Privacy Policy

1. Introduction

Patch Solutions LLC ("Patch Solutions," "we," "us," or "our") operates PatchCMD. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application and related services. By accessing or using PatchCMD, you agree to the practices described in this policy.

Patch Solutions LLC is a Delaware limited liability company operating in Colorado, United States. If you have questions, contact us at support@pillarapps.com.

2. Information We Collect

2.1 Information You Provide

• Account information - name, email address, and password when you register.
• Payment information - billing details processed securely by our payment processor. We do not store full credit card numbers on our servers.
• User-generated content - data, files, photos, or other content you upload or create within the application.
• Communications - messages you send to us via email or support channels.

2.2 Information Collected Automatically

• Device & usage data - IP address, browser type, operating system, referring URLs, pages viewed, and interaction timestamps.
• Approximate location - derived from IP address, for every user.
• Precise location - for drivers, continuously while they are clocked on to a shift, and not at other times. See section 3 below, which describes this in full.
• Error & performance data - crash reports, performance metrics, and diagnostic information collected by our error-monitoring provider.

3. Driver Location Tracking

This section applies to drivers who sign in to the PatchCMD driver app. It does not apply to office or dispatch users, whose location we do not track.

3.1 What we collect

While you are clocked on to a shift, we record your device's precise location roughly every 30 seconds. Each record contains your latitude and longitude, the accuracy of the reading, your heading and speed, your device's battery level, and the time it was taken.

3.2 When we collect it

On the web, location is recorded only while the driver app is open on your screen. Your phone stops sending it when you lock the phone or switch to another app.

If you install the PatchCMD app from an app store, it also records your location while the app is in the background and while your phone is locked. This is the main reason the installable app exists: your dispatcher needs to see where the truck is for the whole shift, not only while you happen to be looking at the screen. While this is happening, your phone shows a notification saying your location is being shared. That notification is present whenever background tracking is running, and its absence means it is not.

Clocking off stops it. We do not collect your location before you start a shift or after you end one, even while you stay signed in to the app - the server refuses to record it. If you forget to clock off, collection stops by itself once the shift goes stale.

3.3 What it is used for

• Showing your truck's position to your employer's dispatchers on their live fleet map.
• Confirming that a load was picked up and delivered where it was supposed to be.
• Automatically updating a load's status when you arrive at or leave a site, so you do not have to.
• Attaching location to photos, gauge readings and signatures as a record of the work.

3.4 Who can see it

Your location is visible to your employer - the company whose account you sign in under. Dispatchers, managers and owners at that company can see where you are and where you have been. We do not sell location data, and we do not share it with other companies using PatchCMD or with advertisers.

3.5 How to turn it off

Clocking off your shift stops it. You can also deny or revoke the location permission at any time in your phone's settings, or sign out of the app. Any of those stops the collection described here - clocking off is the one you will use day to day. Because location is part of how loads are verified, turning it off may prevent you from completing some jobs in the app, and your employer may have its own policy about it - that policy is between you and them, not something PatchCMD enforces.

4. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain PatchCMD.
• Show drivers' locations to their own employer's dispatchers, and verify where loads were picked up and delivered (see section 3).
• Process transactions and send billing-related communications.
• Send transactional emails (account verification, password resets, notifications).
• Monitor and improve application performance, security, and reliability.
• Respond to your inquiries and provide customer support.
• Detect, prevent, and address fraud, abuse, or technical issues.
• Comply with legal obligations.

5. Third-Party Services

We use third-party service providers in the following categories to operate PatchCMD. Each processes only the data it needs to perform its service for us:

Customers may request a current list of the specific providers we use by contacting support@pillarapps.com.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze how PatchCMD is used. These include:

• Essential cookies - required for authentication and core functionality. These cannot be disabled.
• Functional cookies - store your preferences (theme, language, layout).
• Analytics cookies - help us understand usage patterns and improve PatchCMD.

You can control cookie preferences through your browser settings. Disabling certain cookies may limit your ability to use some features.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. Specifically:

• Account data - retained until you delete your account.
• Transaction records - retained for 7 years to comply with financial and tax regulations.
• Server logs - automatically deleted after 90 days.
• Driver location history - retained for three years, then deleted. It is kept that long because it forms part of the delivery record for each load. It is also deleted with the account, as described below, whichever comes first.
• Error reports - retained for 90 days.

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

8. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (TLS/SSL) and at rest.
• Database access controls that limit each account to its own company's data.
• Regular security audits and dependency updates.
• DDoS protection and a web application firewall.
• PCI-DSS compliant payment processing through a third-party payment processor.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

More detail, and how to report a security concern, is on our Security page.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access - request a copy of the personal data we hold about you.
• Correction - request correction of inaccurate or incomplete data.
• Deletion - request deletion of your personal data.
• Portability - request your data in a structured, machine-readable format.
• Objection - object to certain processing of your data.
• Withdraw consent - where processing is based on consent, withdraw it at any time.

To delete your account, use Delete my account on your profile in the app, or the account deletion page, which also lists what is deleted and what is kept. If you cannot sign in, email us at support@pillarapps.com from the address on your account.

To exercise any of the other rights, contact us at support@pillarapps.com. We will respond within 30 days.

10. Colorado Privacy Act

If you are a Colorado resident, the Colorado Privacy Act (CPA) provides you with additional rights regarding your personal data, including the right to access, correct, delete, and obtain a portable copy of your data, as well as the right to opt out of targeted advertising, the sale of personal data, and certain profiling activities. To exercise these rights or to appeal a decision regarding your request, contact us at support@pillarapps.com.

11. Children's Privacy

PatchCMD is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at support@pillarapps.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Effective Date" above. For significant changes, we may also notify you by email. Your continued use of PatchCMD after changes are posted constitutes acceptance of the revised policy.

13. Contact Us

If you have questions about this Privacy Policy, contact us: