Privacy Policy

This Privacy Policy describes how CarrieX Labs LLC (“CarrieX Labs,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with the Asamblor service, our website at www.asamblor.com, and the CarrieX trucking data platform (collectively, the “Services”).

If you have questions, contact us at privacy@asamblor.com or at the address at the end of this policy.

01 Information we collect

Information you provide

• Account & client information — business name, role, work email, phone, billing details, and Ideal Customer Profile (ICP) parameters you share during onboarding.
• Communications — messages you send us through forms, email, calendar bookings, or our team channels.

Information collected automatically

• Usage & device data — IP address, browser/OS, pages viewed, referrer URL, timestamps, and basic analytics about how you interact with the site and any client portals.
• Cookies and similar technologies — strictly necessary cookies for session and security, and limited analytics cookies (see Section 7).

Information collected from third parties and public sources

• Carrier / driver business contact data sourced through the CarrieX platform from public regulatory filings, state authority records, and other publicly available business directories. This data is used to operate B2B outbound recruiting campaigns on behalf of our clients.
• Service-provider data — payment status from our payment processor, deliverability metrics from our email infrastructure, calendar events from our booking provider.

02 How we use information

We use information to:

• Provide, operate, and improve the Services and our clients' recruitment pipelines.
• Mine, dedupe, and verify trucking carrier and owner-operator records through CarrieX.
• Send B2B outbound communications (email, SMS, web forms, telephony) on behalf of clients, subject to the recipient's rights and applicable law.
• Manage billing, accounts, fraud prevention, security, and infrastructure (SPF/DKIM/DMARC, 10DLC registration, etc.).
• Communicate with you about the Services, including service updates, security alerts, and administrative messages.
• Comply with legal obligations, enforce our Terms, and protect our rights and the rights of others.

03 Roles under data protection law

For data we process to run our own business (e.g., your account information), CarrieX Labs is the controller / business.

For data we process on behalf of clients to operate their recruiting pipelines (e.g., leads they qualify, vetting-form submissions, lead status in their CRM), the client is the controller / business and CarrieX Labs acts as the processor / service provider. Our processing is governed by the client's service agreement and applicable Data Processing Addendum.

Under the California Consumer Privacy Act (CCPA/CPRA), we do not “sell” or “share” personal information as those terms are defined, and we do not process personal information for cross-context behavioral advertising.

04 How we share information

We share information only as needed to operate the Services and only with:

• Our clients, who receive the qualified leads, vetting-form data, and CRM records generated by their pipelines.
• Subprocessors bound by written confidentiality and security obligations — including hosting (Vercel), email infrastructure (deliverability / warmup providers), telephony / SMS (10DLC carriers), CRM platforms, payment processors, analytics, and scheduling (Cal.com).
• Professional advisors (legal, tax, accounting, insurance) under confidentiality.
• Authorities when required by law, subpoena, court order, or to protect our rights, our clients, or the public.
• Successors in a merger, acquisition, financing, reorganization, or sale of assets, subject to standard confidentiality.

05 Your rights

Depending on where you live, you may have rights to:

• Know what personal information we hold about you and how we process it.
• Request access to, correction of, or deletion of your personal information.
• Opt out of certain uses (e.g., direct marketing).
• Withdraw consent where consent is the legal basis.
• Receive a copy of your information in a portable format.
• Not be discriminated against for exercising these rights.

To exercise a right, email privacy@asamblor.com from the address associated with the request. We may need to verify your identity. If we process information on behalf of a client, we will route requests to that client when appropriate. We respond within the timelines required by applicable law (typically 45 days under CCPA, with one 45-day extension if necessary).

Authorized agents. California residents may use an authorized agent; the agent must provide proof of authorization and we may contact you to verify the request.

06 Communications & opt-outs

If you are a recipient of outbound email or SMS sent through Asamblor on behalf of a client:

• Every email includes a clearly marked unsubscribe link and the sender's physical mailing address, per the CAN-SPAM Act.
• SMS replies of STOP, UNSUBSCRIBE, END, QUIT, or CANCEL are processed immediately and the recipient's number is suppressed across all client pipelines on the platform.
• You may also email privacy@asamblor.com with the address or phone number you want suppressed.

07 Cookies and analytics

We use strictly necessary cookies for site security and session management, and may use limited first-party analytics to understand site usage in aggregate. You can control cookies through your browser settings. We do not use third-party advertising cookies or cross-site tracking pixels.

08 Data retention

We retain information only as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Carrier business contact data is refreshed and pruned on a continuous basis. Client account records are retained for the duration of the engagement and for a commercially reasonable period thereafter for tax, audit, and dispute purposes.

09 Security

We use administrative, technical, and physical safeguards designed to protect information, including TLS in transit, encryption at rest where supported by infrastructure providers, role-based access controls, and least-privilege access to sending and CRM infrastructure. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10 International data transfers

The Services are operated from the United States. If you access them from outside the United States, you understand that information will be processed in the United States, which may have different data-protection laws than your country.

11 Children's privacy

The Services are a B2B product for trucking businesses and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

12 Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Effective date” above and, for material changes, provide additional notice (such as a site banner or email). Your continued use of the Services after the effective date constitutes acceptance of the updated policy.

13 Contact us

Privacy inquiries: privacy@asamblor.com

CarrieX Labs LLC
1012 Marquez Place, Ste. 106-B
Santa Fe, NM 87505
United States