Introduction
Bastion Recovery Services (“we,” “our,” or “us”) operates bastionrecoveryservices.com and the Bastion Recovery mobile application (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
Information We Collect
We collect information that you provide directly to us, as well as information automatically collected through your use of the Service:
- Account Information: Name, email address, phone number, and password when you create an account
- GPS Location Data: Precise location data when you use the mobile app to track detention time at warehouse facilities
- Rate Confirmation Documents: Email content and attachments containing load details, detention rates, and free time information
- Bill of Lading Photos: Photos you upload as proof of delivery
- Payment Information: Credit card information processed through Stripe (we do not store full card numbers)
- Communication Data: Messages and correspondence with brokers regarding detention claims
How We Use Your Information
We use the collected information for the following purposes:
- Detention Claim Processing: Extract load details from Rate Confirmations, calculate detention time based on GPS data, and generate proof packets
- Geofence Monitoring: Track when you enter and exit warehouse geofences to automatically calculate detention hours
- Proof Packet Generation: Assemble GPS timestamps, BOL photos, and claim details into professional PDF documents
- Broker Communication: Send claim packets to brokers on your behalf and monitor responses for payment approvals or denials
- Commission Collection: Process 20% commission payments through Stripe upon successful claim collection
- Service Notifications: Send SMS alerts when free time expires and email notifications about claim status updates
- Service Improvement: Analyze usage patterns to improve claim success rates and user experience
Payment Information (Stripe)
We use Stripe, Inc. as our third-party payment processor. When you provide payment information:
- Your credit card number, expiration date, and CVC are transmitted directly to Stripe using their secure, PCI-DSS Level 1 certified infrastructure
- We never store, log, or have access to your full credit card number on our servers
- We retain only a tokenized reference to your payment method and the last four digits of your card for display purposes
- Stripe may collect additional information as described in their privacy policy
For more information about how Stripe handles your data, please visit Stripe's Privacy Policy.
SMS Communications & Consent (Twilio)
We use Twilio, Inc. to deliver SMS messages to your verified phone number. By providing your phone number and consenting to SMS communications during signup, you agree to the following:
- Message Types: Detention time alerts (free time expiration warnings), claim status updates, phone verification codes, and account security notifications
- Message Frequency: Message frequency varies based on your active loads and claims. Typically 1-5 messages per active load
- Opt-Out: Reply STOP to any SMS message to immediately unsubscribe from all non-essential SMS communications. Note: opting out may prevent you from receiving critical detention time alerts
- Opt-In: Reply START to resume receiving SMS messages after opting out
- Help: Reply HELP for assistance or contact us at claims@bastionrecoveryservices.com
- Carrier Rates: Message and data rates may apply depending on your mobile carrier and plan. We are not responsible for carrier charges
- Phone Number Privacy: Your phone number is not shared with third parties for marketing purposes. It is used solely for service-related communications via Twilio
For more information about how Twilio handles your data, please visit Twilio's Privacy Policy.
Information Sharing
We share your information only in the following circumstances:
- Broker Communications: We send proof packets containing your GPS timestamps, BOL photos, and claim details to freight brokers for the sole purpose of collecting detention pay on your behalf
- Payment Processing: Stripe processes credit card payments for commission charges (subject to Stripe's privacy policy)
- SMS Delivery: Twilio delivers SMS notifications about detention time expiration (subject to Twilio's privacy policy)
- AI Processing: Anthropic AI processes Rate Confirmation content to extract load details (data is not used for model training)
- Legal Compliance: We may disclose information if required by law, court order, or government request
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
Third-Party Payment Processing
Our payment processing is handled entirely by Stripe, Inc. When you add a payment method, your financial information is transmitted directly to Stripe's servers using TLS encryption. Stripe is certified as a PCI-DSS Level 1 Service Provider, the highest level of certification available. We receive only a tokenized reference from Stripe, which allows us to initiate charges without accessing your actual card details. Stripe may use your data in accordance with its own privacy policy, which we encourage you to review.
Data Retention
GPS Location Data: Retained for the duration of the claim process plus one year for dispute resolution purposes.
Account Information: Retained until you request account deletion. Pending claims will be processed to completion before deletion.
Financial Records: Retained for seven years as required by tax regulations.
Your Rights
You have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Update or correct inaccurate information in your account settings
- Deletion: Request deletion of your account and associated data (subject to legal retention requirements)
- Opt-Out: Unsubscribe from marketing emails (you will still receive transactional notifications about active claims)
- Location Services: Disable GPS tracking in app settings (this will prevent automatic detention tracking)
To exercise these rights, contact us at privacy@bastionrecoveryservices.com
Security
We implement industry-standard security measures to protect your information:
- Encryption in Transit: All data transmitted between your device and our servers uses TLS encryption
- Encryption at Rest: Sensitive data is encrypted in our Supabase database using AES-256 encryption
- Payment Security: Credit card data is tokenized and stored by Stripe (PCI-DSS Level 1 certified)
- Access Controls: Limited employee access to personal information on a need-to-know basis
While we strive to protect your information, no method of transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account password.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date. Your continued use of the Service after changes constitutes acceptance of the updated policy.