OTRKeychain Privacy Policy

Operated by SEMPERX INC ("we," "us," "our"). Effective date: July 15, 2026. Last updated: July 15, 2026.

OTRKeychain is a bookkeeping and document-organizing tool for truck drivers and small carriers. It helps you record loads, revenue, expenses, fuel, and settlements, and store and organize business documents such as rate confirmations, receipts, and compliance paperwork. OTRKeychain is a hosted web application. It is also delivered as an Android app that displays the same web application inside an in-app browser (WebView); information you enter or upload in the Android app is processed the same way as on the web.

This policy explains what information OTRKeychain collects, why, how it is used, who processes it, and the choices you have.

Information we collect

Account information

• Your email address, which is used as your login and to contact you about your account.
• Your password, which is stored only in a hashed (scrambled, non-reversible) form. We cannot read your password.
• An optional device PIN or biometric (fingerprint/face) that you can enable for quick unlock. Biometric data never leaves your device; it is handled by your device's operating system, not by us.

Business and profile information you enter

• Company/carrier profile details you choose to enter, such as carrier or company name, MC number, DOT number, and truck/unit numbers.
• Operational and financial records you create in the app, such as loads, mileage, pay/revenue, expenses, fuel purchases, credits, per-diem, settlements, and the profit/loss figures calculated from them.

Documents and photos you upload

• Files and photos you upload or capture with your camera, including rate confirmations, receipts, fuel receipts, scale tickets, maintenance receipts, and "Truck Book" compliance documents (for example: registration, inspection, insurance, IFTA, permits, and driver's license/CDL, plus any other documents you choose to add, which may include items such as a DOT medical card).
• These documents may contain sensitive personal and business information. You should only upload documents you are authorized to store.
• On Android, camera and photo/media access is used solely so you can capture or select a document to upload. We do not access your photo library for any other purpose.

Automatic document reading (AI)

To save you from typing, when you upload a document or photo for scanning, its contents may be sent to a third-party AI provider (currently Anthropic) that reads the document and returns the extracted fields so the app can pre-fill your entry. The AI provider processes the document to perform this task on our behalf. You review and confirm the extracted information before it is saved. If you would rather not use AI reading, you can enter the information manually instead.

Technical and security information

• A signed session cookie so you stay logged in.
• Limited local storage on your device for preferences (such as your view choice) and to remember your username for quick PIN sign-in.
• Your IP address and basic request information, used to operate and secure the service — for example, to limit repeated failed login attempts and to troubleshoot problems.
• Server logs used to run and debug the service.

Payment and subscription information

Paid plans are currently sold on our website, where payment is processed by our payment provider, Stripe. Stripe collects and processes your payment details directly; we do not receive or store your full card number.

If in the future we offer in-app subscriptions through the Apple App Store or Google Play, those purchases would be handled by Apple or Google under their own terms and privacy policies, and we would receive confirmation of your subscription status rather than your card details. App-store in-app purchasing is not active in the current version of the app.

In all cases, we keep basic subscription status — for example, your plan and whether your subscription is active — so we can provide the service you paid for.

How we use information

• To provide the app's core features: recording your business data and storing and organizing your documents.
• To read uploaded documents with AI so fields can be auto-filled (subject to your review).
• To manage your account, authenticate you, and keep you signed in.
• To secure the service and prevent abuse (for example, login rate-limiting).
• To process payments and manage subscriptions.
• To provide customer support and respond to your requests.

We do not use third-party advertising networks, and we do not use third-party analytics or ad-tracking software in the app.

Service providers who process data for us

We use trusted service providers to run OTRKeychain. They process data only to provide their service to us, under their own security and privacy obligations. This is not a sale of your data. Our main providers are:

• Render — application hosting and database hosting.
• Cloudflare R2 — storage of the files and photos you upload.
• Anthropic — AI reading of uploaded documents to extract fields.
• Stripe — payment and subscription processing.
• Email provider — support email hosting and communications.

These providers may change over time. If we make a material change to how your data is processed, we will update this policy.

How your information is protected

• Information is transmitted over encrypted connections (HTTPS/TLS).
• Passwords are stored using industry-standard hashing (PBKDF2); we cannot read them.
• Your data and uploaded files are stored on managed infrastructure (Render and Cloudflare) that provides encryption of stored data at the infrastructure level.
• Access controls are in place so that one account cannot read another account's data or documents.
• The optional desktop version of OTRKeychain stores its data in an encrypted vault (AES-256-GCM) on your own computer.

We do not claim end-to-end encryption of your hosted business data, and we do not claim HIPAA compliance. No method of transmission or storage is completely secure, but we work to protect your information using reasonable measures.

Aggregated and de-identified industry insights

We may use aggregated, de-identified, and/or anonymized operational data to create general informational products and industry insights, such as trucking benchmarks, lane and rate trends, fuel-cost trends, market forecasting, route-profitability insights, and other general industry analytics.

To be clear, in connection with any such data product:

• We do not sell your personal documents.
• We do not sell user identities.
• We do not sell account credentials.
• We do not sell broker, shipper, receiver, or direct-customer identifying information.
• We do not sell CDL, medical card, registration, insurance, or other Truck Book documents.
• We do not sell individual user records.

Any data product is intended to be aggregated and/or de-identified so that it does not reasonably identify a specific user, driver, carrier, broker, shipper, receiver, or individual load. If we ever decide to use or share information in a way that could reasonably identify you or your business at an individual level, we will update this policy first and, where appropriate, give you a choice before doing so.

Data retention and deletion

• We keep your account information, business records, and uploaded documents while your account is active.
• You can request deletion of your account and associated data by emailing us (see Contact below) or by following the steps on our Account Deletion Request page. We will delete or de-identify your data within a reasonable time, except where we are required to keep certain records (for example, limited billing or transaction records) to meet legal, tax, or accounting obligations.
• Backups may persist for a limited period before being overwritten.

Your choices

• You control what you enter and upload; you can edit or delete individual records and documents in the app.
• You can decline AI document reading and enter information manually.
• You can request access to, correction of, or deletion of your data by contacting us.
• You can cancel your subscription at any time.

Your responsibilities

OTRKeychain lets you store business documents that may contain personal and sensitive information about you and others. Please only upload documents that you are authorized to store, and do not upload another person's personal information that you have no right to keep.

Children

OTRKeychain is a business tool intended for use by adults (18+). It is not directed to children, and we do not knowingly collect information from children.

Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date above and, where appropriate, provide additional notice. Continued use of OTRKeychain after an update means you accept the revised policy.

Contact us

If you have questions about this policy or your data, or you want to request access or deletion, contact:

SEMPERX INC
Email: help@otrkeychain.com

To request account and data deletion, see our Account Deletion Request page.