Privacy Policy

Last updated: June 19, 2026

This Privacy Policy explains how DeadHeader Inc. ("DeadHeader," "we," "us," or "our") collects, uses, discloses, and protects information in connection with the DeadHeader website, applications, and services (the "Service"). It applies when we act as the controller of your information. In some cases we act as a processor on a user's behalf - for example, when a broker enters information about a shipper or vehicle owner, the broker (not DeadHeader) is the controller of that information, and we process it under the broker's direction to provide the Service. If you are a shipper or other third party and have questions about data a broker or carrier entered about you, please contact that company.

1. Information we collect

Information you provide. When you register and use the Service, we collect:

• Account & contact: your name, email address, phone number, role (carrier, broker, or admin), and your company details. We use passwordless sign-in, so we do not collect or store account passwords.
• Company & identity: your USDOT/MC numbers and related company information, used (among other things) to match your sign-up email against your company's FMCSA record for anti-fraud verification.
• Marketplace activity: trips, available spots, order requests, prices and offers, vehicle details (including VINs), pickup/delivery details, payment-method and payment-term selections (informational only - we do not process payments), ratings, notes, and saved searches.
• Information about third parties you enter: shipper and vehicle-owner names, addresses, and contact details, and pickup/delivery contacts. You are responsible for having the right to provide this, and we process it on your behalf to generate documents and coordinate the shipment.
• Documents & driver captures: the documents the Service generates (dispatch sheets, bills of lading, invoices, delivery receipts, online BOLs, and due-diligence reports) and driver-capture records, which can include signatures, vehicle condition photos, and - where the device permits and the driver allows it - the device's location (latitude/longitude and accuracy) and timestamps recorded as delivery evidence.
• Communications: messages you send through in-app chat, and your correspondence with our support team.

Information collected automatically. When you use the Service we and our analytics provider collect limited technical data such as your IP address, device and browser type, pages viewed, and usage and log information, to operate, secure, measure, and improve the Service (see Section 4).

Information from third parties. We retrieve company, authority, insurance, safety, and out-of-service data from the FMCSA, and decode VINs through the NHTSA. This information largely originates from public records and the registrants themselves. We use mapping providers (such as Google Maps) to display routes and the capacity map.

2. How we use information

We use information to:

• provide, operate, and maintain the marketplace and your account;
• verify identity and company ownership (the FMCSA-email match) and prevent fraud, abuse, and unauthorized access;
• generate operational documents and records and surface FMCSA-based vetting and monitoring alerts;
• send transactional and service communications (including the sign-in magic link, notifications, and, with the appropriate preference set, email updates);
• provide support, measure usage, analyze and improve the Service, and ensure security and reliability; and
• comply with law and enforce our Terms, and establish, exercise, or defend legal claims.

3. How we share information

• With other users (the marketplace): because the Service connects carriers and brokers, the people you deal with necessarily see relevant business and contact information. For example, brokers can view a carrier's FMCSA-based profile and performance, and once an order is accepted the parties exchange the contact and logistics details needed to complete the shipment. Information that identifies a shipper is restricted until a deal is accepted.
• With service providers: vendors that host our infrastructure, deliver our email, provide mapping and analytics, and similar functions, acting on our behalf under appropriate confidentiality and security obligations.
• Third-party data sources: we query the FMCSA, NHTSA, and mapping providers to retrieve the data described above; we do not provide your personal information to them for their own purposes.
• For legal and safety reasons: to comply with law or valid legal process, to enforce our Terms, to prevent fraud or harm, and to protect the rights, property, and safety of DeadHeader, our users, and the public.
• In a business transfer: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

We do not sell your personal information, and we do not display third-party advertising on the Service. We do use Google Analytics to measure usage, as described in Section 4.

4. Cookies and analytics

Functional cookies and local storage. We use a small number of strictly functional cookies and browser-storage items to run the Service - for example, an encrypted session cookie that identifies you to the server, a sign-in token and a few preferences your browser stores locally, and standard security and load-balancing cookies. Disabling functional cookies may break sign-in and other features.

Google Analytics. We use Google Analytics, a web-analytics service provided by Google, to understand how visitors find and use the Service so we can improve it. Google Analytics sets cookies and collects usage and device information, including your IP address and pages viewed, and processes it subject to Google's privacy policy. We use it for analytics - not to display advertising to you on the Service. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on, by using your browser's cookie controls, or, where we present a cookie choice, by declining analytics cookies. We also honor Global Privacy Control and similar browser-based opt-out preference signals (see Section 8).

5. Driver location and photos

The driver-capture flow may record a device's location and a timestamp alongside signatures and condition photos, to serve as evidence of where and when a pickup or delivery occurred. Location is collected only with the device's permission and never blocks a capture if it is unavailable. This information becomes part of the shipment record (such as the bill of lading and delivery receipt) available to the parties to that shipment.

6. Data retention

We keep personal information for as long as your account is active and as needed to provide the Service, and afterward as needed to comply with law, resolve disputes, and enforce our agreements. Some records - such as completed-shipment documents and the immutable, point-in-time due-diligence reports generated at the time of a booking - are retained as business and legal records even after an account closes, because they document a transaction that occurred.

7. Security

We use reasonable technical and organizational measures designed to protect information, including encrypted transport, passwordless authentication, role- and company-based access controls, and identity verification at onboarding. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. Keep your email account - which is the key to passwordless sign-in - secure, and tell us promptly if you suspect unauthorized access.

8. Your choices and rights

You can update your account and email preferences in the app, and you can unsubscribe from non-essential emails using the link in those messages (we will still send essential transactional messages, such as sign-in links). You can opt out of analytics as described in Section 4. Depending on where you live and subject to legal exceptions, you may have the right to request access to, a copy of, correction of, or deletion of your personal information, and to ask about how we process it.

Your U.S. state privacy rights. Depending on your state of residence and subject to legal exceptions, you may have some or all of these rights regarding the personal information we hold about you: to know and access it (including the categories we collect, use, and disclose); to receive a portable copy of it; to correct inaccuracies; to delete it; to opt out of any "sale" or "sharing" of personal information and of targeted advertising; and to not be treated differently for exercising these rights.

California (CCPA/CPRA). California residents have the rights described above. We do not sell personal information for money, and we do not use sensitive personal information to infer characteristics about you. We use Google Analytics for analytics, which - depending on its configuration and applicable law - may be treated as a "sale" or "share"; you can opt out using the methods in Section 4 and the preference signal described below. You may use an authorized agent to submit a request on your behalf, with proof of your authorization.

Global Privacy Control. We honor the Global Privacy Control (GPC) and similar browser- or device-based opt-out preference signals as a valid request to opt out of any "sale" or "sharing" of personal information for the browser or device that sends the signal.

How to submit a request. Email privacy@deadheader.com with your request and enough detail for us to respond. To protect your information, we will take reasonable steps to verify your identity before acting on a request to know, correct, or delete - typically by confirming information associated with your account, such as your account email - and we may decline a request we cannot verify. We will not charge a fee unless your request is excessive or repetitive, as permitted by law.

Timing and appeals. We will acknowledge and respond within the time required by applicable law - generally within 45 days, which we may extend by an additional 45 days when reasonably necessary, with notice to you. If we decline your request, you may appeal by replying to our response or emailing privacy@deadheader.com with "Appeal" in the subject line; we will respond to your appeal within the period your state's law allows.

9. We are not a consumer reporting agency

DeadHeader is not a consumer reporting agency, and the FMCSA-based and other information we display is not a "consumer report" under the Fair Credit Reporting Act. The Service is intended to assist business-to-business due diligence in auto transport and may not be used to make decisions about an individual's credit, insurance, employment, housing, or other purposes governed by the Fair Credit Reporting Act or similar laws.

10. Children

The Service is for business users and is not directed to, and we do not knowingly collect personal information from, anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

11. United States

DeadHeader is based in the United States and the Service is intended for use in the United States. If you access it from elsewhere, you understand that your information is processed in the United States, where data-protection laws may differ from those of your location.

12. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide reasonable notice. Your continued use of the Service after the changes take effect means you accept the updated Policy.

13. Contact us

Questions or requests about this Policy or your information? Email privacy@deadheader.com or reach us through our contact page. DeadHeader Inc., 11471 W Sample Road, Suite 32, Coral Springs, FL 33065.

DeadHeader Inc. · We don't sell your data or display ads. See also our Terms of Service.