This Privacy Policy describes how LaneLock Technologies, LLC, a Florida limited liability company ("LaneLock"), handles personal information collected through the LaneLock and SpotLock services available at lanelocktech.com (the "Service"). It applies to freight brokers, dispatchers, drivers, and authorized users of the Service.
This policy works alongside the Biometric Information Notice (which governs the specific handling of facial and identity-document images) and the Terms of Service. Capitalized terms not defined here are defined in the Terms of Service.
When a broker, carrier, or dispatcher creates a LaneLock account, we collect name, email address, telephone number, business affiliation (company name, MC number, DOT number where applicable), and credentials necessary to authenticate the user.
SpotLock is the driver-verification module of the Service. When a driver completes a pre-dispatch verification, the following categories of data are submitted to LaneLock:
Certain fields (the full CDL number and the full VIN) are stored both in plaintext, accessible only to the broker who initiated the verification, and as a SHA-256 hash with the last four (CDL) or last six (VIN) digits retained separately. Hashing supports later cross-load identity comparison without exposing the underlying value beyond its initial recipient.
When a broker initiates a SpotLock verification, the dispatcher representing the carrier supplies the driver's mobile telephone number. LaneLock uses that number solely to deliver transactional SMS associated with the specific verification.
LaneLock automatically records API requests, IP addresses, device and browser characteristics, and audit events generated by the Service. This information supports operation, security, troubleshooting, and forensic review.
LaneLock uses the information described in Section 1 for the following purposes, and no others:
LaneLock does not sell personal information. LaneLock does not share personal information for cross-context behavioral advertising. LaneLock does not use verification photographs, biometric identifiers, or biometric information to train machine-learning models.
LaneLock shares information only as required to deliver the Service:
LaneLock retains personal information only for as long as reasonably necessary for the purposes for which it was collected. The schedule below governs all categories of personal information described in Section 1.
| Category | Retention | Destruction trigger |
|---|---|---|
| Biometric information (selfies, CDL images, and any extracted facial templates) | No longer than three (3) years from the date of last interaction with the driver, or sooner upon valid deletion request. | Whichever occurs first of: (a) satisfaction of the initial verification purpose plus a 90-day operational period; (b) three years from last interaction; or (c) receipt of a verified deletion request. |
| Non-biometric verification data (truck and trailer photographs, plate numbers, CDL number, VIN, geolocation, acknowledgments) | Up to seven (7) years from the date of the verification, consistent with freight-claim and federal recordkeeping windows. | Seven years after the verification date, unless a litigation hold or regulatory inquiry extends retention. |
| Broker, carrier, and dispatcher account information | For the life of the account plus seven (7) years after deactivation, for tax, accounting, and contract-records purposes. | Seven years after the account is deactivated or closed. |
| SMS opt-out records | Indefinitely. | Not destroyed (required to honor opt-out in perpetuity). |
| Technical logs (API requests, IP addresses, device characteristics) | Up to thirteen (13) months in operational logs. | Thirteen months from the request date. |
When the retention period for a record expires, LaneLock destroys the record using commercially reasonable measures appropriate to the medium (secure overwrite for digital storage, secure shredding for any printed copies). LaneLock may retain a record beyond the schedule above only when reasonably required for an active litigation hold, an active regulatory inquiry, an unresolved claim or dispute, or an open insurance matter, and only for as long as the qualifying need persists.
LaneLock applies commercially reasonable safeguards to protect personal information, including transport-layer encryption (TLS 1.2 or higher) for all data in transit, encryption at rest for secrets and credentials, one-way hashing of authentication passwords and sensitive identifiers, role-based access controls, least-privilege production access, audit logging of administrative actions, and multi-factor authentication for staff accounts. No system can guarantee absolute security; LaneLock will notify affected users of a confirmed unauthorized acquisition of unencrypted personal information without unreasonable delay, and in any event consistent with applicable breach-notification statutes.
The Service uses automated processing in two places that materially affect a verification outcome: (a) optical character recognition of CDL and VIN images to extract printed text for comparison against dispatcher-submitted values, and (b) hash comparison of CDL numbers and VINs across cases for identity-continuity checks. These steps support a human reviewer's verification decision; they do not by themselves approve or reject a load. A driver or carrier subject to a verification outcome may request human re-review by contacting support@lanelocktech.com.
Depending on your jurisdiction, you may have one or more of the following rights with respect to personal information LaneLock holds about you:
To exercise any of these rights, send a written request to support@lanelocktech.com. LaneLock will verify the requester's identity, acknowledge the request within seven (7) calendar days, and respond substantively within thirty (30) calendar days, or sooner where required by applicable law. LaneLock does not discriminate against any individual for exercising these rights.
State-specific notes:
To the extent the selfie and CDL images submitted through SpotLock constitute "biometric identifiers" or "biometric information" under the Illinois Biometric Information Privacy Act, 740 ILCS 14 et seq. ("BIPA"), the Texas Capture or Use of Biometric Identifier Act, Tex. Bus. & Com. Code § 503.001 ("CUBI"), or any similar state law:
SpotLock SMS messages are transactional and are sent only after a freight broker has initiated a specific verification case and a dispatcher representing the carrier has supplied the driver's number and attested to the driver's consent. Typical message volume is one to three messages per dispatched load. Standard message and data rates may apply. To opt out, reply STOP to any LaneLock SMS. To request support, reply HELP. Opt-out records are honored indefinitely; see Section 4.
The Service is intended for use by adult commercial drivers, brokers, and dispatchers in the course of regulated freight operations. LaneLock does not knowingly collect personal information from individuals under the age of eighteen.
The Service is operated from the United States, and personal information is processed and stored in the United States. If you access the Service from outside the United States, you do so on your own initiative and are responsible for compliance with local law. Where the General Data Protection Regulation (Regulation (EU) 2016/679) or the United Kingdom GDPR applies, the lawful basis for our processing is contractual necessity (delivery of the Service) and legitimate interests (fraud prevention and freight security), and users have the rights set out in Section 7.
LaneLock may revise this policy from time to time. The "Effective" date at the top reflects the most recent revision. Where a revision materially expands the categories of information collected or the purposes for which information is used, LaneLock will provide reasonable advance notice through the Service or by email to account holders.
Questions, requests, and complaints regarding this policy may be directed to:
LaneLock Technologies, LLC
Attn: Privacy Officer
support@lanelocktech.com