Privacy Policy

T P Freight Lines, Inc. (USDOT 26804 · MC-37563), 2703 Third Street, Tillamook, OR 97141, is the controller of the information described here. We operate TILL, our internal operations platform, and the TILL Driver app that our drivers use in the field.

Questions, requests, or complaints about this policy: privacy@tpfreight.net.

This section is what the TILL Driver app itself captures from your device. Section 3 covers the separate employment and safety file TILL keeps about you as a driver, which is entered by the company rather than by the app.

What the app does not collect: your contacts, your photo library (the camera captures only the image you take for a delivery), your calendar, your call or SMS history, your web browsing outside TILL, advertising identifiers, or your personal financial accounts. The app does not collect your app version or crash logs, and it contains no advertising SDK and no third-party analytics or crash-reporting SDK of any kind — we keep our own usage records instead, described in §4.

Separately from anything your phone sends, TILL is where T P Freight Lines, Inc. keeps the employment and safety file it is required to maintain for a commercial driver. You will not see most of this in the app, but it is your personal information and it lives in this system, so you should know it is here:

• Identity and employment: your legal name, employee number, date of birth, hire date, and home terminal.
• Contact details: your phone number, home address, and the emergency contact you name — you can view and edit these yourself on your TILL profile.
• Qualification: your CDL number, issuing state, class, endorsements, restrictions and expiration date; your medical card expiration; your years of experience; your qualification status and, if applicable, the reason for a disqualification; and the status of insurance screening by our carrier.
• Safety and compliance records: traffic violations, accidents, incident reports, crash records, roadside inspection results, and — where the federal testing rules apply — drug and alcohol test records.
• Fuel card details, including the card PIN where one is issued to you.

This category exists because federal law requires it. FMCSA driver-qualification, hours-of-service, testing, and accident-register rules oblige us to collect and keep these records, and to produce them to regulators on request. Access inside the company is limited to the people whose job requires it — HR, safety, compliance, and management — not to your dispatcher or your co-workers.

We do not use any third-party analytics product, but we do keep our own first-party records of use, tied to your account rather than anonymised:

• Screen views — which screen you opened and when. Kept 90 days.
• AI Assistant activity — if you use the in-app assistant, the text of what you asked and what it answered is logged, along with the model used and what the call cost. The prompt/response log is kept 180 days; your assistant conversation history is kept 365 days. Do not put anything in the assistant you would not want retained.
• Activity and presence — when you were last active, and whether your session is currently idle, so colleagues can see who is available.
• Notifications sent to you, kept 90 days once read and up to 365 days if unread.
• Audit log — a record of significant actions taken in TILL: who did what, to which record, when, with the before-and-after values, plus the IP address and device user-agent behind the action. This is our compliance trail and, unlike everything else above, it is not on an automatic deletion schedule — see §8.

Location is the most sensitive thing the app handles, so here is exactly how it behaves.

• Clock-in and clock-out require GPS. A punch is rejected without valid coordinates. This is how we verify that a shift started and ended where it was supposed to.
• Background location runs only during a dispatched run. Continuous tracking starts when a run is dispatched to you and stops when that run is completed. Outside of that window the app is not collecting your position.
• Off the clock, you are off the map. When you are clocked out, tracking stops and you are not shown on the dispatch map at all. We do not track drivers on personal time.
• You control the OS permission — but turning it off is not silent. You can grant, downgrade, or revoke location access at any time in your device settings, and nothing in the app can override that. Because GPS is required to punch in and to run a route, revoking it will stop those functions from working. You should also know that when the app finds location blocked at clock-in or during a run, it notifies your terminal's dispatch team that your location is off (at most once in a short window, so it does not spam them).
• Who can see your position. Live positions are shown to your dispatch bench and to terminal/executive management — not to the whole company, and not to your co-workers generally. Speed is recorded with each point for incident review; it is not used to rank or score drivers.
• Location history is deleted after 90 days. A scheduled job permanently deletes tracking points older than 90 days. Only the summarized work record (the shift, the stop events) is kept longer.
• Location is used for dispatch, ETAs, payroll verification, safety, and incident and claim review. It is not used to profile you, and it is never sold or shared for marketing.

The microphone is used only while you actively hold the voice button. The clip is sent to our speech-to-text provider, converted to text, and then discarded — we do not save the audio to our database or file storage. If voice is not configured, the app falls back to typed input.

The transcribed text is kept, even though the audio is not. It is stored wherever you sent it — the field, the note, or the message you dictated. If you dictated a question to the AI Assistant, that text is also held in the assistant logs described in §4 (180 days for the prompt log, 365 days for conversation history).

We share only in these situations, and never for money or for advertising.

• Service providers who run the platform under contract and may process data only on our instructions. As of the effective date these are: Vercel (application hosting), Supabase (database and file storage, including your delivery photos and signatures), Microsoft 365 (company email and single sign-on), Expo (delivering push notifications to your device), Anthropic (the AI Assistant and document extraction), our speech-to-text provider (§6), and OpenStreetMap for dispatch map tiles. We do not authorise any of them to use your information for their own purposes.
• Customers, shippers, consignees, and interline partnersreceive delivery information tied to their own shipments — the proof of delivery, the signature and photos, the arrival time, and the driver's name.
• Insurers, auditors, and our attorneys when an incident, claim, or audit requires it.
• Government and regulators — including the U.S. Department of Transportation and FMCSA — where the law, a regulation, a subpoena, or a court order requires disclosure.

We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not disclose it to data brokers.

These are the actual windows enforced by scheduled deletion jobs in TILL, not aspirations:

The audit log is the deliberate exception. Because it is what lets us prove who changed a record and when, it is not swept on a timer; removing entries is a decision the company makes case by case, not an automated job.

Data is encrypted in transit (HTTPS/TLS) and at rest by our hosting and storage providers. Access inside TILL is controlled by role and by per-screen permissions, so staff can only see what their job requires — a driver sees their own route and their own hours. Sign-in uses company credentials or Microsoft 365 SSO; mobile sessions use a revocable token that we can invalidate immediately if a phone is lost. Administrative actions are recorded in an audit log. No system is perfectly secure, but we take these obligations seriously and investigate every reported issue.

Depending on where you live, you may have the right to access, correct, or delete your personal information, to object to or restrict certain processing, or to receive a copy of it. To exercise any of these, email privacy@tpfreight.net and we will respond within the time the applicable law allows.

Two practical limits, stated plainly: records we are legally required to keep — hours of service, payroll, delivery records, safety and incident files — cannot be deleted on request while that obligation or an open claim lasts. And because TILL Driver is a work-issued app, some collection (GPS on a punch, tracking during a dispatched run) is a condition of using it for work rather than something you can switch off inside the app; you can always revoke the permission at the device level, and you can turn push notifications off in your device settings or in your TILL notification preferences.

Deleting your account and its data has its own section — see §11 below.

To request deletion of your TILL account and the data held with it, email privacy@tpfreight.net from the address on your account, with “Account deletion” in the subject line. You do not need the app installed to ask, and there is no charge. We acknowledge a request within 7 days and complete it within 30 days, or tell you why we need longer.

Deleted when you ask: your sign-in account and its credentials, your push tokens and registered devices, your saved app preferences, your AI Assistant conversation history and prompt logs, your screen-view records, and your stored location tracking points.

Kept even if you ask, and why: records the law obliges us to retain — timeclock and hours-of-service data, delivery and proof-of-delivery records, the driver qualification and safety file in §3, payroll and tax records, and the audit log — for as long as the applicable FMCSA, payroll, tax, or freight-claim rule requires, or while a related claim, audit, or legal hold is open. That is a legal obligation rather than a preference; everything outside it is deleted.

Deleting your app account stops you signing in to TILL for work. It is separate from your employment records with the company, which are governed by §3 and §8.

TILL Driver is a workplace application for adult employees and contractors. It is not directed to children, and we do not knowingly collect information from anyone under 18.

If we change what the app collects or how we use it, we will update this page and move the effective date at the top. Material changes are also communicated to staff through TILL. The current version always lives at https://till.tpfreight.net/privacy.

T P Freight Lines, Inc.
2703 Third Street, Tillamook, OR 97141
USDOT 26804 · MC-37563
privacy@tpfreight.net