1. Scope and who handles your information
This policy describes ELD Factory, operated by General Software Company LLC, including its website, hosted accounts and workspaces, and ELD Factory application previews. Our privacy contact is accounts@generaleld.com. The ELD Factory main website account area is for billing and account administration, separate from operational workspaces accessed through verified customer-controlled domains. The current public billing information page does not accept credentials or payments.
We handle information needed to operate our website, accounts, security, and customer relationship. When an ELD business, carrier, or other customer supplies records or directs processing within its workspace, that organization also has responsibilities for its use of the information. Its separate notices and agreements may apply. The exact legal roles depend on the processing and applicable law; a customer connection does not give an organization unrestricted access to your information.
This policy does not govern unrelated third-party websites or applications merely because they link to or integrate with ELD Factory. Review their notices before using them. For questions about a carrier's records, you may contact the carrier or contact us so we can identify the appropriate route.
2. Information we handle
- Accounts and sign-in: email address, account identifiers, sign-in and logout activity, protected session information, and verification-code records. Codes and session credentials are stored in protected forms rather than as a public account profile.
- Security and connections: IP addresses available to hosting and security systems, email- and IP-derived rate-limit identifiers, request and error information, browser or app details, access permissions, and authorized connection records.
- Organizations and personnel: company and carrier details, contacts, memberships, administrator permissions, driver names, license number and issuing jurisdiction, driver-account associations, and related information supplied by an authorized customer or user.
- Equipment and records: vehicle identifiers and VINs, asset assignments, manually entered duty statuses and locations, dates and times, notes, corrections, proposals, approvals, certification history, and the audit information needed to attribute those actions.
- Documents and correspondence: private PDF evidence, registration information, documents you upload, support and privacy requests, and other information you choose to send. Documents may contain personal information supplied by you or your organization.
- Optional test evidence: authorized administrators may submit device or synthetic telemetry test evidence. Test submissions can contain device, installation, event, timing, and location information. They are separate from qualified operational recording.
- Information on your device: essential browser storage and, in native previews, protected session information and pending commands needed to resume an interrupted action. The demonstration workspace is stored locally in your browser.
Some information comes directly from you; other information comes from your authorized organization, supported connections, or the systems that deliver and protect the service. Submit only information you are entitled to provide and that is relevant to the task.
3. Current collection and product capabilities
The present service supports administration and manual records. ELD Factory's current native previews do not request location, Bluetooth, camera, or microphone permission. Manually entered location information and information supplied in authorized test evidence are still personal information where they relate to a person; they are not a statement that the app continuously tracks the device.
Automatic vehicle recording and qualified operational ELD functionality remain unfinished. If new features introduce additional collection, we will update the relevant disclosures and request device permissions or other consent when required before that collection occurs. A privacy-policy update is not a substitute for a required in-app permission or disclosure.
4. How information is used
We use information to create and authenticate accounts; provide authorized workspaces and record workflows; maintain correct company, driver, and asset associations; preserve originals and attributed record history; deliver requested sign-in messages; operate supported integrations; answer technical, account, commercial, and privacy requests; prevent abuse and unauthorized access; investigate faults; and meet applicable legal obligations.
Processing customer records is limited by the service scope and authorized instructions, subject to legal duties. We do not use driver records to sell advertising. We do not sell personal information or share it for cross-context behavioral advertising. The current native previews do not include advertising or analytics SDKs. Website hosting also produces traffic, reliability, and security information. Cloudflare adds a Web Analytics measurement script to hosted pages; whether it can run depends on browser and site security controls. Cloudflare describes that measurement as cookie-free, without browser local storage or individual fingerprinting. Hosting request logs are separate from that measurement. See our Cookies and Storage notice.
Where a legal basis is required, it depends on the activity and jurisdiction: providing an agreed service, legitimate operational and security interests where permitted, compliance with law, or consent where required. We do not treat accepting service terms as permission for every possible use of information.
6. Protection and processing locations
We use measures appropriate to the service, including encrypted connections, restricted administrative access, organization and record permissions, protected credentials, and controls on authentication attempts. ELD Factory's primary service servers are hosted in the United States. Our network and service suppliers may process requests through their infrastructure in other locations.
No network or storage system can be guaranteed completely secure. Protect your email account and devices, sign out of shared devices, and notify accounts@generaleld.com if you suspect unauthorized access. Do not send sign-in codes, passwords, or unnecessary identity documents in an initial support message.
If processing is subject to laws requiring specific international-transfer safeguards, those requirements must be addressed for the relevant processing and agreement. This policy does not represent that every jurisdiction's requirements are automatically satisfied by use of the service.
7. Retention and deletion
Retention depends on the information, its purpose, the customer relationship, and any applicable recordkeeping duty. Account and access information supports your account and security; organization records support the customer's authorized work; correspondence supports the request and its resolution. We review deletion requests individually. The service does not currently provide automatic deletion of all records after a single fixed period.
Email sign-in codes expire after ten minutes and browser sessions can last up to thirty days. Expiration ends their use for authentication; it does not mean every related security or audit record is immediately erased. Deleting a local browser copy also does not delete records held by the service or an authorized organization.
Carrier records may need to remain available after a person's account is removed. For example, 49 CFR 395.22(i)(1) requires a motor carrier to retain a separate backup of ELD records for six months. Other specific recordkeeping duties or an applicable legal hold may require a different period. We do not treat all information as indefinitely exempt from deletion: a retained category must have an applicable purpose or obligation, and we explain relevant exceptions when responding to a request. See 49 CFR 395.22.
See Account and Data Deletion for the request process, verification, and how account information is distinguished from retained organization records.
8. Your choices and privacy requests
You can contact accounts@generaleld.com to request access to or correction of information, account or data deletion, or help understanding an organization's handling of your records. Where applicable law provides them, you may also have rights to portability, restriction, objection, withdrawal of consent, an authorized representative, or an appeal of a denied request. We will assess requests under the law and authority that apply, verify identity proportionately, and explain the result and available next steps.
To appeal a privacy decision, reply to the decision or email the same address with the subject "Privacy appeal" and identify the request. You may also contact a competent privacy regulator where applicable law provides that right. We do not require you to waive applicable rights to submit a request.
Withdrawing consent does not undo lawful processing already completed or eliminate a separate legal duty to retain a record. If a feature needs information you choose not to provide, we will explain the effect on that feature. For organization-controlled information, we may coordinate with the responsible organization without disclosing information to an unauthorized requester.
Browser cookies and local storage can be managed through your browser. Details and the effects of clearing them are in Cookies and Storage.
9. Children and policy updates
ELD Factory accounts are intended for professional users aged 18 or older. We do not offer children's accounts or a parental-consent enrollment route. If you believe we received personal information from a child under 13, contact accounts@generaleld.com so we can investigate and take appropriate steps. Do not include unnecessary sensitive information in the initial message. See Age and Consent.
We may update this policy when practices or requirements change. The effective date identifies the published version. We will provide notice of material changes appropriate to their effect and obtain additional consent where required. New wording does not authorize undisclosed collection that requires a separate permission.