Privacy Policy
Plantain (“we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and otherwise process Personal Information in connection with our websites, hosted platform, mobile or web applications, and related services (collectively, the “Services”).
For purposes of this Privacy Policy, “Personal Information” means information that identifies, relates to, describes, or can reasonably be linked to an identified or identifiable person, and includes “personal data” where applicable law uses that term.
1. Our Role
Depending on the context, Plantain may act in different roles when processing Personal Information:
- Plantain as controller / business. We act on our own behalf with respect to Personal Information we collect for our own business purposes, such as information about website visitors, account administrators, billing contacts, support contacts, and people who contact us directly.
- Plantain as processor / service provider. We also process Personal Information on behalf of our customers when they use the Services to manage business operations, such as driver records, dispatcher records, truck and trailer records, inspections, tickets, safety events, incidents, documents, applications, verification forms, assignments, reminders, and related operational or compliance data (“Customer Data”). In those cases, the relevant customer controls the purposes for which that information is processed.
If your Personal Information was submitted to Plantain by one of our customers, that customer’s privacy practices will also apply. If you want to exercise rights regarding Customer Data, you should contact the relevant customer first.
2. Personal Information We Collect
We may collect the following categories of Personal Information, depending on how you interact with Plantain and how our customers use the Services.
A. Information you provide directly
We may collect information you provide to us, including:
- name, business email address, phone number, title, employer, and account credentials;
- company or organization details, subscription details, billing contact information, and transaction-related records;
- communications you send to us, including support requests, feedback, survey responses, and other correspondence;
- information you submit through forms or workflows made available through the Services, including job applications, employment history, verification requests, uploaded documents, notes, and related records; and
- any other information you choose to provide when using the Services.
B. Customer Data and operational records
Our customers may use the Services to upload, store, organize, and manage operational records. Depending on how the Services are configured, this may include:
- driver, dispatcher, staff, applicant, and contact records;
- truck, trailer, fleet, maintenance, status, and assignment records;
- inspections, tickets, safety events, incidents, certifications, expirations, reminders, and related notes;
- business documents associated with drivers, equipment, or incidents;
- vacation, availability, dispatch, load, board, and operational planning records; and
- expense, revenue, and other incident- or operations-related business records.
Some of this information may be sensitive in nature, such as license information, compliance documentation, medical certificate records, employment history, or SAP-related program information that a customer chooses to upload. We process that information only as needed to provide the Services, in accordance with customer instructions, our contracts, and applicable law.
C. Information collected automatically
When you access or use the Services, we may automatically collect certain information, including:
- log data, IP address, browser type, operating system, device identifiers, and approximate location derived from IP address;
- usage data, such as pages viewed, features used, referring URLs, timestamps, crash reports, and other interaction information; and
- cookie, pixel, local storage, and similar technology data as described in the “Cookies and Similar Technologies” section below.
D. Information from third parties
We may receive information from third parties, such as:
- identity or single sign-on providers;
- payment processors;
- analytics providers;
- communication, document, telematics, mapping, or other integrations that you or our customers choose to connect to the Services; and
- publicly available sources or business partners, where permitted by law.
3. How We Use Personal Information
We may use Personal Information for the following purposes:
- to provide, host, operate, maintain, and improve the Services;
- to create and manage accounts, authenticate users, and administer customer organizations;
- to process transactions, manage subscriptions, send receipts, and maintain billing records;
- to support operational workflows within the Services, including recordkeeping, reminders, notifications, document management, assignments, and reporting;
- to respond to inquiries, provide customer support, and communicate with you about your account or the Services;
- to monitor performance, troubleshoot issues, conduct analytics, and develop new features;
- to protect the Services, detect and prevent fraud, abuse, security incidents, and unauthorized access;
- to comply with applicable law, regulations, legal process, and contractual obligations;
- to enforce our agreements, protect our rights, and resolve disputes; and
- to create aggregated or de-identified information that does not reasonably identify an individual, which we may use for lawful business purposes.
We may also send service-related and administrative communications, such as notices about account activity, policy changes, security alerts, or reminders that you or your organization enable through the Services. Where permitted by law, we may send promotional communications, and you may opt out of those communications at any time.
4. How We Disclose Personal Information
We may disclose Personal Information in the following circumstances:
- Service providers and subprocessors. We may share Personal Information with vendors that provide hosting, infrastructure, payment processing, analytics, communications, customer support, security, storage, or similar services on our behalf.
- Within a customer organization. Where our customers use the Services, Personal Information may be made available to the customer’s authorized users, administrators, managers, dispatchers, or other personnel according to that customer’s configuration and instructions.
- Integrations and customer-directed disclosures. If you or our customer enables a third-party integration or directs us to disclose information, we may share information as necessary to facilitate that request.
- Legal, safety, and rights protection. We may disclose Personal Information if we believe doing so is necessary to comply with law, respond to lawful requests, protect the rights or safety of Plantain, our customers, users, or others, investigate violations, or prevent fraud or security issues.
- Corporate transactions. We may disclose Personal Information in connection with an actual or proposed merger, acquisition, financing, asset sale, reorganization, bankruptcy, or similar transaction.
- Consent. We may disclose Personal Information with your consent or at your direction.
- Aggregated or de-identified information. We may disclose information that has been aggregated or de-identified so that it cannot reasonably be used to identify an individual.
Plantain does not sell Personal Information for monetary consideration.
5. Cookies and Similar Technologies
We and our service providers may use cookies, pixels, local storage, SDKs, and similar technologies to:
- keep users signed in and maintain session security;
- remember preferences and settings;
- understand usage patterns and improve the Services;
- measure the effectiveness of communications or website content; and
- support other legitimate operational, analytics, or reporting purposes.
You can usually control cookies through your browser settings. If we make non-essential cookies available in your region, we may also provide cookie controls or consent tools where required by law. Blocking certain cookies may affect the functionality of the Services.
6. Data Retention
We retain Personal Information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:
- provide the Services and maintain customer accounts;
- comply with legal, tax, accounting, or reporting obligations;
- resolve disputes and enforce our agreements;
- maintain appropriate business and security records; and
- carry out deletion, backup, archival, and disaster recovery processes.
Retention periods may vary based on the type of information, the context in which it was collected, the sensitivity of the information, the nature of our relationship with the relevant customer or individual, and applicable legal requirements. When Personal Information is no longer required, we will delete, anonymize, or securely dispose of it in accordance with applicable law and our retention practices.
7. International Data Transfers
Plantain may store and process Personal Information in the United States and in other countries where we or our service providers operate. Those countries may have data protection laws that differ from the laws of your jurisdiction.
Where required by applicable law, we will use appropriate safeguards for international transfers of Personal Information, such as contractual safeguards or other approved transfer mechanisms.
8. Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, loss, misuse, alteration, and disclosure. However, no method of transmission over the internet and no method of storage is completely secure. Accordingly, we cannot guarantee absolute security.
9. Your Rights and Choices
Depending on where you live and the nature of your relationship with Plantain, you may have certain rights regarding your Personal Information, subject to applicable law and certain exceptions. These may include the right to:
- know whether we process your Personal Information and request access to it;
- request correction of inaccurate Personal Information;
- request deletion of Personal Information;
- request a copy of certain Personal Information in a portable format;
- object to or request restriction of certain processing;
- withdraw consent where we rely on consent;
- opt out of promotional communications; and
- appeal a denial of your request where applicable law provides that right.
If we process your Personal Information on behalf of one of our customers, we may refer your request to that customer or ask you to contact them directly, because they control the relevant Customer Data.
To submit a privacy request, please contact us at info@myplantain.com or through any privacy request method we make available in the Services. We may need to verify your identity before completing your request. We will not discriminate against you for exercising privacy rights provided by applicable law.
10. Children’s Privacy
The Services are designed for business use and are not directed to children. We do not knowingly collect Personal Information directly from children through the Services. If you believe a child has provided Personal Information to us in a manner that violates applicable law, please contact us so that we can review and address the issue.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will post the revised version and update the “Last updated” date above. If required by law, we will provide additional notice or obtain consent for material changes.
12. Contact Us
Plantain
Email: info@myplantain.com