This Privacy Policy explains how Oway Inc. (“Oway,” “we,” “us”) collects, uses, shares and protects personal information when you use shipoway.com, the Oway applications, Oway OS, IOI, Juno, our APIs, phone lines and messaging (the “Services”). It also explains your choices and rights, including under the EU and UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended by the CPRA (CCPA).
Controller
Oway Inc. · USDOT 3961202 · MC 1477326
2261 Market Street, STE 86015, San Francisco, CA 94114
Privacy requests: Your Privacy Choices or help@oway.io
We do not sell your personal information or share it for cross-context behavioral advertising.
1. Information we collect
| Category | Examples | Source |
|---|---|---|
| Identifiers and contact details | Name, business email, phone number, company, job title | You |
| Account and verification | Login credentials, USDOT and MC numbers, insurance certificates, W-9, identity and fraud checks | You, FMCSA and verification providers |
| Commercial and payment | Quotes, bookings, invoices, settlement and bank details for payouts | You, payment processors |
| Shipment and operational data | Origins, destinations, freight details, documents, data from systems you connect to IOI | You, your connected systems |
| Location | Vehicle location during an active load, from ELDs or the driver app when enabled | Carriers, ELD providers |
| Communications | Emails, messages, call recordings, transcripts, call metadata and consent records | You, our phone and messaging providers |
| Device and usage | IP address, browser, pages viewed, approximate location from IP, cookie identifiers (only with consent for analytics) | Your device |
| Job applicants | Resume, answers to application questions, LinkedIn profile | You |
We do not collect sensitive personal information to infer characteristics about you. We do not create voiceprints or other biometric identifiers.
2. Calls and voice
Calls with Oway, including calls with Juno, may be recorded and transcribed. We disclose this at the start of each call. Recordings and transcripts are used to operate loads, resolve disputes, train staff, prevent fraud and improve Juno. You can opt out of your call content being used to improve Juno by emailing help@oway.io.
3. How we use information, and our legal bases
| Purpose | Legal basis under GDPR |
|---|---|
| Provide the Services: quoting, booking, dispatch, tracking, documents and payments | Performance of a contract |
| Verify carriers and prevent fraud, theft and double brokering | Legitimate interests; legal obligation |
| Communicate about loads, accounts and support | Performance of a contract; legitimate interests |
| Improve the Services, including Juno and our pricing models | Legitimate interests |
| Website analytics | Consent |
| Marketing emails and messages | Consent, or legitimate interests where allowed |
| Recruiting | Steps at your request before a contract; legitimate interests |
| Comply with law, tax and transportation regulations, and defend legal claims | Legal obligation; legitimate interests |
4. Cookies and similar technologies
We use a small number of cookies and similar technologies, grouped by purpose:
- Strictly necessary. Required for the site to work and to remember your privacy choices, for example the
oway_consentcookie (12 months). These are always on. - Analytics. Help us understand how the site is used. These run only after you opt in.
- Marketing. Used to measure campaigns. These run only after you opt in, and never when your browser sends a Global Privacy Control signal.
Until you choose, only strictly necessary cookies are used, and Google tags run in consent mode with storage denied. You can change your choices at any time from Cookie Settings in the footer of every page. Choices expire after 12 months, and we ask again.
5. How we share information
- Freight counterparties. Shippers, carriers and drivers need certain details to complete a load, such as names, contact numbers, addresses and documents.
- Service providers. Hosting, communications, payment, verification, analytics and support providers that process information on our behalf under contract.
- Parties you direct. Partners, AI agents and systems you connect to through IOI or our APIs, within the permissions you grant.
- Legal and safety. Authorities, insurers and parties to a claim or dispute, when required by law or to protect rights, safety and property.
- Business transfers. An acquirer or successor in a merger, financing or sale of assets, subject to this Policy.
In the past 12 months we have not sold personal information or shared it for cross-context behavioral advertising, and we have no actual knowledge of selling or sharing the personal information of anyone under 16.
6. International transfers
We are based in the United States and process information there. When we transfer personal information from the EEA, UK or Switzerland, we rely on the European Commission’s Standard Contractual Clauses and the UK Addendum, or another lawful transfer mechanism.
7. Retention
- Call recordings, transcripts and call metadata: 12 months, unless needed longer for a claim or dispute.
- Consent records: 5 years after your account closes.
- Shipment, invoice and tax records: as long as required by transportation and tax law, generally 7 years.
- Account information: while your account is active and for a reasonable period after.
- Job applications: up to 2 years, unless you ask us to delete them sooner.
8. Security
We protect personal information with encryption in transit and at rest, access controls, logging, and vendor review. Website forms are protected by a web application firewall, rate limits and input validation, and submissions are stored in a private, encrypted bucket. Read more on our Security page. No system is perfectly secure, and we will notify you and regulators of a breach where the law requires.
9. Your rights
Everyone. You can ask to access, correct or delete your personal information, and opt out of marketing at any time.
EEA, UK and Switzerland (GDPR). You have the right to access, rectify, erase, restrict and object to processing, to data portability, and to withdraw consent at any time without affecting earlier processing. You may lodge a complaint with your local data protection authority.
California and other US states. Residents of California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, Virginia and other states with privacy laws may have the right to:
- know what personal information we collect, use and disclose, and get a copy;
- delete and correct personal information;
- opt out of the sale or sharing of personal information and of targeted advertising;
- limit the use of sensitive personal information;
- appeal our decision on a request;
- not be discriminated against for exercising these rights.
We honor the Global Privacy Control browser signal as a valid opt-out of sale and sharing.
10. How to exercise your rights
Use Your Privacy Choices or email help@oway.io. We will verify your request by matching information you provide with information we hold. You may use an authorized agent, who must show written permission. We respond within 45 days under US state laws and within one month under GDPR, and will tell you if we need more time. If we deny your request, you can appeal by replying to our decision, and we will answer within the period the law requires.
11. California notice at collection
The categories of personal information we collect, their sources and the purposes we use them for are listed in Sections 1 and 3. We disclose these categories to the recipients in Section 5 for business purposes. We do not sell or share any category. Retention periods are in Section 7.
12. AI and automated decisions
Juno and our pricing models produce quotes, match loads to capacity and suggest actions. They do not make decisions that produce legal or similarly significant effects on individuals. Carrier onboarding and fraud decisions are reviewed by a person on request.
13. Children
The Services are for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children.
14. Changes
We will post updates here with a new date, and notify account holders of material changes in advance.
15. Contact
Oway Inc., 2261 Market Street, STE 86015, San Francisco, CA 94114. Email help@oway.io.