Legal

Privacy Policy

Last updated: June 28, 2026

AmberLight is operated by GloveBoxLabs LLC ("we," "us," or "our"). AmberLight is a two-sided marketplace that matches pilot car / escort vehicle operators with the carriers, drivers, and shippers who move oversize loads. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using AmberLight you agree to the practices described in this policy.

1. Information We Collect

Account information. When you register we collect your name, email address, phone number, and the role(s) you select (operator and/or carrier).

Profile information. Operators may provide a company name, contact name, service area, capabilities, home base, bio, and website. Carriers may provide a company name, USDOT and MC numbers, address, and contact details. This information helps the other side decide whether to work with you.

Credential documents. Operators may upload documents such as certificates of insurance, pilot/escort certifications, licenses, and vehicle photos. These are stored privately and are described in Section 3.

Marketplace activity. We store the loads you post, the positions you request, claims, ratings, and reviews you give or receive.

Usage, device, and communications data. We collect how you use the platform, your IP address, browser and device information, and any correspondence you send us through email or our contact form.

2. How We Use Your Information

• To operate the AmberLight marketplace and match operators with carriers
• To create and manage your account and profile
• To send transactional notifications — when an operator requests one of your loads, when a carrier confirms or declines a request, and for account and security events (see Sections 4 and 5)
• To process payments and escrow if and when those features are enabled
• To respond to your support requests
• To detect and prevent fraud, abuse, or security incidents
• To improve and develop new features based on usage patterns
• To comply with legal obligations

We do not sell your personal information, and we do not use your data for third-party advertising.

3. Credential Documents

Documents you upload to your vault are stored privately on encrypted object storage and are never made public. A carrier can view an operator's documents only after that operator has requested one of the carrier's loads, and every such view is watermarked with the viewer's identity and time, and logged. You can delete a document at any time.

4. SMS Messaging Program

AmberLight operates (or may operate) a transactional SMS messaging program to deliver operational alerts. This section describes how the program works and what data is collected.

Program operator. The SMS program is operated by GloveBoxLabs LLC. Messages are delivered via Twilio Inc., our SMS carrier-of-record. The number that appears on your device is owned and controlled by GloveBoxLabs LLC.

Types of messages you may receive. All messages are transactional and operational — there are no marketing or promotional messages on this program. Message types include:

• A new request on a load you posted (for carriers)
• Confirmation or decline of a request you made (for operators)
• Run status and schedule updates
• Account, password, and security notifications

How you opt in. Your phone number is enrolled in the SMS program only after an affirmative action:

• You enter your phone number into your AmberLight profile and enable "SMS notifications," or
• You reply START or YES to a confirmation message from the program number.

Consent is never assumed from the mere presence of a phone number in our system. A phone number on a profile is used for SMS only after one of the affirmative actions above.

Message frequency. Message frequency varies based on your activity on the marketplace — messages fire on operational events such as a request, confirmation, or decline. There is no fixed cadence.

Carrier charges.Message and data rates may apply. AmberLight does not charge for SMS messages, but your mobile carrier's standard message and data rates apply to every message you send or receive. Check with your carrier if you are unsure of your plan's rates.

How to opt out (STOP). You can stop receiving SMS messages at any time by replying STOP, CANCEL, END, QUIT, or UNSUBSCRIBEto any message. You will receive a single confirmation message and then no further SMS from the program number. You may also turn "SMS notifications" off in your AmberLight profile.

How to get help (HELP). Reply HELP to any message for support contact information. You can also email [email protected] at any time.

We do not share your phone number or SMS opt-in data with third parties. Phone numbers, SMS opt-in status, and the contents of SMS messages are not sold, rented, traded, or shared with any third party for marketing, promotional, or any other purpose. Phone numbers and consent data are passed only to Twilio Inc. for the sole purpose of delivering the message you are entitled to receive. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories of data exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Supported carriers.The program supports all major U.S. mobile carriers, including AT&T, T-Mobile, Verizon, US Cellular, and major MVNOs. Carriers are not liable for delayed or undelivered messages.

Program contact. Questions about the SMS program, including opt-in records or data-deletion requests specific to SMS, can be sent to [email protected], or by mail to GloveBoxLabs LLC, Arizona, USA.

5. Email Notifications

We send transactional emails for marketplace events — for example, when an operator requests one of your loads, when a carrier confirms or declines a request, and for account, password, and security events. These are operational, not marketing. You can manage your notification preferences in your account, and account-related emails are part of the service.

6. Data Sharing

We share your information only in these limited circumstances:

• Between marketplace participants. When you engage with the other side (post a load, request a position, or get confirmed), the relevant identity, contact, rating, and — for engaged operators — credential information is shared with that counterparty so the work can happen.
• Service providers. We use third-party vendors to operate the platform, including cloud hosting and document storage (DigitalOcean), email delivery (Resend), SMS delivery (Twilio), bot protection (Cloudflare Turnstile), and, when enabled, payment and escrow processing (Stripe). These providers access only the data necessary to perform their services and are bound by confidentiality obligations.
• Legal requirements. We may disclose information if required by law, court order, or to protect the rights, property, or safety of GloveBoxLabs LLC, our users, or the public.
• Business transfers. If GloveBoxLabs LLC is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before that occurs.

7. Data Retention

We retain your account and marketplace data for as long as your account is active. If you close your account, we retain your data for a limited period to allow for reactivation and to meet legal obligations, after which it is deleted. You may request deletion of your data at any time by emailing [email protected].

8. Security

We protect your data using industry-standard measures including encryption in transit (TLS), private storage of uploaded documents, row-level data isolation, and access controls. No method of transmission or storage is 100% secure. Use a strong password and notify us immediately of any suspected unauthorized access.

9. Cookies

AmberLight uses cookies and similar technologies to maintain your login session and remember your preferences. We do not use third-party advertising cookies.

10. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal information, and to opt out of non-essential communications. To exercise any of these rights, contact [email protected].

11. Children's Privacy

AmberLight is a business platform not directed at children under 13. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page and, for material changes, notify you. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.

13. Contact

Questions about this Privacy Policy or how we handle your data? Email [email protected] or use our contact form.