LoadIt AI Inc — Privacy Policy

    Effective Date: October 15, 2026 (Revision 3 — Google User Data)

    1. WHO WE ARE

    LoadIt AI Inc, a Delaware corporation ("LoadIt AI," "we," "us"), provides a cloud software platform for moving, hauling, storage, and field-service businesses, marketed under the OptimizeIt brand (the "Platform"). This Privacy Policy explains how we handle personal information collected through the Platform and our marketing sites.

    Roles. For data our business customers (the "Customer") submit about their own end customers, leads, or employees, LoadIt acts as a processor / service provider and the Customer is the controller / business. For data we collect directly (account holders, prospects on our marketing site), LoadIt is the controller.

    2. INFORMATION WE COLLECT

    Account & billing: name, business name, email, phone, address, login credentials, payment method tokens (handled by Stripe — we do not store full card numbers).

    Platform usage: Customer Data uploaded or generated in the Platform (jobs, estimates, customer records, photos, documents, messages, call recordings, transcripts).

    Device & analytics: IP address, browser, device, pages viewed, feature usage, error logs.

    Communications: emails, SMS/MMS, voice calls, and chat messages sent through the Platform, including recordings and AI transcripts where features are enabled.

    Location: with consent, approximate or precise location for routing, geofencing, and dispatch features.

    3. HOW WE USE INFORMATION

    • Provide, secure, and operate the Platform and AI features;
    • Process billing and metered usage (AI tokens, telephony);
    • Respond to support requests;
    • Send service announcements and (with consent) marketing;
    • Detect fraud, abuse, and policy violations;
    • Create de-identified, aggregated statistics to improve the Platform;
    • Comply with law.

    We do not sell personal information and we do not use Customer Data to train foundation AI models for third-party benefit.

    4. SUBPROCESSORS

    We use the following categories of subprocessors to operate the Platform. Specific vendors may change; we will provide reasonable notice of material changes.

    • Cloud hosting & database — primary application hosting, storage, and backups.
    • AI inference — large-language-model and vision providers for estimates, photo analysis, transcription, and chat (covered by no-training-on-customer-data agreements where available).
    • Telephony, SMS & voice — voice-call origination/termination, SMS/MMS delivery, and voice synthesis.
    • Transactional email — estimate, BOL, receipt, and notification email delivery.
    • Payments — card processing, ACH, and payouts via Stripe (Customer payment instruments are tokenized).
    • Maps & geocoding — address autocomplete, distance, and route optimization.
    • Analytics & error monitoring — product analytics and crash reporting (limited to non-sensitive operational data).

    Customers entering into a Data Processing Addendum may request the current named subprocessor list at legal@optimizeit.ai.

    5. SHARING & DISCLOSURE

    We share personal information only with: (a) subprocessors above, under written contracts; (b) the Customer that controls the account (for End-Customer data); (c) authorities when required by law, lawful process, or to protect rights and safety; and (d) parties to a merger, acquisition, financing, or asset sale, with continuity protections.

    6. SECURITY

    We use TLS in transit, encryption at rest for primary storage, role-based access control, least-privilege internal access, audit logging, and routine backups. No system is perfectly secure; we cannot guarantee absolute security.

    7. RETENTION & DELETION

    We retain account and Customer Data while the account is active. On termination, Customer may export data in CSV/JSON within thirty (30) days, after which we perform a hard delete from active systems, except where retention is required by law (e.g., tax, accounting, regulatory holds) and except for routine encrypted backups, which are overwritten on the normal backup cycle. Aggregated/de-identified statistics may be retained indefinitely.

    8. YOUR PRIVACY RIGHTS

    California (CCPA / CPRA). California residents may request to know, access, correct, delete, limit use of sensitive personal information, and opt out of sharing/sale. We do not "sell" personal information as commonly understood; certain analytics may be "sharing" under CPRA, which you can opt out of by emailing privacy@optimizeit.ai. We do not discriminate for exercising rights.

    EU/UK (GDPR / UK GDPR). Where applicable, individuals have rights of access, rectification, erasure, restriction, portability, and objection. A Data Processing Addendum with Standard Contractual Clauses is available on request.

    Other U.S. states. Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws have similar rights and may exercise them via privacy@optimizeit.ai.

    Verification. We may verify identity before fulfilling rights requests. Authorized agents may submit requests with valid authorization.

    9. CALL & MESSAGE RECORDING; AI VOICE AGENT

    Where the Customer enables voice or AI-agent calling, the Platform records and transcribes calls. In states requiring all-party consent (including CA, CT, FL, IL, MD, MA, MT, NV, NH, PA, WA), the Platform plays a recording disclosure before the call is recorded. Customer is responsible for keeping that disclosure enabled.

    AI voice agent. When a call is handled by the Platform's AI voice agent, the default greeting discloses that (a) the caller is speaking with an artificial-intelligence assistant, (b) the call may be recorded and transcribed, (c) the caller may ask for a human or end the call at any time, and (d) the AI agent is not an emergency service. AI-generated voices are treated as an "artificial or prerecorded voice" under FCC rules (47 U.S.C. §227(b); FCC Decl. Ruling FCC 24-17, Feb. 8, 2024) and outbound AI calls require prior express written consent obtained by the Customer.

    No voiceprint enrollment. We do not create, store, or use biometric voiceprints, faceprints, or other biometric identifiers to identify or authenticate individuals under BIPA (740 ILCS 14), Texas CUBI, the Washington biometric statute, or comparable laws. Audio and transcripts are stored as Customer Data for service operation, recordkeeping, and dispute resolution only, and are purged on the schedule set in the Customer's account (default 12 months).

    9A. COMMUNICATIONS CONSENT (END-CUSTOMER INTAKE FORMS)

    By submitting a request through any intake form, AI quote flow, or embedded widget powered by the Platform, you authorize the operating business (the Customer you are requesting service from) and its software vendor (LoadIt AI Inc) to contact you by phone call, SMS/MMS text message, and email — including via automated dialing systems and AI-generated voice or messaging — at the number and address you provided, for the purpose of quoting, scheduling, and fulfilling your request. Message and data rates may apply; message frequency varies. Reply STOP at any time to opt out of SMS or HELP for help. Consent is not a condition of purchase. Calls may be recorded and transcribed for quality, training, dispute-resolution, and AI-improvement purposes, subject to the state-law disclosures in Section 9 above.

    The plain-English disclosure displayed directly above the submit button on every intake form is the clickwrap mechanism by which this consent is granted, and is designed to satisfy the FCC's "prior express written consent" safe harbor under 47 C.F.R. §64.1200 and 47 U.S.C. §227, the CAN-SPAM Act, and applicable state telemarketing and bot-disclosure laws (including California Bus. & Prof. Code §17941, Colorado C.R.S. §6-1-1701 et seq., and Utah Code §13-2-12).

    9B. AI PROCESSING & AUTOMATED DECISION-MAKING

    We use artificial intelligence and machine-learning models to analyze information you submit — including photos, videos, voice recordings, and free-text descriptions — to estimate the scope, weight, volume, materials, hazards, and pricing of the work you are requesting, and to draft messages, quotes, and documents for the operating Customer's review. AI outputs are preliminary and non-binding. A quote, document, or message becomes binding only after the operating Customer reviews it and confirms in writing (or, for household-goods moves, after a written estimate and order for service are issued in compliance with FMCSA 49 C.F.R. Part 375).

    Your rights. You may request human-only handling of your request, request meaningful information about the logic involved in an AI-generated quote, or object to automated processing, by emailing privacy@optimizeit.ai or by asking the operating Customer directly. Where applicable, EU/UK GDPR Art. 22, CPRA automated decision-making regulations, the Colorado AI Act, and comparable state laws govern these rights. We do not use Customer or End-Customer personal data to train third-party foundation AI models for the benefit of unrelated third parties.

    9C. GOOGLE USER DATA

    If you choose to connect a Google account to the Platform, we access the following Google user data, only with your permission and only for the purposes described here:

    • Basic profile (email address and name) — to show which Google account is connected and to label it in the Platform.
    • Gmail — reading messages (when you connect a Gmail or Google Workspace mailbox) — to display your recent and new inbox and sent messages, including attachment details, inside the Platform's inbox, and to link those messages to the matching customer records in your account.
    • Gmail — sending messages — to send emails you write or trigger in the Platform (for example replies, estimates, invoices, and reminders) from your own mailbox, so they come from your address.
    • Google Calendar — events (when you connect Google Calendar) — to create, update, and remove calendar events for jobs and appointments scheduled in the Platform. If you turn on two-way sync, we also read changes you make to those events so the Platform stays in step.

    How we use it. We use Google user data only to provide and improve these user-facing features you have turned on. We do not sell Google user data, use it for advertising, or use it to develop, improve, or train generalized artificial-intelligence or machine-learning models. We do not allow humans to read your Google user data unless you give us permission for specific messages, it is necessary for security purposes (such as investigating abuse), or it is required to comply with law.

    Sharing. We do not transfer Google user data to third parties except to the service providers listed in Section 4 as needed to operate these features, for security purposes, to comply with law, or as part of a merger or acquisition with notice to you.

    Storage & protection. Google user data and the access tokens Google issues to us are stored in our access-controlled database, which is encrypted at rest, and are transmitted only over encrypted connections.

    Disconnecting & deletion. You can disconnect a Google account at any time from the Platform's settings, after which we stop accessing it. You can also revoke access directly in your Google Account at myaccount.google.com/permissions. To have synced Google data deleted from the Platform, email privacy@optimizeit.ai; we will delete it within thirty (30) days, except where retention is required by law.

    Limited Use. OptimizeIt's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

    10. CHILDREN

    The Platform is intended for business users 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information, contact privacy@optimizeit.ai and we will delete it.

    11. THIRD-PARTY LINKS

    The Platform may link to third-party sites whose privacy practices we do not control. Review their policies.

    12. INTERNATIONAL TRANSFERS

    The Platform is operated from the United States. Information you provide is processed in the U.S. and other countries where our subprocessors operate. Where SCCs apply, they are part of the executed DPA.

    13. CHANGES

    We may update this Policy from time to time. Material changes will be communicated by email or in-product notice with the new effective date. Continued use is acceptance.

    14. CONTACT

    LoadIt AI Inc, a Delaware corporation.
    Privacy: privacy@optimizeit.ai · Legal: legal@optimizeit.ai · Support: support@optimizeit.ai