Privacy Policy

This policy explains what MZift ("we") collects when you use HaulBloom, why, and what you can do about it. We keep it short and collect only what the service needs. We don't sell personal data and we don't run advertising trackers.

What we collect from you

• Account details: your name, email address, password (stored only as a one-way hash), time zone and two-step sign-in settings.
• Your workspace's work: statuses, notes, follow-ups, lists, customers, imports and call results your team adds.
• Security records: the browsers you're signed in on, sign-in times, and a log of important actions (like sign-ins, plan changes and exports). In that log, IP addresses are stored only as a keyed hash. Your active session also keeps your IP address and browser type until it ends.
• Billing: Lemon Squeezy, our merchant of record, collects your payment details. We receive and keep your plan, invoice amounts and dates, and your card's brand and last four digits, never the full card number.
• Email settings: your morning-email choices and a record of what we've sent you, so nothing is sent twice.

Carrier data

The carrier records in HaulBloom come from public FMCSA datasets about businesses registered to operate as motor carriers. Some include a business phone number, email or the name of a company officer. We show contact details only to signed-in customers, never on public pages. If you are a carrier and want your details left out of HaulBloom, email haulbloom@mzift.com with your USDOT number.

How we use it

• to run the service, sign you in, keep your account secure and send the emails you've asked for (morning list, weekly results, invitations, password resets, billing notices);
• to bill you and handle payment problems;
• to answer your messages and fix problems.

Who processes it for us

• Our hosting provider, where the app and database run.
• Our email provider, which delivers the emails we send you.
• Lemon Squeezy, which takes payments, handles tax and sends receipts, under its own privacy policy.

Each only gets what it needs to do that job. We may also share information if the law requires it, or to protect the service and its users from fraud or abuse.

Cookies

We use only essential cookies: one keeps you signed in, one protects forms against forgery, and one recognizes your browser so we can enforce your plan's device limit and spot sign-ins from new devices. Your light or dark theme choice is kept in your browser's local storage. There are no analytics or advertising cookies, so there's no cookie banner.

How long we keep it

• Account and workspace data: while your account is open. Email us to delete it.
• Export files: deleted 7 days after they're made.
• Invoices and billing records: as long as tax and accounting rules require.
• Security logs: as long as needed to protect accounts and investigate misuse.

Security

Connections use HTTPS. Passwords are hashed, two-step sign-in is available to everyone, and each workspace's data is kept separate from every other workspace's.

Your rights

You can see and change your account details in Settings. You can also ask us for a copy of your personal data, to correct it, or to delete it, by emailing haulbloom@mzift.com. Depending on where you live, you may have further rights under laws such as the California Consumer Privacy Act or the GDPR, and you may complain to your data protection authority.

Children

HaulBloom is a business tool and isn't meant for anyone under 18.

Changes

If we change this policy in a way that matters, we'll email account owners before it applies.

Contact

MZift, haulbloom@mzift.com.