Privacy Policy

Our Commitment to Privacy

ScaleOne Solutions, LLC ("ScaleOne," "we," "us," or "our") operates LoadVoice, a voice AI platform for independent freight brokers. We respect your privacy and follow applicable U.S. privacy requirements including California's CCPA (as amended by CPRA), and where relevant, GDPR-aligned practices for users in the EU/EEA, UK, and Switzerland. We also comply with Canada's PIPEDA (including Quebec Law 25) and Australia's Privacy Act where applicable. This policy explains what data we collect, how we use it, and your rights.

What We Collect

Contact details: When you submit our contact or lead form, we collect the name, email address, and phone number you provide.

Usage data: Vercel Analytics collects privacy-preserving, aggregated page view data — pages visited, referrer, and device type. No cookies are set and no individual user profiles are built.

Technical data: Our hosting infrastructure records IP addresses and browser details for security and uptime purposes.

Please do not share sensitive personal details through our contact form.

How We Use Your Data

Reply to you: We use contact form submissions to respond to inquiries and schedule follow-ups. A human team member reviews all submissions — no automated decisions are made about you.

Improve our service: Aggregated usage analytics help us understand how LoadVoice is being discovered and used. We do not fine-tune or train large language models on your personal data. We do not sell or share your data with advertisers.

Protect our systems: IP addresses and access logs help prevent fraud and abuse.

Automated Decision-Making Technology (ADMT)

Under California's CPRA regulations effective January 1, 2026, consumers have rights regarding automated decision-making technology that produces legal or similarly significant effects.

Legal Grounds for Processing

California (CCPA, as amended by CPRA): We do not sell or share personal information as defined by California law. You may exercise your right to know, delete, and correct personal information, and you may limit the use of sensitive personal information. We honor Global Privacy Control (GPC) signals where applicable. We do not discriminate against you for exercising your rights.

European Union / EEA (GDPR): We rely on legitimate interests (to provide and improve the service) and consent (when you submit your details). You have rights to access, correct, erase, restrict, object, and port your data. You can withdraw consent at any time.

United Kingdom (UK GDPR): Your rights are substantially similar to those under the EU GDPR, including rights to access, rectification, erasure, restriction, data portability, and objection. For international transfers, we use the UK International Data Transfer Agreement (IDTA) or UK Addendum to the EU Standard Contractual Clauses where applicable.

Canada (PIPEDA and Quebec Law 25): We obtain meaningful consent for collection, use, and disclosure of personal information. You may access, correct, and challenge the accuracy of your personal information. Quebec's Law 25 provides additional rights including the right to be informed of the use of your personal information and the right to withdraw consent.

Australia (Privacy Act 1988): You have rights to access and correct your personal information. We handle cross-border disclosures in accordance with APP 8, using consent or contractual arrangements with overseas recipients.

Switzerland (FADP): You have rights to information, correction, and deletion of your personal data. We process personal data in accordance with the principles of transparency, purpose limitation, and data minimization.

Opt-out confirmation: If you submit an opt-out request or we detect a GPC signal, we will confirm that your request has been processed.

Data Retention

We keep contact form submissions for up to 90 days for follow-up and service improvement purposes, then delete or anonymize the data. If we must preserve data for a specific security incident or legal hold, we retain only what is necessary. Aggregated statistics that do not identify you may be retained longer. You can request deletion sooner using the contact options below.

Infrastructure Partners

We do not sell or rent your personal data. Your data is processed on our behalf by the following infrastructure providers, each bound by contract to process it only as directed by us:

• Vercel: Hosting, CDN, edge functions, and privacy-preserving usage analytics (Vercel Analytics). No cookies are set by Vercel Analytics.
• Supabase: Cloud database for storing contact form submissions on encrypted, access-controlled servers.
• Google Workspace: Business email. Inbound contact requests and correspondence may pass through Google's servers.
• Legal obligations: We may disclose information if required by law, court order, or to protect the rights and safety of ScaleOne or others.

Future Voice Features — Call Recording Notice

When LoadVoice voice features are active, calls between brokers, carriers, and the LoadVoice AI will be recorded and transcribed for quality assurance, AI improvement, and service delivery purposes. The following additional terms will apply at that time:

• Per-call consent: All parties will receive a clear disclosure and consent prompt before any recorded call begins. If consent is declined, the call will not proceed.
• Two-party consent states: LoadVoice will comply with all-party consent requirements in states including California, Illinois, and Maryland. Consent will be obtained from all parties prior to recording regardless of jurisdiction.
• Additional sub-processors at that time: Azure OpenAI (AI inference), Deepgram (speech-to-text), xAI/Grok (LLM inference), and LiveKit (real-time voice infrastructure). This policy will be updated with full sub-processor details before voice features go live.
• Retention: Call recordings and transcripts will be retained for up to 90 days then deleted or anonymized, except where required for a legal hold.

Your Rights and Choices

Depending on your location, you may request access, correction, deletion, and other rights described above.

We will verify your identity before processing your request and respond within 45 days (extendable to 90 days for complex requests).

Children's Privacy

Our services are not intended for children under 18. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, please contact us to have it removed.

Security Measures

We use encryption (TLS in transit, encryption at rest), access controls, and secure cloud storage to protect your data. No system is perfect, but we work to minimize risks and respond promptly to security incidents.

Changes to This Policy

We may update this policy as laws or our practices change. We will post the new version on our website with a revised "last updated" date. If we make material changes, we will notify you before they take effect.

Contact Us