DRAFT — PENDING REVIEW. This is a working draft prepared for review by a licensed attorney. It is not legal advice and is not yet in effect.

Privacy Policy

Cinder by Loft Industries · Last updated October 20, 2026 (draft)

1. Who we are

Cinder is a fleet operations app for trucking companies (hours of service logs, inspections, dispatch, maintenance, documents and team messaging). Cinder is provided by Loft Industries, based in Alabama, United States ("Loft Industries," "we," "us"). Cinder is offered only to businesses and their workers in the United States.

2. Our role

Your employer or the company that set up your account (the "Customer") decides who gets an account and what is recorded. For data a Customer puts into Cinder, we act on the Customer's behalf. For data about visitors to our website and people who request access, we decide how it is used.

3. What we collect

Account details: name, username, email (optional), phone, role, company and password (stored only as a salted hash). Work records: duty status and hours of service logs, trips, cities and states, VINs and unit details, truck and equipment, inspections, maintenance requests, incidents, dispatch jobs and their status times, time off requests, documents and photos you upload. Device and usage data: sign-in times, last activity, app version, browser type, push notification tokens and basic error logs. Location: Cinder records location as City, ST only, and only when you choose to fill it in or tap to use your location. We do not track continuous GPS. Access requests: name, company, email and phone you send through our website.

4. How we use it

To run Cinder for the Customer: keeping logs, showing dispatch, sending notifications, producing records and backups. To keep accounts secure (for example signing out idle sessions and detecting misuse). To support you when you contact us. To improve Cinder using aggregated or de-identified information. To meet legal obligations.

5. We do not sell your data

We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising. We do not use your work records for advertising.

6. Who we share it with

Inside your company: people your company authorizes (for example administrators and Team Managers) can see records for the drivers they manage. Service providers who host and operate Cinder for us (such as cloud hosting, storage, push notification and email delivery services), bound to protect the data and use it only for us. Authorities or others when required by law, valid legal process, or to protect safety, rights or property. A successor in a merger or sale, under this policy.

7. Retention

We keep Customer data for as long as the Customer's account is active, or as the Customer configures within the app. Hours of service records are kept for at least the period the Customer needs to meet federal record-keeping rules. Automated backups are kept on a rolling basis (currently about 30 days). After a Customer's subscription ends, the Customer has 90 days to export its data; at the end of those 90 days we permanently delete (purge) the Customer's data from Cinder, including backups as they roll off, except where the law requires us to keep something longer. Website access requests are kept up to 12 months if they do not become a Customer.

8. Security

We use encryption in transit (HTTPS), hashed passwords, role-based access, private file storage, idle sign-out and audit logs. No system is perfectly secure. To report a security issue, email security@cindertransport.com.

9. Your choices and rights

If your account belongs to a company, ask your company administrator first; they control most of your records. You can also write to privacy@cindertransport.com to ask to access, correct, export or delete personal information. We will verify your request and answer within the time the law requires, usually 45 days. Some records (such as hours of service logs) may need to be kept by your employer under law and cannot be deleted on request. Depending on your state, you may have additional rights; we will not discriminate against you for using them.

10. Children

Cinder is for working adults. It is not directed to children under 16 and we do not knowingly collect their information.

11. United States only

Cinder is operated in and for the United States. Data is stored and processed in the United States by us or our providers.

12. Changes

We will post changes here and update the date above. If a change is material, we will notify Customers in the app or by email before it takes effect.

13. Contact

Privacy requests: privacy@cindertransport.com. Security reports: security@cindertransport.com. Support: support@cindertransport.com. Sales: sales@cindertransport.com. Loft Industries, Alabama, United States.

Privacy · Terms · EULA · Back to Cinder