Privacy policy

What we collect

To file a UCR registration we collect what the UCR National Registration System needs and what we need to reach you: your USDOT number, the company's legal name and principal place of business (retrieved from the public FMCSA register), the entity type, the number of power units, the base state, your name, email address and optional phone number, and any notes you add. Payment card details are collected by our payment processor, Dodo Payments, on its own hosted pages; they never reach our servers.

How we use it

• To verify your record against the FMCSA register and prepare the registration.
• To submit the registration to the UCR Plan on your behalf.
• To email you order confirmations, questions from our filing team, the official receipt, and — only if you opted in — one reminder when the next registration window opens.
• To answer your messages and keep records of what we filed.

We do not sell or rent personal information, and we do not send marketing email.

Who receives it

• The Unified Carrier Registration Plan and your base state, through the official portal — that is the point of the service.
• Dodo Payments, our merchant of record, for payment, invoicing, tax and fraud prevention.
• Resend, which delivers our transactional email.
• Vercel, which hosts the site, stores uploaded receipts in private storage, and provides privacy-respecting analytics (no cookies, no cross-site tracking).
• Neon, which hosts our database.

Each of these processes data under its own terms and only as needed to provide its service to us.

Retention

Order records and receipts are kept for at least three years after filing, matching the record-keeping period states can audit, and may be kept longer for accounting. You can ask us to delete an order's contact details once the retention period has passed.

Cookies

The public site sets no tracking cookies. The admin area uses a single session cookie for staff sign-in.

Security

Transport is encrypted (HTTPS, HSTS). Order status links are private capability URLs; receipts are stored in private storage and streamed only to the holder of that link. Secrets are held in server-side environment configuration and never shipped to the browser.

Your rights

You can ask what we hold about you, ask for corrections, or ask for deletion (subject to the retention above) by writing to support@ucrassist.com. California residents have the rights described in the CCPA; we do not sell personal information.

Changes

If this policy changes materially we update the date at the top and, for customers with open orders, email a notice.