Privacy Policy

Myles is a multi-tenant product: each business (an “Organization”) gets its own walled-off workspace, and every row of customer data is scoped to that Organization. For the business and operational data you put into Myles — your trucks, loads, customers, finances, and any driver information — your business is the controller of that data and Myles acts as a processor on your behalf. If you are an employee or driver of a Myles customer, please direct privacy requests about your employment data to your employer first; we will support them in responding.

We collect the following categories of information:

• Account & identity. Authentication is handled by our provider Clerk. This includes your name, email address, and organization membership. We do not store your password.
• Business profile. Information you enter about your company — business name, address, contact details, fleet, and your weekly profit target.
• Operational data. Loads, routes, customers, brokers, expenses, and the profit-and-loss figures you log or that we calculate for you.
• Captured load data. When you capture a load (via the extension, a connected load board, a screenshot upload, or email ingestion), we store the original source content. This can include load-board listing text, uploaded images, and the full text and attachments of emails you choose to ingest — which may contain third-party broker names and contact details.
• Email integration data. If you connect an inbox, we store the access tokens (for Gmail OAuth) or credentials (for IMAP providers like Outlook, iCloud, or others) needed to fetch your mail, encrypted at rest, plus a cache of message envelopes and the classification verdicts we compute.
• Driver location. If a driver taps in for duty, we collect device GPS location while on duty to power live tracking and driver tools. See Section 7. Location history is stored against the duty session.
• Integration credentials. API keys you provide to connect load boards are encrypted at rest and only decrypted server-side at the moment of an outbound call.
• Support & sales communications. Messages you send us through the contact and talk-to-sales forms.
• Technical & usage data. Server logs, the session cookie set by Clerk, and limited browser storage used to remember UI state. See Section 8.

We do not intentionally collect government identifiers, biometric data, or payment-card numbers (payment processing, when enabled, is handled by our payments provider, who collects card data directly).

• To provide, operate, and maintain the Myles service.
• To calculate load profitability, score loads against your profit target, and surface finance reporting.
• To power the AI assistant and load guidance features (see Section 4).
• To process trials, subscriptions, and billing.
• To provide support and respond to your requests.
• To secure the service, prevent abuse, debug, and meet legal obligations.

We do not sell your personal information, and we never have.

Some features use a third-party AI provider (Anthropic’s Claude models) to read load and finance data and generate guidance, to classify whether an email is load-related, and to extract structured fields from screenshots you upload. When we call the AI provider:

• Requests are scoped to your Organization’s own data plus our help content.
• The assistant is read-only — it cannot take actions on your account.
• We do not send the AI provider your name, email, phone, payment information, or driver names as part of the assistant prompt.
• Your data is not used by us or the provider to train foundation models.

AI output is informational guidance, not professional financial, accounting, tax, or legal advice. Always verify before relying on it.

Where required (for example, for individuals in the EEA or UK), we rely on the following bases: performance of our contract with your business; our legitimate interests in operating, securing, and improving the service; your consent (for example, driver location tracking and email ingestion you enable); and compliance with legal obligations.

We share information only with service providers (subprocessors) that help us run Myles, and only as needed. Current categories include:

• Authentication: Clerk (identity and organization management).
• Hosting & infrastructure: Vercel (application hosting) and Neon (database hosting).
• AI: Anthropic (the assistant, email classification, and screenshot extraction).
• Email: Google (Gmail OAuth) when you connect a Gmail account; for other inboxes you connect directly to your own mail provider over IMAP.
• Payments: our payment processor, when paid billing is enabled.
• Lookups: public carrier/vehicle databases (such as FMCSA and NHTSA) when you use those lookup tools.

We may also disclose information to comply with the law, enforce our agreements, protect rights and safety, or in connection with a merger, acquisition, or sale of assets (with notice where required). We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising.

Driver location is sensitive. Myles collects GPS location only while a driver is on duty (after they tap in) and uses it to show live location to the business and to power driver-facing tools. Tracking stops when the driver taps out.

If you are a business using Myles, you are responsible for obtaining any employee consent and providing any notices required by the laws that apply to your drivers — several states (for example, California and Illinois) regulate employee location tracking and biometric or location data. If you are a driver, your location data is controlled by your employer; contact them with questions, and contact us at support@mylescopilot.com if you need help.

Myles uses a small number of strictly-necessary cookies, primarily the session cookie set by our authentication provider to keep you signed in. We also use your browser’s local storage to remember interface preferences (such as onboarding progress and theme). We do not use advertising or cross-site tracking cookies.

We keep your information for as long as your account is active and as needed to provide the service. Some specifics: captured loads in the analyzer queue are automatically and permanently deleted once they are more than seven days past their pickup date, along with the underlying raw capture. Delivered loads and the finance records derived from them are retained as part of your books. When your Organization closes its account, we delete or de-identify its data within a commercially reasonable period, except where we must retain it to comply with law.

We protect data with measures including encryption in transit, encryption at rest for sensitive credentials (integration API keys and email credentials are encrypted with AES-256-GCM), database row-level tenant isolation, hashed extension tokens, and least-privilege access. No method of transmission or storage is perfectly secure, but we work to protect your information and to notify you of incidents as required by law.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to opt out of certain processing, and to not be discriminated against for exercising these rights. Because most data in Myles belongs to a business Organization, we will route your request appropriately and, where we act as a processor, work with the relevant business to fulfill it.

To make a request, email support@mylescopilot.com. Owners can also delete most Organization data directly in the app, and you can disconnect any connected inbox or integration at any time from Settings.

We operate in the United States and our service providers may process data there and elsewhere. Where we transfer personal data across borders, we rely on appropriate safeguards as required by applicable law.

Myles is a business tool and is not directed to children under 16. We do not knowingly collect personal information from children.

We may update this policy as the product evolves. When we make material changes, we will update the date above and, where appropriate, notify you in the app. Questions or requests:

Myles Copilot, Inc.
support@mylescopilot.com