Privacy Policy

Mwamba Inc ("BOLzone," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our trucking management platform at bolzone.com (the "Service").

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, phone number, company name, DOT number
• Profile Data: Driver license information, CDL details, truck and trailer specifications
• Payment Information: Billing address, payment method details (processed securely by third-party payment processors)
• Load and Trip Data: Pickup/delivery locations, load details, mileage, earnings, expenses
• Communications: Messages, support tickets, feedback you send to us

1.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent on Service, clickstream data
• Location Data: GPS coordinates from ELD integrations and mobile app (with your consent)
• Cookies and Tracking: Session cookies, analytics cookies, preference cookies

1.3 Information from Third Parties

• ELD Systems: Hours of Service (HOS) data, GPS locations, vehicle diagnostics
• Loadboards: Available load information, broker details, rate data
• Factoring Services: Invoice status, payment processing information
• SaferWatch/FMCSA: DOT inspection history, safety ratings, compliance records

2. How We Use Your Information

We use the information we collect to:

• Provide the Service: Facilitate load management, profitability predictions, compliance tracking
• AI Features: Train machine learning models for profit forecasting and route optimization
• Integrations: Connect with ELD systems, loadboards, factoring services, and compliance databases
• Communications: Send service updates, compliance alerts, promotional messages (with opt-out option)
• Customer Support: Respond to inquiries, troubleshoot issues, provide technical assistance
• Analytics: Analyze usage patterns, improve features, detect and prevent fraud
• Legal Compliance: Comply with DOT regulations, tax requirements, and legal obligations

3. How We Share Your Information

We may share your information with:

• Service Providers: Third-party vendors for hosting, analytics, payment processing, email services
• Integration Partners: ELD providers, loadboards, factoring companies (only data necessary for functionality)
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• Legal Requirements: When required by law, court order, or government request
• Safety and Fraud Prevention: To protect rights, property, or safety of BOLzone, users, or public

We do not sell your personal information to third parties.

3A. Integration Partner Obligations

When we integrate with third-party platforms (such as ELD systems, loadboards, or fleet management platforms), we commit to:

• Data Confidentiality: Keep integration partner data confidential and secure from unauthorized access
• No Unauthorized Transfers: Never sell, license, or transfer customer data to third parties without explicit written consent
• Security Standards: Use industry-standard security measures to prevent unauthorized access to integrated data
• API Security: Secure all API tokens and login credentials; never share with unauthorized parties
• Compliance: Comply with EU GDPR, UK GDPR, UK Data Protection Act 2018, and applicable privacy statutes
• Partner Requirements: Respect and adhere to integration partners' data handling and privacy requirements

3B. Security Incident Notification

In the event of a security incident or data breach:

• Immediate Notification: We will immediately notify affected users and integration partners of any security incident
• Investigation: We will promptly investigate, mitigate, and remediate the breach
• Impact Assessment: We will provide details about the potential impact and scope of the incident
• Remediation: We will take all necessary steps to prevent future incidents
• Regulatory Compliance: We will comply with all applicable data breach notification laws and timelines

To report a suspected security incident, contact us immediately at security@bolzone.com.

4. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: TLS/SSL encryption for data in transit, AES-256 encryption for data at rest
• Access Controls: Role-based access, multi-factor authentication for administrative accounts
• Infrastructure: Secure cloud hosting with regular security audits and vulnerability scans
• Compliance: SOC 2 Type II certification (in progress), GDPR and CCPA compliance frameworks

While we strive to protect your information, no method of transmission over the internet is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

5. Your Rights and Choices

5.1 General Data Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Opt-Out: Unsubscribe from marketing emails (compliance alerts cannot be opted out)
• Data Portability: Receive your data in a machine-readable format
• Restrict Processing: Limit how we use your information

5.2 GDPR Rights (EU/UK/EEA Residents)

If you are located in the European Economic Area (EEA), United Kingdom, or other GDPR-compliant regions, you have additional rights under the General Data Protection Regulation (GDPR) and UK Data Protection Act 2018:

• Right to Object: Object to processing of your personal data for direct marketing or based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: File a complaint with your local data protection authority
• Automated Decision-Making: Request human review of automated decisions (such as AI profitability predictions)
• Data Protection Officer: Contact our Data Protection Officer (DPO) for privacy concerns

5.3 CCPA Rights (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about categories and specific pieces of personal information collected
• Right to Delete: Request deletion of personal information we have collected
• Right to Opt-Out of Sale: We do not sell personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

5.4 How to Exercise Your Rights

To exercise any of these rights:

• Email us at privacy@bolzone.com
• Call us at (682) 310-3050
• Submit a request through your account settings (for account holders)

We will respond to your request within 30 days (or as required by applicable law). We may request verification of your identity before processing your request.

5.5 EU Representative

For EU/EEA data protection inquiries, you may contact our EU representative (to be appointed) or our Data Protection Officer at dpo@bolzone.com.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. We may retain certain information for longer periods as required by law (e.g., DOT record-keeping requirements of 3 years). After account deletion, we may retain anonymized data for analytics and AI model training.

7. Children's Privacy

BOLzone is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at privacy@bolzone.com.

8. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. By using BOLzone, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: