Privacy Policy.

1. Who handles your information

This policy explains how UVIZON LLC (“we”) handles personal information when you visit greymiles.com, use the Grey Miles application at app.greymiles.com, its API and MCP server, open a shared Grey Miles link, or contact us.

Grey Miles is a business service. Information about it falls into two groups, and our role differs between them:

• Account, website, security and billing information. UVIZON LLC decides how this is used and is responsible for it.
• Workspace content. The loads, carriers, drivers, documents, invoices, payroll and other records an organization keeps in its Grey Miles workspace belong to that organization (our customer). We process that content to provide the service on the customer's behalf and under its instructions. If you are a driver, carrier contact or employee whose details an agency keeps in Grey Miles, that agency is responsible for them. Please contact it first. We will help it respond.

2. Information we collect

You give us

• Account and profile: name, email address, phone, job title and photo, your organization's name, address, business types and authority numbers and your workspace role.
• Workspace content: loads, stops, appointments and rates, carrier and broker business details and contacts, driver names, phone numbers, email addresses and license numbers and states, truck and trailer details such as unit numbers, VINs and plates, check calls, notes and reported locations, invoices, payments, commission plans, payroll runs and payslips.
• Documents: rate confirmations, bills of lading, proofs of delivery, insurance certificates, W-9 forms (which can contain a taxpayer identification number), authority letters and agreements you upload.
• Connected mailboxes: if you connect Gmail, Microsoft or an SMTP account, its authorization or credentials, and the messages you send through it.
• Support: what you tell us when you contact us.

Created when you use Grey Miles

• Activity and audit records: who changed which record and when, and the history of a load.
• Locations: truck positions reported by your team or a connected source, labelled as reported, GPS or planned, with their time.
• AI connections: the AI apps and access keys you connect, the access you chose, changes waiting for your approval, and usage counts per day.
• Carrier lookups: the companies you look up, the FMCSA records shown to you, and reports your agency files.
• Shared links: when you share an invoice or carrier profile, how many times the link was viewed.
• Unsaved form entries: what you type into a form before you save it, such as a new load, carrier or your company setup. They are kept encrypted on your account so you can finish on any device, and only you can read them.
• Technical data: IP address, browser and device type, request and error logs, and security events such as sign-ins.

From other sources

• Public records: carrier and broker information published by the Federal Motor Carrier Safety Administration (FMCSA) and on data.transportation.gov. FMCSA's answer can include an employer identification number. We keep it encrypted for the record and never display it.
• Sign-in providers: your name and email address from Google if you sign in with Google.

3. How we use information

• To provide Grey Miles: run your workspace, store and check documents, calculate routes, prepare invoices and payroll, and send the emails you ask for.
• To keep it secure: verify sign-ins, enforce roles and workspace separation, check uploads for malware when scanning is configured, detect and stop abuse, and keep audit records.
• To send service messages: account verification, password resets, invitations, payment reminders and payslip notices. We do not send marketing email from the app.
• To support you and answer requests.
• To bill for paid plans and meet tax and accounting obligations.
• To keep the service reliable, using operational data such as error rates and usage counts.
• To comply with law and protect rights, safety and property.

Where laws such as the GDPR apply, we rely on performing our contract with you or your organization, our legitimate interests in running a secure and reliable service, your consent where we ask for it, and legal obligations.

We do not sell personal information, share it for cross-context behavioral advertising, show ads in Grey Miles, or use workspace content to train artificial intelligence models.

4. AI features and connected AI apps

Reading rate confirmations. When a person asks Grey Miles to read a rate confirmation, that file is sent to OpenAI to propose the terms for review. We send it with storage turned off and only on request. Nothing is sent automatically.

AI connections. If you connect an AI app or agent (for example Claude, ChatGPT, Cursor or your own agent) through the Grey Miles MCP server, that app receives the information its requests return, within your role. The app's provider handles that information under its own terms and privacy policy, not ours. You choose what the app may change, can see each connection in Settings → AI connections, and can disconnect it at any time. See the AI connections guide.

5. Who we share it with

Inside your workspace. People in your organization see records according to their role. Restricted financial information, such as fees and margins, is withheld from dispatchers.

When you share. Invoice and carrier profile links you create can be opened by anyone who has the link until it expires or you withdraw it. Emails you send go to the recipients you choose.

Service providers who process information for us under contracts that limit their use of it:

Our reseller. Grey Miles subscriptions are sold by Paddle.com, our online reseller and merchant of record. When you subscribe, Paddle collects your billing contact, address, tax ID if you give one, and payment details to run the checkout, take payment, handle sales tax, invoices and refunds, and prevent fraud. Paddle uses that information as an independent controller under its own privacy notice. We receive the order and subscription details we need to provide your plan, never your full card number.

We also query public FMCSA and U.S. Energy Information Administration services. Those requests contain the carrier numbers, company names or regions needed for the lookup. A company name may identify an individual business owner.

Other disclosures. We may disclose information if required by law or valid legal process, to protect the rights, safety or property of our users, UVIZON LLC or others, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply. We share information for other purposes only with your consent.

6. Cookies and browser storage

greymiles.com stores your cookie choice for 180 days. It remembers your light or dark appearance only if you allow preference storage. You can decline or withdraw that permission in Cookie settings in the footer. The application uses separate storage for sign-in and preferences such as theme, density and sidebar state, and keeps a copy of unsaved form entries only until they reach your account. Signing out removes those copies.

We do not use advertising cookies, cross-site tracking or third-party analytics on greymiles.com or in the application, and system emails do not track opens or clicks. The Cookie Policy lists storage names, purposes and duration, and explains Global Privacy Control and Do Not Track. These choices do not stop essential processing of web requests for hosting and security.

7. Security and where information is stored

We protect information with encryption in transit, database-level separation between workspaces, role-based access, optional required two-step verification, malware checks on uploaded files when scanning is configured, encrypted storage of mailbox credentials, and hashed storage of access tokens and share links. No system is perfectly secure. If we learn of a security incident affecting your information we will notify you as the law requires.

UVIZON LLC is a United States company. Our providers may process information in the United States and other countries where they operate. Where the law requires it, we use appropriate safeguards for international transfers.

8. How long we keep information

We keep account information and workspace content while the account or workspace is active. Deleted records first go to Recovery, where administrators can restore them, and are removed after that. Copies in backups are overwritten on our database provider's backup schedule.

Unsaved form entries are deleted when you save the form or choose Start over, and in any case 30 days after your last change.

We keep invoices, payment and audit records as long as needed for accounting, tax, security and legal purposes. When an organization closes its workspace, we delete or de-identify its content within a reasonable period, except where we must keep it by law.

9. Your choices and rights

You can view and update your profile in Settings, disconnect mailboxes and AI connections, and ask an owner or administrator of your workspace to correct or remove workspace records.

Depending on where you live, including in California and other U.S. states, the European Economic Area and the United Kingdom, you may have rights to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. We do not sell personal information or share it for cross-context behavioral advertising, and we will not discriminate against you for using your rights.

Email [email protected] with the subject Privacy request, or write to our postal address below. Tell us which right you want to exercise and how we can find your account or record. Do not send a password or identity document with your initial request. We may ask for information needed to verify your identity and authority before acting, and will answer within the time the applicable law allows. Requests about workspace content go to the organization that controls it. We will tell you if we forward your request.

10. Additional information for U.S. residents

The categories described above include identifiers and contact details, commercial and payment records, internet and device activity, professional information, location information and the contents of documents and communications you provide. Sources, purposes and provider disclosures are described in this policy. The retention section explains the criteria we use to decide how long to keep them.

Workspace records can contain sensitive information, including account credentials, precise truck locations that may identify a driver, driver license numbers or tax identifiers in uploaded documents. We process this information to provide the requested service, protect accounts and meet legal obligations. We do not use it to infer personal characteristics or target advertising. Upload only what your organization needs and is authorized to provide.

Where a state privacy law applies to your information and to our business, your rights may include confirming whether we process it, learning the categories and specific pieces we hold, obtaining a portable copy, correcting inaccuracies and requesting deletion. Exceptions may apply, such as keeping records required by law or protecting someone else's rights. We do not use personal information for profiling that produces legal or similarly significant decisions.

We do not sell personal information or share it for targeted or cross-context behavioral advertising, including information about people under 16. We do not offer a financial incentive in exchange for personal information. Global Privacy Control is consistent with these practices. You do not need to accept optional preferences to exercise a privacy right, and we will not discriminate against you for doing so.

An authorized agent may submit a request to the same contact address. We may ask for proof of authorization and, where permitted, direct verification with the person concerned. If we deny your request, reply with the subject Privacy appeal and explain why you believe the decision should change. We will review it and explain the outcome within the applicable legal deadline. You may also contact your state attorney general, including the Texas Attorney General or the California Attorney General, or your relevant privacy regulator.

11. Children

Grey Miles is a business service for people 18 and over. It is not directed to children, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

12. Changes to this policy

We will update this page when our practices change and change the date at the top. If a change is significant, we will tell account owners by email or in the application before it takes effect.