Privacy Policy

Last updated: October 14, 2026 · Effective: October 28, 2026

This Privacy Policy describes how ABC LEGACY LLC ("4truck", "we", "us", or "our") collects, uses, and protects information when you use the 4truck vehicle management and operations platform available at https://4truck.us and related services (collectively, the "Service").

By using 4truck, you agree to the practices described below. If you do not agree, please do not use the Service.

1. Who We Are

• Legal entity: ABC LEGACY LLC
• Product name: 4truck
• Website: https://4truck.us
• Contact email: info@abclegacyllc.com

2. What Information We Collect

2.1 Account information

When you register, we collect:

• Your name and email address
• Company name and contact information
• Authentication credentials (password hashes, OAuth tokens)
• Role and permissions within your company account

2.2 Vehicle and logistics data

To provide vehicle management services, we process:

• Driver records (CDL information, medical card status, hire date)
• Vehicle and truck data (VIN, registration, maintenance records)
• Telematics data integrated from third-party providers (e.g., Samsara) under your account, including vehicle location — GPS position, speed, heading and engine status of your company's vehicles. This is the location of your VEHICLES, not of you or your device: 4truck never requests or reads the location of the phone or computer you are using.
• Dashcam and video data. Where your telematics provider supplies dashcam footage or event snapshots, 4truck may retrieve and store still frames and short clips associated with safety events (for example harsh braking, collisions, or distraction alerts) so that Safety users can review and coach on them. Video data is retrieved only for the events you configure, is stored under your account (or in your connected Google Drive if you have enabled it), and is deleted according to your retention settings. Drivers should be informed by their carrier that such footage may be reviewed through 4truck.
• Work orders, maintenance logs, fuel records, and reports
• Document metadata (filename, upload date, document type, associated driver/truck)

2.3 Google Drive integration (BYOS — Bring Your Own Storage)

If you choose to connect your Google Drive account, 4truck uses the drive.file OAuth scope. This means 4truck can only access:

• Files that 4truck itself creates inside your Drive (organized under a "4truck" folder)
• Files that you explicitly select via the Google Picker, if applicable

4truck cannot see, list, read, or modify any other files in your Google Drive. Your personal documents, photos, and unrelated business files remain completely private and inaccessible to 4truck.

On the Storage page you choose where the files 4truck stores for you (CDL scans, truck documents, work orders, etc.) are kept: in 4truck’s own storage, in your own Google Drive account, or both. Files kept only in your Drive are not kept on our servers; for those we keep metadata (Drive file IDs, upload timestamps, categorization tags) to enable search and organization. Some files are always held on our servers, at least for a while — see Section 5.

2.4 Usage and technical data

• IP address, browser type, device information
• Pages visited, features used, error logs
• Cookies and session tokens for authentication

2.5 4truck for Chrome (browser extension)

4truck offers an optional Chrome side-panel extension. It is not required to use the Service, and it collects nothing on its own — it displays data your 4truck account already holds.

• Sign-in token. You never type a password into the extension. You press “Connect”, confirm once on 4truck.us, and the extension receives a sign-in token limited to the live map, the vehicle details your role already shows you there (such as fuel, faults and odometer), and what your role allows you to change from it: inventory (checking, adding and editing items, and what each vehicle is expected to carry) and the map settings. The token is kept in the browser's extension storage on your own device and is sent only to 4truck.
• Your display name and role, so the panel can show whose account is connected.
• Vehicle location (as described in 2.2) — only the vehicles your role and company access already allow you to see on the 4truck dashboard.

The extension changes nothing in your account beyond those two things. On Google Maps pages it draws your vehicles over the map: it reads which part of the map is showing and asks 4truck for the vehicles in that area. It reads no other page you visit. When you choose a vehicle, the extension can open that position or directions in Google Maps — the address is handed to Google Maps in the URL, exactly as if you had typed the coordinates yourself; no other data is shared with Google.

You can end the connection at any time: Disconnect in the panel's menu, or Profile → Active sessions on the 4truck dashboard, where it appears as “Browser extension”. Removing the extension from Chrome also deletes the stored token.

3. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the 4truck platform
• Process documents, generate reports, and run scheduled tasks (alerts, scorecards, compliance checks)
• Read documents, photos and telematics events with an AI model to extract dates, spot damage, judge a parking spot and answer the questions you ask the assistant
• Authenticate users and enforce role-based access control
• Communicate with you about your account, support requests, and service updates
• Investigate and prevent fraud, abuse, or violations of our Terms of Service
• Comply with legal obligations and respond to lawful requests

4. How We Share Information

We do not sell your personal information. We share data only in these limited circumstances:

• Within your company account: Authorized users in your organization may see vehicle data, driver records, and documents according to their assigned role.
• Service providers: We use trusted infrastructure providers (e.g., hosting, email delivery) under strict confidentiality and data-processing agreements. These providers do not have independent rights to your data.
• AI features: Some features use an AI model to read what you or your drivers submit: dashcam frames and inspection photos, parking-location maps, fault codes, vehicle documents and shop invoices, spreadsheet imports, and the questions you ask the assistant together with the account records needed to answer them, which can include driver and vehicle details. A driver's licence photo that an applicant chooses to scan on the application form is read the same way to fill in the form, and is not stored at that step. For each request, only the data that request needs is sent to a third-party AI service provider — a cloud AI platform or a model provider, such as Google Cloud or Anthropic — which processes it on our behalf as our service provider. We use only AI providers whose terms do not allow them to use your data to train their models. The providers we use may change over time; these conditions apply to each of them. The assistant's conversation history is kept in your account so you can review it, and is deleted after 90 days.
• An AI assistant you connect yourself: If your account owner allows AI connectors for a role, a member holding that role may connect their own AI assistant (for example Claude) to 4truck. That assistant can then read, on the member's request, the same records the member can see in 4truck — it cannot change anything. Data it reads is sent to the provider of that assistant at the member's direction and is then handled under that provider's terms with the member, not under this policy. The account owner can withdraw that permission, and a member can disconnect an assistant, at any time. Each request is recorded in your account: which records the assistant asked about and how much was returned — not what the member typed to the assistant, and not the answer. Your account's management can see that record.
• Telematics integrations: When you connect Samsara or another telematics provider, we exchange data with that provider per your authorization.
• Telegram. If you or your drivers use the 4truck Telegram bot or Mini App, message content you send to the bot (such as parking checks, pre-trip inspections and alert acknowledgements) is transmitted through Telegram's infrastructure and is subject to Telegram's own privacy policy. We receive your Telegram user ID and the messages you send to the bot; we do not receive your other Telegram conversations.
• Legal compliance: If required by valid legal process, court order, or to protect rights, safety, or property.
• Business transfer: In the event of a merger, acquisition, or asset sale, your information may transfer to the new entity, subject to this Privacy Policy.

5. Data Storage and Security

• OAuth refresh tokens are encrypted at rest using strong symmetric encryption (Fernet).
• Passwords are stored as salted hashes; we never store plaintext passwords.
• Database connections use TLS in transit.
• API requests are served over HTTPS only.
• Files you or your drivers upload are kept in 4truck’s own storage by default. If you connect Google Drive, you choose on the Storage page whether new files go to your Drive instead or to both. Even then, a file is held on our servers until it reaches your Drive, and chat attachments are kept on our servers.
• We follow industry-standard practices for access control, logging, and incident response.

6. Data Retention

We retain different categories of data for different periods:

• Account data: retained while your account is active. When the account owner deletes the account, access ends immediately and the data is held for 90 days, then permanently deleted. The 90 days exist for the carrier, not for us: FMCSA regulations require motor carriers to keep driver qualification, inspection and maintenance records, and closing an account should not cost you records you may still have to produce. During this period the account owner can restore the account, for example to export records; we do not use the data for anything else.
• Vehicle and document metadata: retained while your account is active.
• Google Drive files: remain in your Drive; we never copy them to our servers permanently.
• AI assistant conversations: retained for 90 days, then deleted; you can delete a conversation yourself at any time.
• AI data-access record: when the 4truck assistant or an assistant a member connected looks up records for that member, we keep a line saying which records were looked up and how much was returned, for one year. It never contains the member's messages or the assistant's answers. Your account's management can see which records a member's assistant looked up.
• Audit logs: retained for up to 3 years to support compliance with U.S. Department of Transportation regulations (49 CFR Part 391) for driver qualification files.
• Backups: encrypted backups expire on a rolling schedule of up to about six months. They exist only to recover the Service after a failure and are not used to restore a deleted account.

7. Your Rights and Choices

7.1 Disconnect Google Drive

You can disconnect 4truck from your Google Drive at any time:

• From the 4truck dashboard: Storage → Disconnect Drive
• From Google directly: https://myaccount.google.com/permissions

When you disconnect, 4truck immediately deletes your encrypted refresh token from our database and revokes its OAuth access. Files previously stored in your Drive remain there — they belong to you.

7.2 Delete your account

The account owner can delete the 4truck account from Settings in the dashboard; a confirmation code is sent by email. You can also write to info@abclegacyllc.com from your registered email address. Access ends immediately, and the account's data is held for 90 days and then permanently deleted, as Section 6 describes. Files in your own Google Drive are not affected by 4truck account deletion.

7.3 Access and correction

You can view and update most of your account information directly in the dashboard. For any data not editable in-app, contact us.

7.4 California, EU, and other jurisdictions

Depending on your location, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA) or the EU General Data Protection Regulation (GDPR), including rights of access, portability, deletion, and the right to lodge a complaint with a supervisory authority. Contact us to exercise these rights.

8. Compliance Considerations for Trucking Operators

4truck is designed to help motor carriers organize records. However, you remain responsible for meeting record-retention requirements under U.S. Department of Transportation regulations (49 CFR Part 391, 395, and related rules), including driver qualification files, hours-of-service records, and inspection logs.

Because Google Drive files are stored under your own Google account, if you disconnect Drive or delete files from your Drive, those files become unavailable to 4truck. You remain responsible for retaining required compliance records in accordance with applicable law.

9. Children's Privacy

4truck is a business tool for commercial trucking carriers and is not intended for use by individuals under 18. We do not knowingly collect information from children.

10. International Data Transfers

4truck is operated from the United States. If you access the Service from outside the U.S., your information may be transferred to and processed in the U.S., where data-protection laws may differ from those in your country. Requests to the AI features described in Section 4 are handled by our AI service provider on its global infrastructure and may be processed outside the U.S.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top shows when the current text was published, and every earlier version remains available under Version history below. For a material change we email the account's owners and administrators before it takes effect and say when it does. Continued use of the Service after that date constitutes acceptance.

12. Governing Law

This Privacy Policy is governed by the laws of the State of Wyoming, United States.

13. Contact Us

Version history

Every version of this document is kept as it was published.

• October 14, 2026: current version, effective October 28, 2026 — How long data is kept after an account is closed
• September 29, 2026: The Privacy Policy names the AI processor
• September 10, 2026: Dashcam data, the Telegram bot, and Wyoming law
• September 4, 2026: Vehicle location, and the 4truck browser extension
• May 14, 2026: The first Privacy Policy