Privacy Policy

Who we are

This Privacy Policy explains how Xpress Route Permits, LLC ("we", "us", "our") collects, uses, and protects your personal information when you visit xpressroutepermits.com, order permits or products from us, or otherwise interact with us.

If you have questions about this policy, contact us at legal@xpressroutepermits.com or by mail at 17920 Taylor Ave, Bloomington, CA 92316.

Information we collect

We collect information in three ways: information you give us directly, information we collect automatically when you use our site, and information from third parties.

Information you give us directly. Because we file permits on your behalf, we collect more than a typical website. Depending on what you submit, this includes:

• Contact details — your name, company name, mailing address, phone number, and email address
• Permit order details — origin and destination addresses, permit start dates, load description and dimensions, load serial numbers, route maps, and routing notes
• Vehicle and equipment details — year, make, license plate number, plate state, VIN, axle counts, axle spacing, and axle weights for tractors, trailers, dollies, and tow units
• Carrier and regulatory identifiers — USDOT number, MC number, FEIN, and IFTA, IRP, KYU, and state-specific tax or registration account numbers
• Documents you upload — CA Motor Carrier License, vehicle registrations, compliance documents, route maps, and any other files you attach to an order
• Shop purchases — billing address, shipping address, and order history. Card details are entered directly with our payment processor (see "Who we share your information with") and are never stored on our systems
• Communications — anything you write in a contact form, email, text message, or phone call with us, and how you heard about us

Information we collect automatically includes your IP address, browser type, device type, the pages you visit, how long you stay, and the site you came from. We collect this through cookies and similar technologies — see our Cookie Policy for details.

Information from third parties may include analytics data from Google Analytics, advertising and conversion data from Google Ads, and information from Yelp, Google Business Profile, or social media if you interact with us there.

How we use your information

We use your information to:

• Prepare, file, and deliver the permits and services you order
• Share your load, vehicle, and route details with the state agencies, pilot car operators, and route survey providers needed to complete your order
• Process shop orders, ship products, and send order confirmations and tracking
• Prepare permit cost estimates and respond to your inquiries
• Send administrative messages such as order updates, receipts, and policy changes
• Improve our website and understand how visitors use it
• Send marketing communications, but only if you've opted in (and you can unsubscribe at any time)
• Comply with legal obligations, prevent fraud, and protect our rights

We do not sell your personal information.

Automated permit estimates

When you submit an order request, we may use automated software, including AI-assisted tools, to review your submission, prepare a preliminary permit cost estimate, and send you an initial reply. These estimates are preliminary. A member of our team reviews every order before any permit is filed and before you are charged, and final pricing is confirmed by a person. If you have questions about an automated estimate or would like a person to review it, email legal@xpressroutepermits.com or call us.

Who we share your information with

We share information only with parties that help us run our business or complete your order, and only as much as they need to do their job. This typically includes:

• State and federal agencies (such as Caltrans, other state DOTs, and permit-issuing offices) to file the permits you request. Xpress Route Permits is a private third-party permit service and is not affiliated with any government agency
• Pilot car, escort, and route survey providers we coordinate on your behalf
• Payment processors — Stripe, which powers checkout for shop purchases and payment links for permit services
• Email, SMS, and phone service providers to send you transactional messages
• Shipping carriers to deliver products you order from our shop
• Website hosting and form providers (Webflow) and workflow automation tools that store and route your submissions
• Analytics and advertising providers (Google Analytics, Google Ads, Google Tag Manager) to understand site usage and measure our ads
• Professional advisors (lawyers, accountants) when needed
• Law enforcement or government authorities if required by law

We require these parties to keep your information confidential and use it only for the purposes we specify.

Cookies and tracking

We use cookies and similar technologies to make the site work, remember your preferences, and understand how the site is used. For full details about which cookies we use and how you can control them, see our Cookie Policy.

Text messages and phone calls

If you give us your phone number, we may call or text you about your order. We do not send marketing text messages unless you opt in. Reply STOP to any text to opt out. Message and data rates may apply.

How long we keep your information

We keep your information only as long as we need it for the purpose we collected it, or as long as the law requires. Permit records, including the vehicle and carrier details you submit, are kept for as long as needed to support the permit and any renewal, audit, or dispute — typically 7 years. Transaction records are kept for the period required by tax and consumer protection law (typically 7 years in the US). Marketing data is kept until you unsubscribe.

Your rights

You have the right to:

• Access the information we have about you
• Correct information that's inaccurate
• Delete your information (subject to legal retention requirements — for example, we may need to keep records of filed permits)
• Opt out of marketing communications at any time
• Object to certain processing activities

To exercise any of these rights, email us at legal@xpressroutepermits.com. We'll respond within 30 days.

For California residents (CCPA / CPRA)

California gives residents specific rights:

• Know what personal information we collect, use, and disclose
• Delete personal information we hold about you
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information (we do not sell personal information)
• Limit use of sensitive personal information
• Non-discrimination for exercising your rights

To exercise these rights, email legal@xpressroutepermits.com. We'll verify your request and respond within 45 days.

For visitors in Canada (PIPEDA)

If you're in Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) gives you the right to access and correct your personal information and to withdraw consent. To exercise these rights or file a complaint, contact us at legal@xpressroutepermits.com, or contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

If you're in Quebec, additional rights apply under Law 25, including the right to data portability and the right to be informed about automated decision-making (see "Automated permit estimates" above).

For visitors in the European Union (GDPR)

If you're in the EU, the General Data Protection Regulation (GDPR) gives you additional rights:

• Lawful basis. We process your information based on (a) your consent, (b) the necessity of processing to provide a service you requested, (c) our legitimate interests, or (d) compliance with a legal obligation. We'll tell you which applies if you ask.
• Data portability. You can request a copy of your data in a machine-readable format.
• Right to lodge a complaint with your local supervisory authority. A list is available at edpb.europa.eu.
• International transfers. Your information is transferred to and processed in the United States. When we do this, we use safeguards required by GDPR (such as Standard Contractual Clauses).
• Automated decision-making. See "Automated permit estimates" above. You have the right to request human review of any automated estimate.

We respond to verified GDPR requests within 30 days.

Children's privacy

Our site is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us at legal@xpressroutepermits.com and we will delete it.

Security

We use industry-standard security practices to protect your information, including encryption in transit (HTTPS) and access controls on our systems. No method of transmission or storage is 100% secure, but we work to keep your data safe. If a breach affects you, we will notify you as required by law.

Changes to this policy

We may update this policy from time to time. When we do, we'll change the "Effective date" at the top and, if the changes are significant, notify you by email or with a prominent notice on the site.

Contact us

Questions, requests, or complaints? Email legal@xpressroutepermits.com or write to us at 17920 Taylor Ave, Bloomington, CA 92316.

This policy was last reviewed on September 5, 2026. For specific legal advice, consult a qualified attorney.