Privacy Policy

Pushpak — operated by Vishnova Labs LLC

Effective date: August 22, 2026
Last updated: August 22, 2026

This Privacy Policy explains how Vishnova Labs LLC ("Vishnova Labs," "we," "us," or "our") collects, uses, discloses, and safeguards information in connection with the Pushpak dispatch and billing platform, the website at pushpak.us, the driver application, and related services (collectively, the "Service").

Please read this Policy carefully. By creating an account, accessing, or using the Service, you acknowledge that you have read and understood this Policy. If you do not agree with it, do not use the Service.

Note on our role. Pushpak is a business-to-business (B2B) service used by hauling companies and their personnel. When a company ("Customer") uses the Service, the Customer generally acts as the controller of the personal information it enters or generates through the Service (for example, information about its dispatchers, drivers, and its own customers/operators), and Vishnova Labs acts as a processor / service provider that handles that information on the Customer's behalf and under our agreement with the Customer. For account registration and billing information, and for the operation of the Service itself, Vishnova Labs acts as a controller. Where a Customer's own privacy notice or data processing agreement applies to information about you, that notice governs your relationship with the Customer, and you should also review it.

1. Information We Collect

Information you provide to us:

  • Account and profile information — name, email address, password (stored in hashed form), company/organization name, role (administrator, dispatcher, or driver), and, where provided, phone number.
  • Customer and operational data — information you enter to operate your hauling business, including your customers/operators, pickup and delivery locations, rate cards, jobs and loads, product and volume details, driver assignments, wait and drive time, field tickets, and related notes.
  • Communications — information you provide when you contact us for support, request a demo, or otherwise correspond with us.
  • Payment information — if and when paid plans are offered, billing details are collected and processed by our third-party payment processor; we do not store full payment card numbers on our own systems.

Information collected automatically:

  • Usage and device data — IP address, browser type, device and operating system information, pages and features accessed, timestamps, and similar log data.
  • Location-related data — pickup and delivery location coordinates and addresses, and driving-distance and route information generated when the Service calculates mileage or provides map navigation. The Service does not perform continuous background GPS tracking of drivers; location handling is limited to the job locations you enter and the navigation you initiate.
  • Cookies and similar technologies — we and our providers use cookies and similar technologies to keep you signed in, remember preferences, secure the Service, and understand usage. You can control cookies through your browser settings, though disabling certain cookies may affect functionality.

Information from integrations and third parties:

  • When you connect a third-party service (such as QuickBooks Online or an OpenInvoice / OpenTicket submission channel), we receive and exchange the information needed to perform that integration, subject to your authorization and the third party's terms and privacy practices.

2. How We Use Information

We use information to:

  • provide, operate, maintain, and secure the Service;
  • create and manage accounts, authenticate users, and enforce role-based access;
  • calculate costs, mileage, driver hours, and generate field tickets and invoices;
  • send transactional and service messages (for example, password resets and job-assignment notifications);
  • sync data to connected services (such as QuickBooks and OpenInvoice) at your direction;
  • provide customer support and respond to your requests;
  • monitor, troubleshoot, improve, and develop the Service, including analyzing usage;
  • process payments and manage subscriptions (for paid plans);
  • detect, prevent, and address fraud, abuse, security, and technical issues; and
  • comply with legal obligations and enforce our agreements.

Where required by law, we rely on legal bases including performance of a contract, our legitimate interests in operating and improving the Service, your consent (where applicable), and compliance with legal obligations.

3. How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose information only as follows:

  • Service providers / subprocessors — we use trusted vendors to host and operate the Service and perform functions on our behalf. These currently include, among others:
    • Supabase — database, authentication, and storage of Service data;
    • Vercel — application hosting and delivery;
    • Cloudflare — DNS, content delivery, and security;
    • Resend (and its email-delivery infrastructure) — transactional email delivery;
    • Google Maps Platform — geocoding, distance calculation, and map/navigation features;
    • Intuit / QuickBooks Online — accounting and invoicing integration (only when you connect it);
    • OpenInvoice / Enverus (and any middleware you enable) — operator invoice submission (only when you enable it); and
    • a payment processor for subscription billing (for paid plans).

    These providers are authorized to use information only to perform services for us and are bound by appropriate confidentiality and data-protection obligations.

  • At your direction — when you connect an integration or invite users, we share information as needed to carry out that action.
  • Within your organization — data is shared among authorized users of your organization according to their roles (for example, drivers see only jobs assigned to them and cannot see other drivers' jobs or your billing).
  • Legal and safety — we may disclose information if required by law, subpoena, or legal process, or where we believe disclosure is necessary to protect the rights, property, or safety of Vishnova Labs, our users, or others, or to investigate fraud or security issues.
  • Business transfers — if we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

4. Third-Party Services

The Service integrates with and links to third-party services (including QuickBooks, OpenInvoice/Enverus, and Google Maps). Your use of those services is governed by their own terms and privacy policies, and we are not responsible for their practices. When you connect an integration, you authorize the exchange of data necessary to operate it, and you are responsible for your own accounts and credentials with those providers.

5. Data Retention

We retain information for as long as your account is active and as needed to provide the Service, and thereafter as necessary to comply with our legal obligations, resolve disputes, enforce our agreements, and maintain business records. Customer data may be retained for a limited period after account termination to allow for export or recovery, after which it is deleted or de-identified in the ordinary course, subject to backup retention cycles and legal requirements. Customers may request export or deletion of their organization's data as described below.

6. Security

We implement administrative, technical, and organizational measures designed to protect information, including encryption of data in transit, database-level tenant isolation (row-level security so each organization's data is separated), authentication controls, and role-based access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for the activities that occur under your account.

7. Your Choices and Rights

Depending on your location and role, you may have rights regarding your personal information, including the right to access, correct, update, or delete it, to obtain a copy, to object to or restrict certain processing, and to withdraw consent where processing is based on consent.

  • Account information — you can review and update certain account and profile information within the Service (for example, your name and password on the driver profile page).
  • Requests — to make a privacy request, contact us using the details in Section 12. Where you are a user within a Customer's organization, we may direct your request to that Customer (the controller) or act on their instructions.

United States — California and other states. If you are a California resident, the California Consumer Privacy Act as amended (CCPA/CPRA) gives you rights to know, access, correct, and delete personal information, to opt out of "sale" or "sharing" (we do not sell or share personal information as those terms are defined), and to non-discrimination for exercising your rights. Residents of other US states with comprehensive privacy laws may have similar rights. We will verify requests before responding and will respond within the time required by applicable law.

European Economic Area / United Kingdom. To the extent the GDPR or UK GDPR applies, you may have the rights described above and the right to lodge a complaint with a supervisory authority. Cross-border transfers, where they occur, are made using appropriate safeguards such as Standard Contractual Clauses.

We will not discriminate or retaliate against you for exercising any of these rights.

8. Children's Privacy

The Service is intended for business use by adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 18 years of age. Drivers and other users must be at least 18. If you believe a minor has provided us information, please contact us and we will take appropriate steps to delete it.

9. International Users

The Service is operated in the United States. If you access the Service from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States and other countries where we or our service providers operate, which may have different data-protection laws than your jurisdiction.

10. Do Not Track

Some browsers offer a "Do Not Track" signal. There is no consistent industry standard for responding to these signals, and the Service does not currently respond to them.

11. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide additional notice as appropriate (for example, by email or an in-Service notice). Your continued use of the Service after an update takes effect constitutes acceptance of the updated Policy.

12. Contact Us

If you have questions about this Policy or our privacy practices, or wish to exercise your rights, contact us at:

Vishnova Labs LLC
Attn: Privacy — Pushpak
Email: [privacy@pushpak.us]
Mailing address: 2309 Gilmer Rd, Ste 101, Mailbox 2094, Longview, TX 75604, United States

This document is a template provided for convenience and does not constitute legal advice. You should have it reviewed and customized by qualified legal counsel before relying on it.