BETA · DRAFT

Privacy Policy

How voxtruck collects, uses, and protects your information.

Last updated: April 30, 2026

voxtruck is in private beta. These policies are working drafts and may be updated as the product and our practices mature. We'll notify account holders by email when material changes are made.

1. Who we are

voxtruck is a compliance and training platform for commercial truck drivers and the fleets that employ them. It is operated by Roseiies (the "operator," "we," "us"). This Privacy Policy explains what information we collect, how we use it, and the rights you have over your data.

If you have questions about anything in this document, contact us at admin@roseiies.com.

2. Information we collect

Account information: your name, email address, the role you signed up as (driver, fleet manager, insurance partner), and your preferred language. For drivers, this may also include your CDL class and the fleet you're employed by, if any.

Voice recordings: when you practice with the Road Guide or any voice-first module, we record your audio for transcription, scoring, and product improvement. Recordings are tied to your account and encrypted at rest.

Learning progress: vocabulary mastery, scenario completions, streak counts, certifications earned, and other in-app activity that helps us tailor what you see next.

Fleet content: documents and media that fleet managers upload to the back office (training videos, maintenance procedures, safety briefings, past audits). This content is segregated per fleet — drivers in one fleet cannot see another fleet's materials.

Telemetry data (when integrated): vehicle ECM data, hours-of-service logs, driver qualification files, and other operational data, when a fleet has authorized voxtruck to receive it from their existing systems.

Usage data: how you interact with the app, browser and device information, IP address (for security and abuse prevention), and approximate location (city-level, derived from IP).

3. How we use your information

To provide the service: scoring your scenarios, tracking your progress, recommending what to practice next, generating compliance reports for fleets, and surfacing certifications you've earned.

To improve our AI models: voice recordings and outcomes help us train better models. Recordings are anonymized before any model training, and you can opt out of training data use entirely in your account settings.

For fleet reporting: if you're a driver associated with a fleet, your fleet manager sees your training progress and compliance status. They do not see the content of your individual voice recordings unless you explicitly share a recording with them.

For insurance reporting (Phase 2, with carrier opt-in): when an insurance carrier partners with us and a fleet authorizes participation, we may produce tenant-scoped, driver-anonymized risk telemetry. Individual drivers are not identified to insurers.

To communicate with you: account emails (sign-in, security), product updates, and important notices like changes to this policy.

4. Who we share information with

Service providers we trust: Supabase (database hosting and authentication), Anthropic (AI inference), Resend (transactional email delivery). Each is bound by a data processing agreement and only handles data needed to provide their service.

Your fleet employer: if you signed up as a driver associated with a specific fleet, your fleet manager has read access to your training progress, compliance status, and aggregated voice-practice metrics — but not raw recordings unless you explicitly share one.

For legal reasons: if compelled by valid legal process (court order, subpoena), or to protect our rights, your safety, or the safety of others.

We do not sell your personal data. Period.

5. Your rights — and the driver-record promise

Your driver record is yours. The certifications you earn, the vocabulary you master, the scenarios you complete — these belong to you and travel with you across employers. If you change fleets, your training history goes with you.

You can access, correct, or delete your data at any time from your account settings, or by emailing admin@roseiies.com.

You can export your training history as a portable file you can take to another fleet, an insurance carrier, or a regulator.

You can opt out of model training, marketing emails, and any optional data sharing (such as insurance reporting in Phase 2).

6. Voice recordings — specifics

Encrypted at rest using AES-256.

You can delete individual recordings or all of your recordings at any time. Deletion is permanent and propagates to all backups within 30 days.

Recordings are not used for model training without your explicit consent (opt-in during account setup, revocable anytime).

Default retention: 90 days, after which recordings are automatically deleted unless you have explicitly chosen to keep them as part of your training portfolio.

7. Data retention

Active account data is kept while your account is active.

Voice recordings are kept 90 days by default unless you opt to keep them.

When you delete your account, we delete or anonymize your data within 30 days, except where we are required by law to retain it longer (for example, audit trails for fleet compliance reporting may be retained up to 3 years).

Aggregated, fully anonymized statistical data (which cannot be linked back to you) may be retained indefinitely.

8. Security

All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).

We use Supabase's row-level security to isolate fleets from each other — a driver in fleet A cannot access data belonging to fleet B, and vice versa.

Service-role access is limited to the smallest set of operators required to maintain the platform.

In the event of a data breach affecting your information, we will notify you within 72 hours of becoming aware of it, in accordance with applicable law.

9. International data transfers

voxtruck is operated from the United States. If you access the service from outside the US, your information will be transferred to and processed in the US, where data protection laws may differ from those in your country.

By using voxtruck, you consent to this transfer. If you have specific concerns about cross-border data flows, contact us before creating an account.

10. Children's privacy

voxtruck is not intended for users under 18. We do not knowingly collect personal information from children. If you believe a child has created an account, please contact us at admin@roseiies.com and we will delete the account and any associated data.

11. Changes to this policy

We may update this policy as the product and our practices evolve. Material changes will be communicated to account holders by email at least 30 days before they take effect, and the "Last updated" date at the top of this page will reflect the change.

Continued use of voxtruck after the effective date of an update means you accept the updated policy. If you don't agree, you can close your account and export your data first.

Contact

Questions about this document? Email us at admin@roseiies.com.