Privacy Policy

Overview

This Privacy Policy explains how ColtCC, operated by Chain of Love Transport, Inc. (“Chain of Love,” “we,” “us,” or “our”), handles information when authorized personnel use the ColtCC application. ColtCC supports transportation operations, staff coordination, driver communication, compliance workflows, and related business functions.

Information we may collect

Depending on how the application is used, ColtCC may process account and contact information, staff and driver profile information, transportation and scheduling details, work orders, uploaded documents, internal messages, communication records, training and compliance information, and technical information needed to operate and secure the service.

A Google account administrator may also authorize ColtCC to access limited Google account information and Gmail permissions described below.

How information is used

We use information to operate ColtCC, coordinate transportation services, prepare and deliver authorized work communications, manage staff and driver access, maintain business records, support compliance and training workflows, troubleshoot problems, and protect the application from misuse.

Google account authorization and Gmail API access

ColtCC may use Google OAuth to authorize a company-controlled Google account. This authorization allows ColtCC to send approved work-related emails, including work-order PDF attachments, through the Gmail API.

The application requests the https://www.googleapis.com/auth/gmail.send permission to send those messages. The dedicated work-order email workflow also uses read-only Gmail access for one limited safety function: if a Gmail send response is interrupted or uncertain, ColtCC searches Sent mail for the unique identifier assigned to that specific message so it can avoid sending a duplicate. This access is not used to browse or download the Gmail inbox, delete messages, or manage unrelated email.

Google user data obtained through Google APIs is handled in accordance with the Google API Services User Data Policy, including its Limited Use requirements.

OAuth tokens and credentials

Google OAuth client credentials and authorization tokens are treated as sensitive credentials. ColtCC stores the dedicated Gmail refresh token in encrypted form and does not display OAuth tokens or client secrets to application users. Access is limited to the application functions that require the authorized Google connection.

Data storage and security

We use administrative, technical, and operational safeguards intended to protect information from unauthorized access, alteration, loss, or misuse. No method of electronic storage or transmission can be guaranteed to be completely secure.

Service providers and information sharing

ColtCC uses service providers that support its operation, including Replit for application hosting and infrastructure, Google for authorized Google services and email delivery, and Twilio for text-message delivery. These providers may process information only as needed to provide their services and subject to their own terms and privacy practices.

We may also disclose information when reasonably necessary to comply with applicable law, respond to lawful requests, protect rights or safety, prevent fraud or abuse, or support a business transaction. We do not sell Google user data.

Data retention

ColtCC retains information only as reasonably necessary to operate the service, meet business requirements, preserve required operational records, resolve disputes, enforce agreements, and comply with applicable legal obligations.

Your choices and revoking Google access

An authorized administrator may disconnect the dedicated work-order Gmail account through ColtCC’s Admin Settings. A Google account holder may also review or revoke ColtCC’s access from the Google Account security page under third-party connections. Revoking access will prevent ColtCC from using that Google authorization and may stop related email features from working.

Manage your Google third-party connections

Changes to this policy

We may update this Privacy Policy as the application, our practices, or legal requirements change. The “Last Updated” date at the top of this page identifies the current version.

Contact us

Questions about this Privacy Policy or ColtCC’s privacy practices may be directed to Chain of Love Transport, Inc. through the company’s established business contact channels.