a carrier's FMCSA record; a review by a person of every broker application, which may include a call to the phone on the brokerage's FMCSA record; and a review when two accounts claim the same company. Some checks are automatic, such as whether FMCSA shows active authority. Every day we check the carriers we work with (section 2): while one's authority, insurance or out-of-service check fails (once FMCSA's data service confirms it), or a change to the phone, email or address on its FMCSA record hasn't been re-verified, it can't book Lane Rally LLC's loads or get its assistant's load calls or first looks, and our desk is told, with any of its loads the carrier has booked. We re-verify a contact change only through the contact we verified before, or by our team's call to a number we find ourselves. We also look up FMCSA's record again when a carrier books a load. On Lane Rally LLC's loads we also check how long the carrier's authority has been granted: under 6 months it waits, and from 6 to 12 months, or when we don't know, a manager's approval is needed, which we record with who gave it, when and why. If an automatic check stops you, email [email protected] and a person will look at it.
- To connect sign-ups with our brokerage's records: when a carrier or shipper finishes signing up, we link its company to any record Lane Rally LLC already keeps for it, matched by USDOT number or email domain, and may mark it as a customer.
- To run the phone assistant, take messages and call people back (section 5).
- To offer LaneRally's services and Lane Rally LLC's brokerage services: emails asking whether you agree to calls, sales emails and sales calls (sections 5 and 7).
- To handle freight for the brokerage arranging a load: load details, rate confirmations and check calls.
- To find carriers for Lane Rally LLC's loads: our desk, and a partner that finds carriers for its shippers' loads, see carriers that may fit a load, drawn from carriers' history with Lane Rally LLC and what they've told us about their lanes and trucks. Our desk also keeps notes and scores about each carrier's on-time record and how its offers and bookings have gone. Each night we work out a scorecard for each Core Carriers member and each carrier on Lane Rally LLC's loads in the last 180 days: on-time delivery, how often the truck's location was shared, how often the carrier answered load offers and acted on first looks, and the loads it released after booking.
- To run Lane Rally LLC's Core Carriers program (section 2): inviting and vetting carriers, and offering members a new load first when it fits their lanes, equipment, minimum rate and home time, in order of fit and then scorecard.
- To confirm delivery appointments with receivers, and to take paperwork by email (section 2).
- To run Lane Rally LLC's partner program, and, once it opens, the load board for outside brokers (section 2).
- To get paid: invoicing shippers, and selling shipper invoices to factoring companies (section 10).
- To price freight: a calling company's rate estimates use the rates heard on its own calls, the rates on its own loads and rates its own team enters. One company's rates don't feed another company's estimates. Rates on LaneRally's load board are different: as the Terms of Service describe, LaneRally may use the rates posted, offered and booked there, including outside brokers', in its prices and estimates, including Lane Rally LLC's own. Another company's prices or estimates draw on them only combined with other companies' rates, never on one company's alone. Our brokerage is Lane Rally LLC itself, not another company: its desk sees each outside broker's postings and the offers on them (section 2), and may take them into account in its own prices.
- To check quality: automatic rules and an AI reviewer read call transcripts, for example to check that the assistant answered honestly when asked whether it is automated.
- To keep LaneRally safe: rate limits, identity and fraud checks (such as the network, device, trailer, certificate and faked-location checks and the owner ID check in section 2), security records, and looking into misuse.
- To keep records and meet the law: consents, opt-outs, agreements, and the records brokers must keep.
- To test features with invited testers, using made-up companies and loads marked TEST.
- To fix and improve LaneRally.
4. Businesses that haven't signed up
Lane Rally LLC keeps a list of businesses that ship or haul freight, so it can offer them its services. Most of the list comes from public government data (section 2). For each business it holds company details: name, main phone, a business email if the record has one, address, USDOT and MC numbers, authority, safety data, fleet and cargo. We don't import free email addresses from these records, and our AI research tool is told to collect company contacts only, never personal phones or emails. For a one-truck owner-operator, though, the phone number and address on the FMCSA record may be the owner's own.
We add what we learn from contact with the business: status and notes, details given on calls, whether it agreed to calls, the phone line type, and scores for fit and safety. Lane Rally LLC may email a carrier in the list about its Core Carriers program (section 7), and match the number of someone who calls us to a carrier in the list (section 5). A Lane Rally LLC partner may also introduce a business to us, with a contact person's name and phone and notes (section 2).
If you don't want to hear from us, use any of the ways in section 13. We record your request and honor it. You can also ask what we hold about you, or ask us to correct or delete it (section 14).
5. Calls and the phone assistant
Who is calling. Lane Rally LLC, and any other calling company, uses an automated assistant that speaks with an artificial (AI) voice. Every call opens by naming the company and saying "This call is transcribed." A call the assistant places also gives the company's number to call back on. A sales call, a load offer to a carrier, or a dispatcher's call to book a load also says, right after it names the company, how to stop that company's calls: say "stop calling" or press 9 (a 9 works at any point, even while the assistant is still speaking), and the assistant records your request, confirms it and ends the call. If you ask whether you're talking to a person, the assistant says it is an automated assistant, and it never claims to be human. Ask for a person at any time and it will offer to connect you with one or take a message.
Whom it calls. The assistant calls people who agreed to calls from that calling company, about things such as quotes, loads and check calls. While a calling company has business-landline calling turned on, its assistant may also make sales calls to business landlines without prior agreement. These are the main numbers in our records of businesses (section 4), taken from public government records, the business's own website or lists our team imports. It makes such a call only when all of these hold:
- the number is a US number, isn't toll-free, and Twilio Lookup reports it as a landline (checked again after 180 days). A Canadian number, or a business whose record is in Canada or whose email address ends in .ca, is never called this way (section 17);
- the business isn't in a state the calling company excludes;
- it's a weekday, during the calling company's sales hours in the business's local time (its state's, or with no state on file its phone number's area code's; 9 AM to 5 PM unless it sets others, never before 8 AM or after 9 PM), and within any stricter hours the business's state, or the state its phone number's area code is in, sets;
- the number hasn't had a call from that company in the last 30 days, and gets no more than three tries in one campaign;
- nobody at that number has told that company to stop, withdrawn an agreement to its calls, or said no when that company asked them to agree to its calls.
Twilio Lookup tells a landline from a mobile line, but it can't tell a business line from a home line, so we can't always tell them apart: some businesses, such as one-truck owner-operators, list a home line as their main number.
Other assistant calls happen during the calling company's calling hours in your time zone: the one on file for you, and the one your phone number's area code is in (when they differ, or an area code spans two zones, the hours they all share), else the calling company's. The hours are 8 AM to 8 PM unless the company sets others, and never before 8 AM or after 9 PM. Calls that aren't about a load you're working on, such as sales calls and load offers, also keep to any stricter hours your state sets, and to a Canadian number, to Canada's telemarketing hours (section 17). A callback you ask for on a call goes out at the time you ask, as long as it's between 8 AM and 9 PM your time, even outside the calling company's calling hours. It still keeps your state's stricter hours, unless your state's law leaves out calls a person asks for. If the assistant can't make the callback, a person from the calling company may call you instead, unless you've asked not to be called. If a call reaches voicemail, the assistant may leave a short message that names the company and, when the company has set one, gives a number to call back; the message of a sales call, a load offer or a dispatcher's booking call also says to call that number and press 9 to stop that company's calls. When you call it from the number we called, the assistant offers "press 9" first, and pressing it records your request and ends the call.
Code calls. When someone signs up or applies for a company, confirms a phone number, or resets a password, we may place an automated call that reads a one-time code, either to the phone on the company's FMCSA record or to the phone on the account. A code call only reads the code and says what it's for; it is never a sales call. Press 9 during a code call and we won't call that number with codes again unless we confirm with you that you want them. We never send codes by text.
Agreeing is optional. Agreeing to calls from the assistant is never a condition of buying anything or doing business with a calling company. Each agreement covers one calling company: agreeing to one company's calls isn't agreeing to another's. An agreement you sign for your own confirmed phone on your LaneRally account page, or at sign-up, covers that number in all of that calling company's records, and withdrawing it withdraws it from all of them.
What we keep from a call. For each call: the phone numbers, direction, times, length, status, outcome, a summary, notes, the full text of what both sides said, the actions the assistant took, our quality reviews and the call's costs. We don't record call audio. Details you give go into your company's record. If you say on a call that you agree to calls, the assistant may note your words with that call. Until our attorney approves relying on an agreement given that way, calls that need your agreement rely only on one you sign.
Who processes a call. Twilio carries the call and turns speech into text, and text into speech, as the call happens; it may use partner speech engines to do so. What each side says, together with context about the call (such as the company, the contact's name, a load summary and notes), goes to Anthropic's Claude to produce the assistant's replies. Numbers you give on a call are checked with Twilio Lookup.
Calls with our team. When the assistant connects you with a person, it puts the call through the calling company's line to the phone that company has set for it. The person hears who is on the line, such as your company's name, but not your number, and must press 1 to take the call. If nobody takes it within about 25 seconds, the assistant comes back and takes a message for that company's team. Once a person takes the call, the rest of it isn't transcribed.
Callers we don't know. When someone calls Lane Rally LLC from a number that isn't in its customer records, we may match the number to the main phones of carriers in our records of businesses (section 4). If it matches one, the assistant may offer to email a Core Carriers invite link to the email on that carrier's FMCSA record, never to an address said on the call, and tells the caller only part of that address. Otherwise it takes a message. A team member may also call you through Twilio from LaneRally; we log who called, both numbers, the company, and the time, length and outcome. We don't record or transcribe these calls.
Calls on a partner's loads. When a Lane Rally LLC partner finds carriers for one of its shippers' loads, it may ask the assistant to call carriers about that load, for Lane Rally LLC. A carrier on a call about such a load who asks to talk to the person working that load for Lane Rally LLC may be put through to one of the partner's owners or admins who agreed to take carriers' calls: the call goes through LaneRally's line, so neither side sees the other's number, the person must press 1 to take it, and the rest of the call isn't transcribed. If nobody takes it, the assistant takes a message, which our desk and the partner can read; the partner's copy never shows the carrier's phone or email.
6. Text messages
We send text messages only after our texting registration is verified; until then we send none. When texting is on, a calling company texts only people who asked it for texts. Message frequency varies, message and data rates may apply, and replying STOP ends them. Mobile numbers given for texts, and text-consent records, stay with the calling company they were given to. We never share them with third parties or affiliates, except the service providers that deliver the messages; the sharing in section 10 doesn't apply to them.
Texts you send to our numbers: STOP, or saying you don't want calls, is always honored. START lets that company text you again, but doesn't restore an agreement to calls. Other texts are saved and forwarded by email to the team of the company you texted.
7. Email
We send email about accounts (confirmations, codes, invites), about business (requests to agree to calls, rate confirmations, alerts, load offers to carriers, including carriers in our records that haven't signed up, notices you choose, shipment updates to the people a shipper names, delivery appointment emails to receivers, automatic replies to paperwork sent by email, certificate requests to a carrier's insurance agency (when the carrier names it, and every 90 days for Core Carriers members), Core Carriers invite links, and partners' notices, such as a new statement or a payout sent) and for sales, including recruiting emails for Lane Rally LLC's Core Carriers program. Our AI tool may draft a sales email; a person on our team reviews and sends it. Every sales email says that it is an advertisement, and every sales email and request to agree to calls shows our postal address and a link to unsubscribe. The link stops that company's sales emails and requests to agree to calls to you; it doesn't stop emails about a load you're working on, such as rate confirmations. You can also reply "unsubscribe" to a sales email: our team records it, and it stops the same emails the link does. Account and security emails continue while you have an account. When our email service isn't set up, some messages wait in LaneRally, with their recipient and text, for a team member to send by hand, and the others aren't sent. A sales email sent by hand, or from a team member's own email app, carries the same advertisement line, address and ways to unsubscribe; LaneRally won't prepare one without them. We send no sales email, and no request to agree to calls that you didn't ask for, to a Canadian address or a business in Canada (section 17).
8. AI in LaneRally
We use Anthropic's Claude for:
- the phone assistant's replies during calls;
- reviewing transcripts of sales calls afterwards;
- researching businesses on the public web, for company contacts only;
- drafting sales emails and call scripts, which a person reviews before use;
- picking out load details from emails our team pastes in.
Anthropic receives the content each task needs, as described above. We use Anthropic's commercial service, whose terms do not allow Anthropic to train its models on what we send. We don't train AI models on your information.
AI can get things wrong. The assistant reads back details that matter, such as rates, numbers and times, and a person reviews AI-drafted emails before they're sent. A calling company's assistant may agree a load with a carrier on a call after reading the rate and details back; the load is then assigned to that carrier and a rate confirmation is emailed at once. The signed rate confirmation sets the load's terms, and nothing said on a call changes a signed rate confirmation.
9. Cookies and browser storage
We set no cookies on lanerally.com, and it loads nothing from other companies: no analytics, no ad trackers or pixels, and no outside scripts or fonts. Cloudflare, which carries traffic to our sites, may set strictly necessary security cookies of its own, depending on its settings.
app.lanerally.com sets six cookies. All are needed for the app to work or keep a choice you made on that device; none is used for analytics or advertising.
- laneagent_session keeps you signed in, for up to 14 days. It holds your user number, a random session number, a short message for your next page and, for our administrators, which company they're viewing. It is signed so it can't be altered.
- laneagent_device recognizes a browser that has signed in before. It lasts one year and doesn't contain your email. We use it on the sign-in page, so sign-in limits are applied fairly, and, kept with each sign-in as a scrambled value, to notice one browser used by people of two or more carrier companies (a fraud check our team reviews, section 2).
- lr_door remembers whether you last signed in as a carrier, shipper, broker or team member. It lasts one year and is used only on the sign-in page.
- lr_tester_invite lets an invited tester's browser claim its invite. It lasts until the invite expires, at most 7 days.
- lr_board keeps a carrier's last load search on that device, for up to 30 days.
- lr_text keeps the carrier app's larger text size on that device, for up to one year.
Some screens remember layout choices, and when that browser tab last shared a location, in the browser's own storage. Push notifications you turn on are delivered through your browser's own push service, or, in the LaneRally Carrier app, through Apple's or Google's push service (section 10). The LaneRally Carrier app uses the same cookies inside the app, and keeps only what section 2 lists on the phone.
App pages load fonts from Google Fonts, so Google receives your IP address and browser details when you open them.
We don't track you across other websites. Because we don't sell or share personal information, browser signals such as Do Not Track and Global Privacy Control have nothing to turn off on LaneRally today.
10. Who we share it with
- The other side of a load. When a brokerage arranges a load, the carrier, the shipper and the pickup and delivery locations get the details that load needs, such as company names, the driver's name and phone, truck and trailer numbers, and the pickup and receiving contacts' names and phones. A signed copy shows its signer's details as section 2 describes (for a bill of lading, the signer's name, title, company and the time only, never the IP address or device) to everyone who can open it: for a rate confirmation, the broker of record and the carrier's company; for a bill of lading, the shipper's people who can see the shipment, Lane Rally LLC's desk, and the carrier hauling the load and its drivers on that load. Drivers show or hand over a printed copy at the pickup and delivery docks, so people there see it too; once the receiver signs it at delivery, that copy can become the load's proof of delivery, which the shipper receives and, where the invoice is sold, the factoring company too.
- Lane Rally LLC's partners, outside brokers and receivers: what section 2 says each of them sees.
- Factoring companies. Lane Rally LLC may sell a shipper's invoice to a factoring company, which then collects it. Before a shipper books on net terms (paying an invoice after delivery), the factor approves its credit, so the factor receives the shipper company's name and the business details it asks for. For each invoice it buys, the factor receives the invoice (its number, the shipper's name, the amount and dates, and the load's number) with the load's accepted proof of delivery and, where the factor pays the carrier for that load, the carrier's pay on it. The invoice then carries a notice of assignment (a notice that the invoice now belongs to the factor) and names the factor, where to pay it (its remit-to) and its published phone number: the shipper pays the factor there, after confirming those details by calling that number. We keep the factor's remit-to details in our server's settings, never in our database, and never take them from anything typed into LaneRally. A factoring company isn't our service provider: we give it this information only so it can buy and collect the invoice, and its own privacy policy applies to what it receives.
- Your company and the companies you deal with. People with access to your company's account see its records. When you deal with a calling company, what you tell its assistant goes to that company.
- Our team. Our team members see what they need to do their work. When one of our administrators opens a company's workspace to help it, the visit and every change are logged. Lane Rally LLC's staff with partner access see partners' records and activity logs, and LaneRally's staff run Lane Rally LLC's desk as well as the load board (section 2).
- Service providers that run parts of LaneRally for us:
- Twilio: phone calls, speech-to-text and text-to-speech, phone number lookups, texts, calls between our team and you, and calls put through to a partner;
- Anthropic: the AI uses in section 8;
- Cloudflare: carries all traffic to our websites;
- our email delivery service: every email we send, with its recipient and text;
- Amazon Web Services: Amazon SES receives email sent to a load's paperwork address or to a certificate request's address, and Amazon S3 holds each such message until LaneRally takes it, for at most 7 days (section 2). Amazon S3 also stores the encrypted copies of our database and uploaded files that we send it (section 11), and, in a storage area of their own, the owner ID check's photos (section 2), which are encrypted on our server before they're sent; Amazon can't read either;
- Google: fonts on app pages (your IP address and browser details);
- OpenFreeMap: the carrier app's map loads its map images from OpenFreeMap (tiles.openfreemap.org), which receives your IP address and the part of the map you look at;
- push services: push notifications travel through the push service of your browser's maker (such as Google, Apple, Mozilla or Microsoft), carrying the notice's title and a link only: never a PIN, an address or a rate;
- Apple: in the iPhone app, push notifications travel through Apple Push Notification service (APNs), which receives the phone's push token and the notice's title and link only;
- Google: in the Android app, push notifications travel through Firebase Cloud Messaging, with Google as our service provider. It receives the app's Firebase installation number or token and the notice's title and link only, and Firebase collects the app's version and its own technical details to deliver them. The Android app's document scanner is Google's ML Kit: the scanning runs on the phone and the pages stay there until the app sends them to LaneRally, and ML Kit sends Google information about the device, how the scanner performs, and numbers for each installation of the app;
- payment services, in test mode today: Stripe for shipper cards; Mercury for bank transfers to LaneRally, which receives a shipper company's name and email and each invoice's number, dates, amount and one-line description, and shows the shipper its own account number for paying; and Melio, which our team uses to pay carriers, carriers' factoring companies and Lane Rally LLC's partners, and through which partners may give their W-9. Each receives what its payment needs, and card and bank details are typed only on its own pages.
Government data services, such as FMCSA's and the U.S. Department of Transportation's data portal, receive only the MC or USDOT numbers or search filters we look up. Domain registries receive only the domain of a company's email or website, when we check how long it has been registered. The U.S. National Highway Traffic Safety Administration's VIN service receives only a trailer's VIN. We download public lists of internet addresses (VPN providers, data centers, mobile networks, Apple's iCloud Private Relay and Tor exits) and of insurance companies (section 2) from their publishers; nothing about you is sent to them. When an insurer on a certificate isn't on those lists, our team may look up the insurer's name and NAIC code with a web search or on the Arizona Department of Insurance and Financial Institutions' public company search; nothing about you is sent.
- For legal reasons: when a law, court order, subpoena or other legal process requires it; when we need to prevent fraud; or when it's needed to keep LaneRally, the people who use it, or anyone else from harm to their safety, property or rights.
- In a business transfer: if we are involved in a merger, acquisition, financing or sale of assets, with the other party, under this policy's protections.
- With your permission, or at your direction.
Where it's kept: our database, its nightly copies and our files are on servers in the United States, and our service providers process information in the United States and possibly other countries. Section 17 says more for people in Canada.
We do not sell personal information, and we do not share it for cross-context behavioral advertising. When we use information in de-identified form, we keep it that way, we don't try to re-identify it, and anyone we give it to must agree to do the same.
11. How long we keep it
We haven't set fixed deletion periods for most records yet. A few are deleted automatically: a data download 7 days after it's made, read in-app notifications after 90 days, a truck's last exact position when location sharing ends, the daily FMCSA census updates we read for all carriers after 120 days (section 2), a push address that keeps failing, the copy of a message to a load's paperwork address that waits in Amazon's storage, once LaneRally has the message (or after 7 days), the owner ID check's photos 30 days after our decision (or sooner, as section 2 says), and, in the LaneRally Carrier app, a POD scan on the phone once LaneRally has it and the newest unsent position when sharing stops. A receiver's appointment link stops working 48 hours after delivery; the record of what was done with it is kept. An app's sign-in and push token end with your web sign-in, when you sign out of the app, or when your account is deleted. We keep other information while your account is open or our business relationship continues, and afterwards for as long as we need it for the purposes in section 3: to meet legal duties (for example, federal rules require a broker to keep a record of each shipment it arranges for three years), to resolve disputes, to prevent fraud, and to enforce our agreements.
Some records are kept with no set end date, because they prove what happened and our system doesn't let them be erased: agreements to calls and their withdrawals, the history of every opt-out and of any later lifting of it, acceptances and signatures of our terms, signed rate confirmations and bills of lading, delivery appointment records (who confirmed or changed an appointment, when, and from which IP address and browser), messages received at a load's paperwork address and their attachments (including ones our desk dismissed), carriers' pay reports and brokers' disputes of them, the history of our daily FMCSA checks of each carrier we work with, authority approvals, Core Carriers membership histories, vetting records and insurance-agent call records, certificates of insurance agencies send us and our checks of them, network checks and our team's reviews of them, the result of each owner ID check (section 2; an erasure removes the license's state, expiry date and last four characters, and our team's notes), the history of carriers' choices of how many load-offer calls they get, security records, notes of our review calls, tester invites, and each published legal text. The pickup and receiving contacts' names, phones and emails stay on each load as part of its shipment record, and an erasure doesn't remove them; a receiving contact also stays on the shipper's saved place until the shipper changes it. A partner's ledgers, statements and payouts are kept for 7 years; erasing the information of one of a partner's people removes their contact details from the partner's records, not the figures. An opt-out is lifted only by your own later word: texting START, or signing a new agreement to calls. A code-call opt-out is lifted only after we confirm with you that you want code calls again. Keeping this history is what lets us keep honoring your stops.
We make a copy of our database every night and keep each copy for a limited number of days (14 unless we change it); older copies are deleted automatically. Information deleted from LaneRally can remain in these copies until they expire. Files our team uploads, such as imported lists, are also copied to our backups. We also send an encrypted copy of the nightly database, and of each uploaded file, to Amazon S3 in the United States. There, daily copies are deleted after 35 days and one copy a month after 400 days, unless we change it, and information deleted from LaneRally can remain in them until then. Copies of uploaded files there are kept with no set end date: they aren't deleted when a file is deleted from LaneRally. We use them only to recover from a loss. Our server's logs can include IP addresses.
12. How we protect it
- Passwords are stored only as scrypt hashes. Sign-in is locked for a while after repeated failures, and sign-in, sign-up, lookup, invite and opt-out requests are rate limited.
- We store only a scrambled version of each session's identifier. A session ends after 14 days, when you sign out, or when your password changes, and you can sign out of every session from your account page.
- One-time codes are stored only as scrambled check values, allow 5 tries, and expire after 10 minutes by call or 30 minutes by email. Codes that verify a company go only to the contact on its FMCSA record, never to a number typed into a form, and password-reset codes go only to a phone or email already confirmed on the account.
- Our websites are served over encrypted connections (HTTPS) through Cloudflare, and our email service must use an encrypted connection.
- The app blocks cross-site form submissions and framing by other sites, and checks Twilio's signature on the requests Twilio sends us.
- Each company's data is kept separate within LaneRally, test data is kept apart from real data, and our administrators' visits to a company's workspace are logged.
- Security records can't be changed or erased. A consent record can't be erased, and the only change it allows is being marked withdrawn, once.
- The nightly database copy is checked when it's made. The copies we send to Amazon S3 are encrypted on our server before they leave it, and the key that opens them isn't kept on the server.
- The owner ID check's photos are encrypted on our server before they're stored, with a key Amazon doesn't have. They never go into our database, our files or our backups, only Lane Rally LLC's owners and LaneRally's platform administrator can view them, through LaneRally only, and each view is recorded.
- A receiver's appointment link carries a long random key; we keep only a scrambled value of it, and anyone opening it sees only that delivery.
- Partners and outside brokers see only what section 2 describes. No partner sees another partner's records, no brokerage's partners see another brokerage's, and no outside broker sees the offers or counters on another broker's postings.
No system is perfectly secure. If a breach affects your personal information, we will notify you and the authorities as the law requires. Please keep your password to yourself, sign out on shared devices, and tell us at [email protected] if you think someone used your account.
13. Your choices
Calls from the assistant:
- Say so on any call. That calling company won't call your number again unless you later sign a new agreement to its calls.
- Press 9 on a code call. We won't call that number with codes again unless we confirm with you that you want them.
- Say "stop calling" or press 9 on a sales call, a load offer or a dispatcher's booking call from the assistant. That calling company won't call your number again unless you later sign a new agreement to its calls.
- On your account page, under "Calls from the assistant", withdraw your agreement to Lane Rally LLC's calls.
- Text STOP to a calling company's number to stop its texts and withdraw your agreement to its assistant's calls, or text that you don't want calls to stop all its calls.
- Use the link in a message that asked you to agree to calls.
- Use the call opt-out form at lanerally.com/call-consent, once that page is published. It stops the assistant's calls to your number from every calling company on LaneRally.
- Email [email protected].
We keep a record of every request to stop, and keep honoring it. If we ever have to restore our database from a backup, our restore procedure carries forward the stops recorded since that backup from the damaged copy when it can be read; when it can't, our team re-enters every stop it knows of before calling resumes.
Emails: use the unsubscribe link in any sales email, load offer email or request to agree to calls, or reply "unsubscribe" to a sales email and our team records it. A certificate request to an insurance agent also has a link that stops them.
Notices: Turn push notifications or notice emails off in Lanes, alerts & calls; signing out on a phone turns its push off, and every notice email has a link that stops LaneRally's emails to that address. A partner's people can turn their notice emails off on the partner portal's Account page, and its owners and admins can stop taking carriers' calls there.
Shippers with a partner: any of the shipper's people can stop sharing its invoice status with its partner, or let it see that again, on the shipper portal's Partner page. The shipper's owner or admin decides there whether the partner may book for it, and which places it shares with the partner.
Receivers: every email we send a receiving contact (delivery appointment, arrival-time and shipment-update emails) has a link that stops Lane Rally LLC's emails to that address.
Your account: on your account page you can change your phone, confirm your email, change your password, see where you're signed in, sign out of one session or all of them, and download your data (your own, or a company's you own or manage). A carrier company's owner can close it from the carrier app's account page.
Deleting your account: anyone in a carrier company, drivers included, can ask for their own account to be deleted in the carrier app, under Account, Data & privacy, Delete my account. Anyone can ask at app.lanerally.com/account-deletion, which works even if you can no longer sign in: with the account's email and password, or, if you forgot the password, with a one-time link we email to the address confirmed on the account. The request ends at once every sign-in of the account (on every phone and computer), its push notifications and any location sharing it has running, and stops assistant calls to the account's confirmed phone (the account's agreements to those calls are withdrawn and kept as records, and the number is added to the do-not-call list every calling company on LaneRally honors), and our team then erases the account within 30 days of the request, as section 14 describes, keeping the records section 11 lists. While our email service is set up, we email the confirmed address when we receive the request and when it's done. You can also email [email protected] to close an account or have your information deleted.
14. Your privacy rights
Depending on where you live, you may have the right to:
- know what personal information we hold about you and get a copy, in a portable format where the law requires;
- have it corrected;
- have it deleted;
- opt out of any sale or sharing of personal information, targeted advertising and profiling that has legal or similarly significant effects (we don't do any of these);
- appeal our answer to your request.
To use any of these rights, email [email protected] with "Privacy request" in the subject, or write to us at the address in section 20. We'll confirm that we received your request within 10 business days. We'll confirm your identity by matching details we already hold, or by asking you to confirm from the email address or phone number we have for you. Someone you authorize may ask for you, with your signed permission; we may ask you to confirm it directly. We answer within the time the law sets; in California that is 45 days, which the law lets us extend once by another 45 days if we tell you why. We won't treat you differently for using your rights.
When you ask us to delete your information, we'll delete or de-identify it: our team erases your name, phone and email and redacts call transcripts and summaries, and keeps a record that the erasure was done. We keep the records section 11 says we keep and what the law otherwise lets us keep: records we need to complete a transaction, meet a legal duty such as brokers' record-keeping, protect against fraud or security threats, or handle legal claims. We keep a minimal record of any request not to contact you, so we can keep honoring it.
If we decline your request, our answer will say why. You can appeal by replying with "Appeal" in the subject; we'll look at it again and answer within the time the law sets. If you're still not satisfied, you may contact your state's attorney general. People in Canada: see section 17.
15. California residents
This section is our notice at collection for California residents, and it describes rights under the California Consumer Privacy Act, including the changes the California Privacy Rights Act made to it. It applies to the extent that law applies to us.
Categories of personal information we collect, with examples:
- Identifiers: name, email, phone numbers, postal address, IP address, account and session identifiers, USDOT and MC numbers, in the LaneRally Carrier app, the app's install number and push token, and, for the owner ID check, a driver's license number (we keep only its last four characters).
- Personal information described in California Civil Code section 1798.80: name, address, phone number and email, signatures given by typed name, and, for a partner, the legal name and tax classification on its tax form.
- Commercial information: lanes, load volumes, rates, equipment, current providers, loads and quotes; partners' shippers, earnings, statements and payouts (with a payout account's last four digits); Core Carriers memberships, answers and vetting records; outside brokers' postings and carriers' pay reports; and shipper invoices sold to factoring companies.
- Internet or other electronic network activity: sign-in, session and security records, a partner's activity log, the IP address, browser or kind of device recorded with a signature or a receiver's answer, the network checks in section 2 (the connection's country and whether it came through a VPN, a data center or Tor), and the LaneRally Carrier app's VPN and simulated-location readings.
- Audio, electronic or similar information: call transcripts. Call audio is turned into text as the call happens and isn't recorded.
- Professional or employment-related information: job title, company and role.
- Geolocation: the city and state or province someone tells us a truck is in, and, only while a driver shares it on an active load, the truck's location (its last exact position is deleted when sharing ends), in the LaneRally Carrier app also in the background, with whether the truck is moving or stopped. Locate me on the carrier app's map keeps the phone's exact location on the phone. When a location update looks faked, we keep only the country the position was in (section 2).
- Inferences: notes and scores about a business's fit as a customer, and about a carrier's on-time record and how its offers and bookings have gone, including its scorecard and the order in which Core Carriers members get first look; and, about an outside broker, its days to pay, any "Slow payer" mark, and figures about its postings and rates.
- Photos for the owner ID check: a selfie and photos of a carrier company owner's driver's license (section 2). A person compares them; no software compares faces or makes a face template from them. They're deleted 30 days after our decision.
- Sensitive personal information: account sign-in details (email and password), a tax ID on a W-9 a carrier or a partner may email us, a truck's precise location while a driver shares it on an active load, and, for the owner ID check, a driver's license (its photos while we keep them, and its issuing state, expiry date and last four characters). We use them only to sign you in, protect your account, set up that carrier, pay that partner and file tax information returns, show a load's progress to its parties, on Lane Rally LLC's loads record when the truck reached the delivery for the rate confirmation's on-time delivery item, and confirm that a carrier company's owner is who they say they are, to prevent fraud, so the right to limit the use of sensitive personal information doesn't apply.
Sources: see section 2. Purposes: see section 3. How long we keep each category: see section 11; we keep each for as long as those purposes and our legal duties need, and with no set end date for the records listed there.
Who receives it: every category may go to our service providers (section 10) for the business purposes described there. Identifiers, section 1798.80 information, commercial information and professional information may go to the other side of a load and to calling companies you deal with, including a brokerage whose partner you are, and, as section 2 describes, to Lane Rally LLC's partners, outside brokers and receivers; an outside broker's days to pay and any "Slow payer" mark go to carriers. A factoring company that buys a shipper's invoice is a third party, not our service provider: identifiers and commercial information about that invoice, with the load's proof of delivery, go to it (section 10). Internet activity recorded with a signature on a rate confirmation goes to everyone section 10 lists for that signed copy; recorded with a signature on a bill of lading, it stays with us. Any category may be disclosed for legal reasons or in a business transfer.
In the past 12 months we have not sold personal information or shared it for cross-context behavioral advertising, and we don't knowingly sell or share the personal information of anyone under 16.
Your rights: to know what personal information we hold about you, by category and piece by piece, where it came from, why we use it and to whom we disclose it; to delete it; to correct it; to opt out of its sale or sharing (we do neither); and not to be treated differently for using these rights. Use them as section 14 describes.
We don't give personal information to other companies to use in their own direct marketing.
16. Residents of other states
Colorado, Connecticut, Oregon, Texas, Virginia and a number of other states give their residents rights similar to those in section 14. Many of these laws don't cover information about people acting for a business, and some don't apply to businesses of our size. Send your request anyway, as section 14 describes; if a law doesn't apply, we'll tell you.
17. People in Canada
This section applies to people in Canada: carriers and drivers who haul loads to, from or within Canada, and people at Canadian businesses we deal with. It describes how we handle personal information under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for people in Quebec, Quebec's Act respecting the protection of personal information in the private sector as amended by Law 25. It adds to the rest of this policy; where they differ for people in Canada, this section applies.
Consent. We collect, use and disclose your personal information for the purposes in section 3, with your consent, which may be express (for example, ticking the box when you create an account, or signing an agreement to calls) or implied where the law allows (for example, a carrier's company details needed to arrange a load it booked), or without consent where the law permits it. You may withdraw your consent at any time, subject to legal and contractual limits, by the ways in section 13; we'll tell you what withdrawing means for the service. For people in Quebec, the law asks for consent to each specific purpose, requested in clear terms and separately from other information, and express consent before sensitive personal information is used.
Calls, texts and emails to Canada. Calls to Canadian numbers follow the Canadian Radio-television and Telecommunications Commission's Unsolicited Telecommunications Rules. By default no calling company on LaneRally makes sales calls to a Canadian number, or to a business whose record is in Canada, without that person's agreement to its calls: we don't check the National Do Not Call List, so we don't make those calls. When you agreed, sales calls and load offers to your Canadian number keep to 9 AM to 9:30 PM on weekdays and 10 AM to 6 PM on weekends, your time, and every call names the calling company and how to reach it. Commercial emails and texts to Canadian addresses follow Canada's Anti-Spam Legislation (CASL): we send them only with your consent, each one identifies the sender and how to contact it, and each one has a working unsubscribe that takes effect within 10 business days (ours takes effect at once). A request to agree to calls counts as a commercial message, so we email one to a Canadian address only when you ask for it. Texting stays off until our texting registration is verified (section 6). Area codes tell us whether a number is Canadian.
Where your information is stored, and transfers out of Canada and Quebec. LaneRally is based in the United States. Your personal information is stored and processed in the United States by us and our service providers (section 10), and some providers may process it in other countries. While it is outside Canada, it is subject to the laws of those countries and may be accessible to their courts, law enforcement and national security authorities. We take into account how each service provider protects information before we use it. Quebec law requires an assessment of the privacy risks before information about people in Quebec is communicated outside Quebec, and again when the transfer changes. You can ask us about our practices for service providers outside Canada at the contact in this section.
Person in charge of the protection of personal information. Our person in charge of the protection of personal information (our privacy officer) is Richard Jovanovic, Managing Member, reachable at [email protected] with "Privacy officer" in the subject, or by mail at the address in section 20. They are responsible for our compliance with this policy and Canadian privacy law, answer access and correction requests, and handle complaints.
Your rights in Canada. You may ask to access the personal information we hold about you and how we use and disclose it, to have it corrected, and to withdraw your consent. People in Quebec may also ask that computerized personal information they gave us be communicated to them, or to someone they name, in a structured, commonly used technological format; be told about, and have reviewed by a person, any decision about them based only on automated processing (some of our checks of a carrier are automatic, such as a hold once FMCSA confirms a failed authority or insurance check, and the order in which Core Carriers members get first look: a carrier in Quebec, including an owner-operator, may ask us about such a decision and have a person review it); and ask us to stop disseminating their information or to de-index links to it where the law allows. Send your request as section 14 describes. We answer within 30 days, or tell you within that time if we need more time as the law allows, and we may ask you to confirm your identity first. If we refuse, we'll tell you why and how to challenge it. You may also complain to the Office of the Privacy Commissioner of Canada, or, in Quebec, to the Commission d'accès à l'information.
Location sharing in Canada. A driver's location sharing on an active load works the same way in Canada as in the United States: only after the person holding the phone accepts the notice, only while the load is active, and the truck's last exact position is deleted when sharing ends. In the LaneRally Carrier app it keeps running in the background in Canada too, as section 2 describes; where roaming data drops, the app holds only the newest position and sends it when the phone has signal again.
Security incidents. If a breach of our safeguards involving your personal information creates a real risk of significant harm (under PIPEDA), or a confidentiality incident presents a risk of serious injury (under Quebec law), we notify you and the Privacy Commissioner of Canada or the Commission d'accès à l'information, as the law requires, and we keep a record of incidents as the law requires.
Retention. We keep personal information of people in Canada only as long as section 11's purposes need, and then delete, destroy or anonymize it as the law requires.
18. Children
LaneRally is for businesses. Account holders must be 18 or older, and we don't knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, email [email protected] and we'll delete or de-identify it, except any record section 11 says we keep.
19. Changes to this policy
Each version of this policy is published with its version number and the date it takes effect, and earlier versions are kept. We review this policy at least once a year. When we make a material change, we tell account holders by email before it takes effect. When you create an account, including one made from an invite to join a company, we link the version in force and ask you to confirm you've read it.
20. Contact us
Email: [email protected]
Mail: Lane Rally LLC, 2718 W Estrella Dr, Chandler, AZ 85224-7813