Privacy Policy

Haul works with card issuers, processors, payment networks, fuel-payment providers, financial institutions, factoring providers, identity-verification providers, credit reporting agencies, bank-data providers, carrier-verification services, and other partners. Certain partner products may be subject to separate terms and privacy notices. Those partners process information under their own privacy notices when they act for their own purposes. This Privacy Policy describes Haul's processing and does not replace a privacy notice provided by WEX, a bank, a credit bureau, Plaid or another linked-account provider, Veriff or another identity-verification provider, or any other independent third party.

When a business customer provides Personal Information about another individual, the customer represents that it is authorized to provide that information and will direct the individual to this Privacy Policy or otherwise provide any notice required by law.

2.1 Business, Application, and Account Information

Depending on the Services requested, legal requirements, partner requirements, and our risk assessment, we may collect:

Business legal name, trade name or DBA, entity type, state and date of formation, business address, mailing address, telephone number, email address, website, and business purpose.

Employer Identification Number (EIN), taxpayer identification information, registration records, certificates, organizational documents, proof of address, and good-standing information.

USDOT number, MC number, operating authority, carrier status, fleet size, number of drivers, equipment information, cargo type, years in operation, and other transportation or fleet information.

Revenue, monthly cash flow, average fuel spend, existing credit or factoring relationships, debt obligations, financial statements, tax records, prior fuel-card statements, and other financial or operating records that we request.

Account preferences, requested products, requested credit amount, payment frequency, billing preferences, card controls, vehicle and driver assignments, and information needed to administer the Services.

2.2 Information About Owners, Administrators, Guarantors, Drivers, and Other Users

Name, title, role, ownership percentage, authority, date of birth, residential or business address, email address, and telephone number.

Social Security number, Individual Taxpayer Identification Number, or other taxpayer or identity number when needed for identity verification, credit underwriting, fraud prevention, legal compliance, or a personal guarantee.

Government-issued identification documents, document numbers, document images, selfies, liveness checks, verification results, and related identity or fraud signals when identity verification is required.

User credentials, authentication information, account roles, permissions, card assignments, driver identifiers, vehicle identifiers, and account activity.

Information submitted by a business administrator about drivers, employees, contractors, beneficial owners, control persons, or guarantors.

2.3 Financial, Bank Account, Credit, and Payment Information

Linked business bank account information, account and routing details, account ownership information, balances, available funds, transaction history, cash inflows and outflows, returned payments, and payment behavior.

Bank statements and other financial documents provided directly by the customer or received through an authorized bank-data connection.

Business credit reports, business credit scores, tradeline information, payment history, public records, liens, judgments, bankruptcies, and other business risk information.

Consumer reports and related credit information for a sole proprietor, guarantor, or other individual only when separately authorized or otherwise permitted by applicable law.

ACH instructions, payment authorizations, payment status, failed or returned payments, collection activity, settlement records, invoices, fees, credits, rebates, and internal ledger balances.

Information received in connection with factoring or other financing products offered by Haul or an authorized financial partner.

2.4 Card, Fuel, Transaction, and Fleet Activity Information

Card identifiers or tokens, card status, transaction amount, merchant name, merchant category, purchase location, purchase date and time, fuel type, gallons, price, receipts, and whether a transaction was approved, declined, reversed, or disputed.

Driver ID, vehicle ID, odometer information, card controls, transaction limits, authorization data, decline reasons, fraud alerts, and transaction-monitoring results.

Statements, settlements, invoices, fees, rebates, discounts, chargebacks, disputes, and payment history provided by WEX/EFS or another card, payment, fuel, or processing partner.

Prior fuel-card statements and transaction reports generated by another fuel-card provider and provided by the customer or an authorized source.

2.5 Carrier, Compliance, Public Record, and Third-Party Risk Information

FMCSA and SAFER information, including carrier status, operating authority, inspections, crashes, out-of-service information, safety ratings, fleet size, driver count, cargo type, and related public carrier records.

Carrier identity, insurance, equipment, compliance, fraud, and monitoring information from providers such as Highway or similar services.

Secretary of State records, business registries, OFAC and sanctions screening results, UCC filings, court records, bankruptcy records, liens, judgments, and other public or commercial records.

Business identity, fraud, network, device, address, email, telephone, and application-risk signals received from verification and fraud-prevention providers.

2.6 Website, Mobile App, Cookie, Device, and Session Information

IP address, browser type and version, operating system, device type, mobile device identifiers, app version, language, time zone, and approximate location derived from an IP address.

Session identifiers, login activity, authentication events, pages and screens viewed, buttons selected, navigation paths, referring and exit pages, time spent, feature usage, and form interaction events.

Crash reports, error logs, request URLs, system activity, performance telemetry, network information, security events, failed login attempts, and fraud-prevention signals.

Cookies, local storage, software development kits, analytics tags, and similar technologies used to operate, secure, measure, and improve the Services.

Precise device location only when a user enables location permissions or when it is otherwise collected with appropriate notice and authorization for a specific feature, security purpose, or fraud-prevention purpose.

Our analytics tools are not intended to collect passwords, full Social Security numbers, full bank account numbers, card PINs, or full identity-document images through session analytics or form-tracking tools.

2.7 Communications and Support Information

Emails, support tickets, chat messages, chatbot conversations, survey responses, complaint information, and other communications with Haul.

Telephone calls and other communications that may be monitored, recorded, transcribed, and retained for quality, training, security, compliance, collections, and dispute-resolution purposes, with notice where required by law.

Information provided during sales, onboarding, underwriting, support, fraud review, payment assistance, and collections interactions.

2.8 Derived Information and Inferences

We may create risk indicators, fraud indicators, cash-flow measures, repayment-capacity estimates, transaction classifications, eligibility assessments, credit-limit recommendations, account-monitoring alerts, operational metrics, and other inferences or derived information from the information described above.

We may collect Personal Information from the following sources:

Directly from you, the business applicant, the customer, administrators, owners, guarantors, drivers, authorized users, and other representatives.

From WEX/EFS, card issuers, processors, fuel-payment providers, merchants, payment networks, factoring providers, and other financial or program partners.

From linked financial institutions and authorized bank-data providers, such as Plaid or similar providers.

From business and consumer credit reporting agencies and credit-data providers, such as iSoftpull, Creditsafe, or similar services.

From identity, KYB, KYC, sanctions, fraud, and document-verification providers, such as Veriff or similar providers.

From carrier identity, insurance, equipment, and compliance providers, such as Highway or similar services.

From public and government sources, including FMCSA, SAFER, state business registries, OFAC, UCC records, court records, and bankruptcy records.

From prior fuel-card providers, lenders, factoring companies, insurance providers, accountants, payroll or payment providers, or other parties when the customer provides the records or authorizes access.

Automatically from websites, mobile applications, devices, cookies, logs, Google Analytics, and similar analytics or security technologies.

From referral partners, professional advisors, service providers, and other parties involved in providing or supporting the Services.

We may use Personal Information to:

Create, verify, administer, secure, and maintain business accounts and user access.

Verify business identity, ownership, authority, eligibility, sanctions status, carrier status, and compliance information.

Evaluate applications, perform underwriting, assess creditworthiness and repayment capacity, approve or decline products, determine product eligibility, establish or adjust limits, and monitor ongoing account risk.

Provide credit, prepaid or secured card, fuel-payment, expense-management, internal ledger, factoring, and related services.

Authorize, process, settle, reconcile, monitor, and dispute card, ACH, fuel, and other transactions.

Calculate and provide fees, discounts, rebates, credits, statements, and account information.

Detect, investigate, prevent, and respond to fraud, account misuse, identity theft, security incidents, unauthorized transactions, money laundering, sanctions risks, and other prohibited activity.

Monitor account performance, collect amounts owed, recover losses, manage delinquency, and enforce agreements.

Provide customer service, communicate about applications and accounts, respond to requests, and retain records of communications.

Analyze usage, diagnose errors, improve product design, test features, maintain system performance, and develop new business-purpose products and services.

Comply with legal, regulatory, contractual, audit, tax, accounting, recordkeeping, and reporting obligations.

Protect Haul, our customers, partners, users, and others; enforce rights; establish, exercise, or defend legal claims; and respond to lawful requests.

Create aggregated or de-identified information for analytics, risk management, product improvement, and other lawful business purposes.

Haul may obtain business credit reports and other business-risk information to evaluate an application, establish or modify credit terms, monitor an account, prevent fraud, and manage collections. Haul may obtain a consumer report about an individual only pursuant to a separate authorization or another permissible purpose under applicable law. A business applicant may be asked to provide additional authorization for a soft or hard inquiry, a personal guarantee, or ongoing account review.

Haul may use information from linked bank accounts, fuel transactions, prior fuel-card statements, public records, carrier records, identity-verification providers, credit-data providers, and internal account performance to evaluate eligibility and risk. Haul may also furnish business account information to business credit reporting agencies where permitted by law and described in the applicable agreement or notice. Any future furnishing to consumer reporting agencies will occur only where legally permitted and separately disclosed.

Credit-related notices, including approval, counteroffer, adverse action, pricing, or credit-report notices, are governed by the applicable application authorization, credit agreement, card program terms, and legally required notices. A privacy request does not replace or limit rights available under credit-reporting or credit-discrimination laws.

Haul may use automated tools, statistical models, artificial intelligence, and machine-learning systems to assist with identity verification, fraud detection, underwriting, credit-limit recommendations, transaction monitoring, account review, collections prioritization, customer support, analytics, and product improvement. These tools may generate scores, classifications, alerts, recommendations, or other derived information. Automated results may be reviewed by authorized personnel where required by law or appropriate for the decision.

Haul may disclose analytical, summarized, tokenized, masked, or derived information to AI and machine-learning service providers acting on Haul's behalf. Haul does not intentionally provide those providers with full Social Security numbers, full bank account numbers, card PINs, passwords, raw identity documents, or other authentication secrets for general-purpose AI processing. Service providers are expected to process information only for authorized purposes and subject to applicable contractual and security requirements.

Where applicable law provides a right to opt out of certain profiling or automated processing, Haul will honor that right subject to legal exemptions and limitations applicable to credit underwriting, fraud prevention, security, compliance, and the Services requested by the business customer.

We use cookies, local storage, mobile SDKs, pixels, log files, and similar technologies to operate the Services, maintain sessions, remember preferences, authenticate users, prevent fraud, protect accounts, understand usage, diagnose errors, and improve performance. We may use Google Analytics and similar services to measure website and application usage.

These technologies may be categorized as:

Essential and security technologies, which are needed for login, account functionality, fraud prevention, and system security.

Preference technologies, which remember settings and improve usability.

Analytics and performance technologies, which help us understand usage, errors, and performance.

Advertising technologies, which we do not currently use for targeted or cross-context behavioral advertising.

You may be able to control cookies through your browser, device settings, or a cookie preference tool. Blocking essential or security technologies may prevent parts of the Services from working. We process legally recognized universal opt-out preference signals where required by applicable law.

Haul does not currently sell Personal Information or share Personal Information for cross-context behavioral advertising or targeted advertising. If our practices change, we will update this Privacy Policy and provide choices required by applicable law.

We may disclose Personal Information to the following categories of recipients:

Card, payment, fuel, and financial partners. This includes WEX/EFS, card issuers, processors, merchants, payment networks, financial institutions, factoring providers, and other partners needed to provide the Services.

Credit reporting and credit-data providers. We may obtain or verify business or consumer credit information and may furnish business account information where permitted and disclosed.

Bank-data and payment providers. We may disclose information to linked-account providers, ACH providers, financial institutions, and payment processors.

Identity, KYB, KYC, fraud, sanctions, and carrier-verification providers. These providers help verify businesses and individuals, screen risks, and prevent fraud.

Cloud, hosting, software, analytics, communications, AI, security, and support providers. These providers process information to operate and improve the Services on Haul's behalf.

The business customer and its authorized administrators. The business may access information about its users, drivers, cards, vehicles, transactions, locations, receipts, and account activity according to assigned permissions.

Authorized integrations and third-party services. We may disclose information when a customer directs us to connect an accounting, operational, financial, or other service.

Professional advisors and auditors. This may include lawyers, accountants, insurers, consultants, auditors, and financing sources subject to confidentiality or legal obligations.

Government authorities and other parties for legal purposes. We may disclose information to comply with law, regulation, court order, subpoena, audit, network rule, or regulatory request; to protect rights and safety; to prevent fraud; or to enforce agreements.

Corporate transaction participants. Information may be disclosed in connection with a merger, financing, acquisition, reorganization, sale of assets, bankruptcy, or similar transaction, subject to appropriate safeguards.

We may disclose de-identified or aggregated information that does not reasonably identify an individual. We do not sell Personal Information for money and do not knowingly permit service providers to use Personal Information for their own unrelated advertising purposes.

When identity verification is required, Haul or an identity-verification provider such as Veriff may collect government identification, document images, selfies, video or liveness information, and related verification signals. A provider may use automated methods to compare an identity document with a selfie or liveness check. The provider's privacy notice and consent flow may apply to its processing.

Haul may receive the verification result, fraud indicators, document information, and limited supporting data. Haul will not use identity-verification images or biometric-related information for advertising or to infer unrelated personal characteristics. Where a separate biometric notice or consent is required, Haul or the provider will present it before collection.

Haul's primary data storage is located in the United States. Authorized Haul personnel, contractors, and service providers may access Personal Information from the United States, Kazakhstan, and Uzbekistan for engineering, support, underwriting, risk, fraud, collections, operations, and other authorized business purposes. Access is intended to be limited according to role, business need, confidentiality obligations, and technical and organizational safeguards.

Information may also be processed in other locations where our service providers operate. By using the Services, you understand that information may be transferred to and processed in jurisdictions that may have different privacy laws from your state or country of residence.

We retain Personal Information for as long as reasonably necessary to provide the Services, maintain accounts, meet legal and contractual obligations, manage risk, prevent fraud, resolve disputes, collect amounts owed, and enforce agreements. Retention periods vary based on the type of record and the reason it is maintained.

Our current working retention periods are generally:

Account and relationship information: for the duration of the business relationship and a reasonable period afterward.

Financial, payment, card, transaction, accounting, and settlement records: generally up to seven years after account closure or the transaction date.

Applications, underwriting records, credit decisions, and related supporting records: generally five to seven years.

Fraud, security, investigation, sanctions, and compliance records: generally five to seven years, or longer where reasonably necessary for an investigation or legal obligation.

Website, mobile app, cookie, and analytics data: generally twelve to twenty-six months, subject to tool settings and security needs.

Support, call, chat, complaint, and communication records: generally three to five years.

Identity documents and verification records: only for the period reasonably necessary for identity verification, fraud prevention, compliance, disputes, and applicable legal or partner requirements.

We may retain information longer when required by law, contract, litigation hold, audit, regulator request, fraud investigation, collections activity, or the need to establish, exercise, or defend legal claims. We may retain de-identified or aggregated information where it cannot reasonably be used to identify an individual.

We use administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, loss, misuse, alteration, or disclosure. Safeguards may include role-based access controls, authentication controls, encryption or tokenization where appropriate, monitoring, logging, vendor review, employee confidentiality obligations, incident response procedures, and secure development practices.

No method of storage or transmission is completely secure. You are responsible for maintaining the confidentiality of account credentials, using secure devices and networks, limiting user access, and promptly notifying Haul of suspected unauthorized activity.

Depending on your state of residence and whether an applicable law covers the relevant information, you may have the right to request that we:

Confirm whether we process your Personal Information and provide access to it.

Correct inaccurate Personal Information.

Delete Personal Information, subject to legal and operational exceptions.

Provide a portable copy of certain Personal Information.

Disclose categories or specific pieces of Personal Information collected, sources, purposes, and categories of recipients.

Opt out of the sale of Personal Information, targeted advertising, or certain profiling or automated processing, where those rights apply.

Limit certain uses or disclosures of Sensitive Personal Information, where applicable.

Appeal a denial of a privacy request, where applicable law provides an appeal right.

Haul does not currently sell Personal Information or use it for targeted advertising. Certain information and processing may be exempt from state privacy laws, including information processed under financial, credit-reporting, fraud-prevention, employment, business-to-business, or other legal exemptions.

To submit a privacy request, contact us using one of the following methods:

Email: support@haulfuel.com

Telephone: (888) 218-6611

Mail: Haul Technologies, Inc., 1111B South Governors Ave., #91607, Dover, DE 19904, United States

We may need to verify your identity, residence, account relationship, and authority before completing a request. An authorized agent may submit a request where permitted, but we may require proof of authorization and direct verification with the individual. We will not unlawfully discriminate against you for exercising applicable privacy rights. We will respond within the time required by applicable law.

Privacy requests generally apply to Personal Information about an individual. Requests concerning business credit decisions, credit reports, account disputes, transaction disputes, or amounts owed should be submitted through the applicable account, credit-reporting, support, or dispute process.

If the California Consumer Privacy Act applies to Haul's processing of your Personal Information, the categories of Personal Information we may collect include the categories listed below. We use and disclose these categories for the business and commercial purposes described in this Privacy Policy.

Identifiers — Examples: Name, address, email, phone, IP address, account ID, EIN, SSN or ITIN, document identifiers — Collected: Yes — Sold or Shared for Targeted Advertising: No

Customer records — Examples: Contact, financial, credit, identification, and account information — Collected: Yes — Sold or Shared for Targeted Advertising: No

Commercial information — Examples: Products, card use, fuel purchases, transaction history, fees, rebates, payment history — Collected: Yes — Sold or Shared for Targeted Advertising: No

Internet or network activity — Examples: Pages, screens, clicks, sessions, device and browser activity, logs — Collected: Yes — Sold or Shared for Targeted Advertising: No

Geolocation information — Examples: Approximate IP location and precise location when enabled for a feature — Collected: Yes — Sold or Shared for Targeted Advertising: No

Professional or employment information — Examples: Business role, title, authority, driver or administrator relationship — Collected: Yes — Sold or Shared for Targeted Advertising: No

Inferences — Examples: Credit, cash-flow, fraud, eligibility, operational, and risk indicators — Collected: Yes — Sold or Shared for Targeted Advertising: No

Sensitive Personal Information — Examples: SSN, financial account access information, precise geolocation, identity documents, authentication information — Collected: Yes — Sold or Shared for Targeted Advertising: No

We use Sensitive Personal Information only as reasonably necessary to provide the Services, verify identity, process payments, evaluate credit, prevent fraud, maintain security, comply with law, and perform other purposes permitted without a right to limit. We do not use Sensitive Personal Information to infer unrelated characteristics about an individual.

We may disclose the categories above to service providers, contractors, card and financial partners, credit reporting agencies, identity and fraud providers, the business customer and its administrators, professional advisors, and government authorities for the purposes described in this Privacy Policy. We do not sell or share Personal Information for cross-context behavioral advertising.

The Services may link to or integrate with third-party websites, applications, financial accounts, accounting systems, factoring services, identity-verification tools, or other products. Your use of those services is subject to the third party's terms and privacy notice. Haul is not responsible for the privacy practices of an independent third party.

The Services are intended for business users who are at least eighteen years old or the age of majority in their jurisdiction, whichever is higher. We do not knowingly collect Personal Information from children under thirteen through the Services. If you believe a child provided Personal Information to us, contact us so that we can review and address the matter.

We may update this Privacy Policy from time to time to reflect changes in our Services, data practices, partners, technology, or legal requirements. We will post the updated version and revise the "Last Updated" date. Where required, we will provide additional notice or obtain consent before a material change takes effect.

Questions, complaints, and privacy requests may be directed to:

Haul Technologies, Inc.

1111B South Governors Ave., #91607

Dover, DE 19904

United States

Email: support@haulfuel.com

General inquiries: info@haulfuel.com

Telephone: (888) 218-6611