Box Truck Opportunities is a free contractor research directory with business calculators and planning tools. This notice explains how the current site handles information.
Optional directory measurement
If you allow optional analytics, we record directory category, equipment, state and authority selections, plus company cards at least half visible for one second in an active tab. We reuse the existing tab-session identifier and record company name, directory position, sort and timestamp. Typed searches, precise location and form/calculator contents are not included. Individual option selections share the existing tab identifier. These measurements help compare exposure with company-link clicks; they do not confirm applications or hires.
Information you provide
The directory and tools are public; no visitor account is required. Contact and feedback forms collect your message, topic, optional email, and company or link details where applicable.
Registration and email signup are currently unavailable. We still retain earlier registration records: names, email addresses, equipment, authority status, registration dates, consent preferences and access tokens. Some older records also contain city, state or an optional DOT/MC number.
Ask Puls public beta
No sign-in is required. Puls stores your messages, answers and usage records and sends conversation context to OpenAI to generate responses. An essential browser cookie separates chat history and supports daily message limits. A random conversation pointer in tab-session storage lets you reopen the same chat across public pages. It does not contain your messages, and the pointer alone cannot retrieve a conversation. Page contents and calculator entries are not automatically sent to Puls. A daily keyed hash of your network address supports abuse controls; the raw address is not saved in Puls usage records. Shared connections may share limits. BTO can review stored exchanges for quality and support. Do not submit secrets or sensitive documents. Public limits reset at midnight America/Chicago.
Optional rate-con scanning
We record scanner opens, file-selection steps, read-button clicks and confirmed-number applications using a random identifier held only in the current page memory. These activity records contain event names and times, not filenames, uploaded pages, extracted values or terms. They support owner-only usage reports. Operational scan records separately support recent cost estimates and budget controls. A separate cost history retains only random request IDs, dates/times, processing status and estimated API cost or reservation, without browser/network IDs or document information; pending reservations are not confirmed charges.
In Check a Load, you may choose photos, screenshots or a PDF and explicitly authorize processing before scanning. PDF pages and photos are resized on your device; up to three prepared page images are sent through BTO to OpenAI to extract load details. BTO handles those images in request memory and does not save documents, filenames, extracted text or page images in its database, object storage, routine application logs, owner reports or analytics. No provider Files API or stored response history is used. Scan details remain in the current page until you leave or refresh. Only pay and loaded mileage you confirm are applied to the calculator; those numbers then follow the existing browser-saved load-draft behavior.
OpenAI API content is not used for training by default. We request store:false, but this does not mean zero retention: OpenAI may retain inputs and outputs for abuse monitoring, generally for up to 30 days, subject to its policies and exceptions, including image-safety review. Review OpenAI’s API data controls (opens in a new tab). Upload only documents you are authorized to share and remove unnecessary personal, financial or confidential information before scanning. BTO does not automatically contribute uploads or extracted rates to Pulse research or share them with listed companies or sponsors.
A separate essential HttpOnly browser cookie supports the three-successful-scans-per-browser daily allowance. The scanner retains only a random request ID, Chicago date, random browser ID, daily keyed network hash, request time, processing status and AI cost/reservation. Raw network addresses are not saved in scan records. Records older than seven days are removed during subsequent successful scans; this is not a promise of deletion exactly seven days after submission. Failed scans do not consume the successful-scan allowance, but attempts, cooldowns, shared-network limits and a separate $3 daily AI budget protect the service. Uncertain provider requests retain a budget reservation. No sign-in is required, and manual calculator entry remains available.
How we use it
Earlier registration records are retained for operator review and audience reporting. Marketing emails are currently paused. Feedback is reviewed by the site operator; an email you provide with feedback may be used to respond to that request and does not subscribe you to marketing. We do not submit applications to listed companies for you.
Device storage and analytics
Older visitors may still have an unused registration token in browser local storage. No visitor token is required for public access. Session storage holds a random visit identifier, referral source and first-entry campaign labels for that tab. We accept only predefined source, medium, campaign and creative labels from tagged links. These labels stay with first-party page, tool-interaction and company-link events in the same tab session. Untagged and historical traffic is not assumed to be paid or organic. We do not collect advertising click IDs, raw query strings or full referrer URLs for this attribution, and it adds no cookies or persistent browser identifiers. Our analytics record page visits, company application-link clicks, sponsor-link clicks, and whether a visitor changes a field in a business tool. These records include the page path, source and time. Tool interactions are counted once per page visit and do not establish a completed calculation or successful search. The analytics records do not include your registration email, name, or calculator entries. Separate calculator measurement records whether Check a Load or Final Mile was opened, genuinely edited, and showed a valid result in the foreground for at least two seconds. An estimated loss can qualify. These records contain only the tool, stage, measurement version, random short-lived tab-visit and event identifiers, coarse mobile/desktop/unknown category, and server receipt time. Calculation inputs, outputs and hashes, referral sources and page/query URLs are not included. The calculator visit identifier is stored in session storage, expires after 30 minutes of inactivity, and is not used to identify people or returning browsers. Earlier page and field-interaction records are not treated as completed calculations. Hosting providers may process technical request information, such as IP addresses, for operation and security. First-party analytics and web-app measurement endpoints use separate short-lived, hourly-changing hashed network identifiers to throttle excessive submissions. Raw IP addresses are not stored in those protection records or added to event records. Networks may share limits; if a network address is unavailable, requests share a fallback allowance. Counters expire within the hour and are removed during subsequent analytics submissions. These controls do not change optional analytics consent or limit access to the directory and tools. Feedback forms use hashed network identifiers to limit repeated submissions and hashed submission content to suppress duplicates for 24 hours. These protection records expire after their limit window and are removed during subsequent submissions; raw IP addresses are not stored in these records.
Web-app adoption measurement
If you allow optional analytics, we also record installation-interest clicks, browser-reported installations, and first-detected and return home-screen app use in our owner dashboard and Google Analytics. Random browser-local identifiers help distinguish app instances and visits; these are not accounts or an exact count of people. App opens are measured at most once per 30-minute window. We derive the operating-system category from browser information without storing the full user-agent string. iPhone installations cannot be counted directly; first-detected app use can include apps installed before tracking began. Clearing local storage can cause a new first-use count. Declining analytics stops this additional measurement.
Optional Google Analytics
Google Analytics 4 loads only if you choose “Allow analytics.” It uses cookies and processes usage and device information to help us understand public pages and tools. We exclude the owner dashboard, sign-in, authentication and contact pages. We do not send contact messages, names, email addresses, calculator entries, URL query strings or fragments to Google. Advertising storage, advertising personalization and Google signals are disabled in our tag configuration. Google processes information under its Privacy Policy.
Use the “Analytics choices” button on this Privacy Policy page to allow or decline Google Analytics at any time. Declining stops the tag and removes its accessible analytics cookies from this browser; it does not erase data already processed by Google. Your choice is stored in this browser. Our existing first-party analytics described above continue independently of this optional choice.
Calculators, location lookups and drafts
Manual calculator inputs are processed in your browser. Optional rate-con scanning uses server and AI processing as explained above. Partial Planner location searches and route coordinates are sent through our server to a location provider for address and mileage lookup. Hashed network identifiers support lookup rate limits. Browser-saved drafts stay in that browser and are not saved to an account. Clearing browser storage does not delete previously submitted information from our records.
Business prospect searches and outreach drafts
Find Direct Customers sends your city or ZIP, radius and industry selection to Geoapify to retrieve business records. Search results and requested public contact details may be cached on our server for up to 24 hours. Geoapify uses OpenStreetMap data. Hashed network identifiers limit requests, and usage counters support a shared daily search allowance. Your name, business name, services and outreach drafts are processed in your browser, not sent to Geoapify or an AI provider. Business details are saved on this device only when you choose to save them, and can be cleared in the tool. BTO does not send outreach messages or guarantee that a business needs delivery services.
BTO Pulse
Pulse displays aggregate market references and selected public weather alerts. Selecting a map region changes the display in your browser. Weather requests use the selected coverage area, not your precise device location. BTO retrieves alerts from the National Weather Service through its server; this feature does not request device-location access or require a visitor account.
Providers, links and sponsors
Site hosting and storage providers process information to operate this service. We do not sell registration or feedback information or automatically give it to listed companies or sponsors. Following an application or sponsor link takes you to another provider with its own privacy practices. LogRock is a paid sponsor. The site operator may also earn a commission if a referral results in a bound insurance policy.
Your choices and requests
Use the contact form to ask about your information, request a correction or deletion, or withdraw email consent. Select “Privacy request,” describe what you want reviewed, and include the email associated with any earlier registration or submission so we can locate it. Do not send passwords, identity documents or payment information. We may need to verify a request before acting. Marketing emails are paused; any future marketing email program will provide unsubscribe instructions.
Retention and security
Earlier registration records, feedback and analytics are stored for review and reporting; the current site has no automatic deletion schedule. You can request deletion through the contact form. Reasonable access controls protect stored records, but no online service can guarantee complete security.
Changes and contact
This policy will be updated when practices change. Questions and privacy requests can be sent through Contact.