Privacy Policy

MyGroundOps is a business-to-business platform. The primary users of our Service are contractors (ISP owners and their authorized staff) who manage operational data on behalf of their companies. We collect and process information to provide, maintain, and improve the Service. We do not sell personal information. We do not use Customer Data for advertising.

Account Information. When you register for MyGroundOps, we collect information about your company, including: company name, owner name, FedEx Driver IDs used to identify account holders, and email address if provided. We also collect a password (stored only as an irreversible cryptographic hash — we never store your plaintext password), your selected subscription plan, and a URL-safe identifier derived from your company name that becomes part of your login address. This information is used to create and manage your account.

Operational Data. As you use the Service, you and your authorized users input and generate operational data, which may include: driver records and profiles, route assignments, stop counts and delivery metrics, driver performance scores, vehicle information, pre/post-trip inspection data, and vehicle maintenance records. This data belongs to you and is used only to provide the Service.

Usage Data. We automatically collect certain technical information when you access the Service, including: server log files, IP addresses, browser type and version, device information, and data about how features are accessed and used. This information helps us diagnose technical issues, monitor security, and understand how the Service is used at an aggregate level.

Payment Information. Billing and payment processing is handled entirely by Stripe, Inc. We do not store credit card numbers, bank account numbers, or other sensitive payment instrument details on our servers. We receive and store non-sensitive payment metadata from Stripe (such as the last four digits of a card, billing address, and subscription status) for account management purposes. Your payment information is subject to Stripe’s Privacy Policy.

We use the information we collect to:

• Provide, operate, maintain, and improve the Service;
• Process your subscription and manage billing;
• Respond to your support requests and inquiries;
• Monitor and enforce compliance with our Terms of Service;
• Detect, investigate, and prevent security incidents or misuse;
• Generate aggregate, anonymized analytics about how the Service is used — this data does not identify individual users or companies;
• Comply with applicable legal obligations.

We will never sell your information. We will never use your Customer Data to target you with advertising or share it with data brokers.

Each contractor’s data is fully isolated from every other tenant on the platform. We enforce strict row-level data separation so that no account can access another account’s data. Your drivers, routes, vehicles, and operational records are visible only to your authorized users.

Our engineering and support staff may access data in the course of providing support or maintaining the platform, but only to the minimum extent necessary and subject to confidentiality obligations.

We do not sell your information. We share it only in the following limited circumstances:

• Stripe. We share billing information with Stripe to process payments and manage subscriptions.
• Hosting and Infrastructure Providers. We use Neon (database hosting) and Netlify (application hosting) to operate the Service. These providers process data on our behalf and are contractually required to protect it. We also use Stripe, Inc. for payment processing (described separately above).
• Legal Requirements. We may disclose information if required to do so by law, subpoena, court order, or other governmental request, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud.
• Business Transfers. If Nardoni Digital is involved in a merger, acquisition, or sale of all or substantially all of its assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on the Service before your information becomes subject to a different privacy policy.

Active Accounts. We retain your Customer Data for as long as your account remains active and as necessary to provide the Service.

Canceled Accounts. Upon cancellation or termination of your account, we retain your Customer Data for thirty (30) days to allow you to export it if needed. After this period, your data is deleted from our active systems.

Backup Copies. Backup copies of data may persist in encrypted backup storage for up to ninety (90) days following deletion from active systems, after which they are purged.

We may retain certain non-operational records (such as billing records and correspondence) for longer periods as required by law or for legitimate business purposes such as dispute resolution.

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit using TLS (Transport Layer Security);
• Encryption of sensitive data at rest;
• Access controls limiting data access to authorized personnel only;
• Regular automated backups to support data recovery.

However, no system is completely secure. We cannot guarantee the absolute security of your information, and we are not responsible for unauthorized access resulting from factors outside of our reasonable control. If you believe your account has been compromised, please contact us immediately at privacy@nardonidigital.com.

In the event we discover a confirmed breach of security that affects your Customer Data, we will notify you within thirty (30) days of that discovery by email to the address associated with your account, or by prominent notice within the Service if email notification is not feasible.

Subject to applicable law, you have the following rights with respect to your information:

• Access. You may request a copy of the information we hold about your account.
• Correction. You may request that we correct inaccurate or incomplete information.
• Export. You may request an export of your Customer Data in a machine-readable format. We will fulfill export requests within ten (10) business days of a verified request.
• Deletion. You may request deletion of your account and associated data. We will fulfill deletion requests subject to any legal obligations requiring us to retain certain records.

To exercise any of these rights, please contact us at privacy@nardonidigital.com. We will respond to verified requests within a reasonable timeframe.

Driver personal information — including names, FedEx Driver IDs, performance data, and other records — is entered into the Service by the contractor (ISP owner) who employs or engages those drivers. In this context, the contractor is the data controller with respect to driver personal data, and Nardoni Digital acts as a data processor, processing that data only on behalf of and under the instructions of the contractor.

Contractors are responsible for ensuring they have an appropriate legal basis for collecting and processing driver personal data, and for complying with any applicable employment, privacy, or data protection laws in their jurisdiction.

MyGroundOps uses session cookies to maintain your authenticated session. These cookies are strictly necessary for the Service to function. Session cookies expire after 7 days of inactivity or when you log out, whichever comes first.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies that follow you across websites. We do not participate in behavioral advertising networks.

The Service is not directed at individuals under the age of 18, and we do not knowingly collect personal information from anyone under 18. If we become aware that we have inadvertently collected personal information from a minor, we will take steps to delete that information promptly. If you believe a minor has provided us with personal information, please contact us at privacy@nardonidigital.com.

We may update this Privacy Policy from time to time. For material changes, we will provide at least fourteen (14) days’ advance notice by email to the address associated with your account or by prominent notice within the Service. The effective date at the top of this page will always reflect when the policy was last updated.

Your continued use of the Service after the effective date of a revised Privacy Policy constitutes your acceptance of the changes.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: