Privacy Policy

This Privacy Policy explains how Foundation TMS, a brand of OTR Insights (“we,” “us” or “our”), collects, uses and shares information when you visit foundationtms.com (the “Site”) or send us a consult request. It covers this website only. If you become a customer, the software we build and host for you is covered by your separate customer agreement.

Information you give us

When you submit the consult form, we collect:

• Required: your full name, company name, work email and company type.
• Optional: phone number, location, fleet size or monthly load volume, number of system users, current TMS or software, budget range, timeline, the system (broker or carrier) and modules you're interested in, and any notes you add.

We also record the date and time of your request and whether our notification email about it was delivered.

Please don't include sensitive information (such as financial account numbers or health information) in the form.

Information collected automatically

Like most websites, the Site collects some information automatically when you visit:

• Usage analytics. Our website hosting platform (Lovable) records page views and basic visit information: the page and URL you visited, the referring page, your browser and device type (user agent), language, approximate country, and page-performance measurements. This is used to produce aggregate statistics such as visits, page views, traffic sources and visit length.
• Error reports. If a page fails to load correctly, technical details about the error and the page where it happened may be sent to our hosting platform so we can fix it.
• Server and security logs. Our hosting and network providers process your IP address and standard request information to deliver the Site, protect it from abuse and keep it secure.

We do not use Google Analytics, advertising pixels, session-recording tools, or cross-site advertising trackers.

Cookies

The Site uses a small number of cookies, all set by our hosting and security providers:

• A security cookie set by Cloudflare (__cf_bm) that helps distinguish people from bots. It expires within about 30 minutes.
• A short-lived analytics session cookie set by our hosting platform that groups page views into a single visit. It expires after 30 minutes of inactivity.
• A hosting cookie used to route your browser to the current version of the Site.

We do not use advertising or cross-site tracking cookies. You can block or delete cookies in your browser settings; the Site will still work, although some security checks may be repeated.

Content from third parties

Some pages load fonts from Google Fonts and small integration logos from Google's favicon service. To deliver these, your browser connects to Google's servers, which receive your IP address and standard browser information. Links to other websites (for example, competitor sources on our comparison pages) are only followed if you click them, and those sites have their own privacy policies.

How we use information

We use the information described above to:

• respond to your consult request, scope your install and prepare a proposal;
• communicate with you about your request and our services;
• operate, maintain, secure and improve the Site;
• understand, in aggregate, how the Site is used; and
• comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use it for targeted advertising.

How we share information

We share information only with service providers that help us run the Site and respond to you, and only for those purposes:

• Lovable — website hosting, analytics and our Lovable Cloud database (which runs on Supabase infrastructure), where consult requests are stored.
• Cloudflare — content delivery and security for the Site.
• Brevo — delivery of the email that notifies us of each new consult request. The email includes the details you submitted.
• Google — our business email is hosted by Google, so consult notifications are received in a Google-hosted inbox. Google also serves the fonts and logos described above.

We may also disclose information if required by law or legal process, to protect our rights, users or the public, or as part of a merger, acquisition or sale of all or part of our business. We do not sell personal information or share it for cross-context behavioral advertising.

How long we keep information

We keep consult requests for as long as reasonably needed to respond to you, manage any resulting business relationship and keep appropriate business records. We do not currently delete consult requests automatically, but you can ask us to delete yours at any time (see “Your privacy rights”). Analytics and log data are kept by our providers according to their own retention settings.

How we protect information

The Site is served over encrypted HTTPS connections. Consult requests are checked on our server before they are saved, and our database is configured so that website visitors can submit a request but cannot read stored requests. No method of transmission or storage is completely secure, but we work to protect the information we hold.

Your privacy rights

Depending on where you live (including California under the CCPA/CPRA and other U.S. states with privacy laws), you may have the right to:

• know what personal information we have collected about you and how we use and share it;
• get a copy of your personal information;
• correct inaccurate personal information;
• delete your personal information; and
• opt out of the sale of personal information or its sharing for targeted advertising (we do not sell or share it for those purposes).

To make a request, email us at steve@otrinsights.com with the subject “Privacy request.” We will verify your request using the information you provided in your consult request and respond within the time required by law. You may use an authorized agent to make a request on your behalf, and we will not discriminate against you for exercising your rights.

Children's privacy

The Site is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has sent us information, contact us and we will delete it.

Where information is processed

We are based in the United States, and our service providers may process information in the United States and other countries. By using the Site, you understand that your information may be processed outside the country where you live.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the “Last updated” date at the top of this page. Significant changes will be highlighted on the Site.

Contact us

Questions or requests about this policy: email steve@otrinsights.com.