Privacy Policy
This Privacy Policy explains how Nerivo by Digital Permit Book LLC (“Nerivo”, “we”, “us”) collects, uses, shares and protects information when you use nerivo.io, app.nerivo.io and the related services (together, the “Service”). It does not cover information collected by third parties, including sites we link to. By using the Service you agree to this policy; if you do not agree, do not use it.
1. Two kinds of data
Account data is information about you and your company: your name, work email, company name, role, and what you tell us on our forms. We are the controller of this data.
Fleet data is the operational data of your fleet that the Service reads from the systems you connect or the files you upload: ELD trips, stops, positions and duty logs; fuel card transactions; toll transactions; loads, rate confirmations and invoices from your TMS; shop invoices; driver pay. Fleet data can include personal information about your drivers and employees (names, licence numbers, locations, hours). You decide which systems to connect and are responsible for having the right to share that data with us, including any notices or consents your employees are owed. We process fleet data on your behalf and on your instructions, under our agreement with you, to provide the Service.
2. What we collect, and how
- From you directly: when you request a fleet check, create or accept a login, invite teammates, change settings, or contact us.
- From the systems you connect: with read-only access you grant us, the Service pulls fleet data from your ELD, fuel card, toll, TMS and shop providers (for example Motive, Geotab, Samsara, Relay, EFS, Comdata, Bestpass). The credentials you give us for this are stored encrypted and are never shown again.
- From files you upload: exports you place in the Service’s import screens.
- Automatically: when you use the Service we record standard technical data: IP address, browser, device type, pages visited, and the actions you take in the app, so the Service works and so we can fix problems. The website uses a small number of cookies needed for sign-in and security, and may use privacy-respecting analytics to count visits. We do not run advertising trackers.
3. How we use information
- To provide the Service: match records to the right vehicle, driver and load, run the checks, produce findings and reports, answer questions you ask Neri, and send the emails you set up (invites, password resets, scheduled reports).
- To run and improve the Service: keep it secure, find and fix errors, understand which features are used.
- To communicate with you about your account, the fleet check you requested, and changes to the Service.
- To meet legal obligations and enforce our terms.
AI features. Neri, the assistant inside the Service, is built on a large language model provided by Anthropic. When you ask Neri a question, the question and the data needed to answer it (aggregates and records from your own company only) are sent to that provider to produce the answer. Under our agreement with the provider, that data is not used to train their models. Neri reads your data through a read-only database role limited to your company.
We do not sell personal information, and we do not use fleet data to build profiles of your drivers for anyone else.
4. Who we share information with
- Service providers that host and run the Service on our behalf, under contracts that limit what they can do with the data: cloud hosting and database (Railway, Vercel), email delivery (Resend), the AI model provider (Anthropic), and error and usage monitoring. All are based in the United States or process data there.
- The systems you connect: we send them only what is needed to read your data (your credentials and queries). We do not write to them.
- Your own team: people you invite to your company in the Service see your company’s data according to the role you give them.
- Professional advisers (lawyers, accountants) and legal recipients when required by law, a court order, or to protect our rights, your safety or the safety of others.
- A buyer or successor if Nerivo or Digital Permit Book LLC is involved in a merger, acquisition or sale of assets; you will be notified of any change in who holds your data.
Aggregated or de-identified information that cannot reasonably identify you, your company or your drivers may be used and shared without restriction, for example to benchmark cost per mile across fleets.
5. Retention
We keep account data while you have an account and for a reasonable period afterwards. We keep fleet data for as long as your company uses the Service, because the checks compare periods over time. When your company closes its account, or asks us to, we delete its fleet data and the credentials for its connected systems within 30 days, except for copies in routine backups (deleted on their own schedule, at most 90 days) and records we must keep to meet legal obligations or resolve disputes. Fleet check requests from the website that do not become accounts are deleted within 12 months.
6. Security
We use industry-standard measures to protect information: encryption in transit (TLS) and at rest, encrypted storage of the credentials for your connected systems, database-level isolation between companies, access controls and logging. Our Securitypage describes them. No method of transmission or storage is completely secure, and you are responsible for keeping your password confidential and for who you invite to your company.
7. Your choices and rights
- You can review and change your account details in the Service, and an owner or admin can remove teammates, disconnect systems and delete the company’s account.
- You can ask us to access, correct, delete or export the personal information we hold about you, and to stop certain processing, by emailing legal@nerivo.io. We will verify the request and answer within the time the applicable law allows. We will not treat you differently for exercising these rights.
- Residents of states with privacy laws (including California, Colorado, Connecticut, Texas, Virginia and others) may have specific rights under those laws; this section is how to exercise them. Residents of the EU or UK may have rights under the GDPR, including the right to complain to a supervisory authority.
- Requests about a driver’s or employee’s data in your fleet data should go to the company that employs them; we will help that company respond.
- You can opt out of marketing email with the link in any such message. Account and service messages (invites, password resets, reports you scheduled) are not marketing.
8. Children
The Service is for businesses and is not directed at anyone under 18. We do not knowingly collect information from children. If you believe we have, contact us and we will delete it.
9. Where data is processed
The Service is operated from, and intended for use in, the United States. If you use it from elsewhere, your information will be transferred to and processed in the United States.
10. Changes
We may update this policy. For material changes we will email the address on your account or post a notice in the Service before the change takes effect. The date at the top shows the current version.
11. Contact
Nerivo by Digital Permit Book LLC
3 Grant Sq #198, Hinsdale, IL 60521
legal@nerivo.io