Privacy & data retention
Verification requires sensitive material. What is held, how it is held, and who can reach it are stated here in the same terms the product is stated in.
Member and load data is used to operate and secure the network. It is not sold, rented, or shared for advertising.
This is a working draft, prepared for counsel review. The executed membership agreement governs.
The verification file. Insurance certificates and insurer confirmations, identity verification results, equipment records with VIN-plate photography, application materials, and the audit log of consequential actions.
Protected load details. Exact addresses, VINs, declared values and owner contact information. A load record holds them from the moment it is entered, and they are visible only to the posting broker, the assigned carrier, and authorised platform oversight.
Documents live in private storage, never at a permanently public URL. Access is by short-lived signed link only.
Encryption applies in transit and at rest, and every document view is written to the audit log.
Identity checks run through a verification provider. Echelon Transport Network receives the result, the method and the date.
What the platform records is the confirmation. A source, a method and a date, written against the member's file. That record is what eligibility is determined from.
A driver licence image is held only until the check completes. The confirmation is kept; the photograph is not. It is never shown to a broker and never appears on a load.
One disclosed exception to deletion. When a member is removed, the identifiers needed to prevent re-entry are retained: company legal name, DOT and MC numbers, principal names, reason code and date. They survive account deletion.
Without this, a removed operator re-applies under a new email address. This retention is disclosed in, and agreed to under, the membership agreement.
A confirmed cargo limit determines a member's tier and nothing else. It is held encrypted, and other members see a tier band and a confirmation date.
That restriction is written into the standing authorization each carrier signs.
Location is scoped to a movement. Tracking begins at assignment and ends when a movement is marked delivered. The full trail is held through the dispute window, then reduced to custody events.
The carrier and the assigned broker see the truck. No other party does.
Requests to access, correct or delete personal data go to verification@echelontransportnetwork.com.