What is Exact Move OS?

A comprehensive logistics and CRM platform for moving companies to manage leads, crews, and inventory with precision.

Legal

Privacy Policy

Last updated: July 6, 2026

Exact Move OS is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This policy explains what data we collect, how we use it, and the rights you have over your personal information.

Your rights at a glance

Access

See your data

Rectify

Correct your data

Erase

Delete your data

Portability

Export your data

Object

Opt out of marketing

1. Information We Collect

Personal data you provide directly: name, email, phone number, and billing address when you register, request a quote, or book a service.
Usage data: IP address, browser type, pages visited, and timestamps when you interact with our platform.
Operational data: job details, addresses, and logistics information necessary to fulfill service requests.
Payment data is processed by our PCI-DSS compliant payment processor (Square). We do not store full card numbers on our servers.

2. How We Use Your Data

To provide and manage moving, freight, and waste services you've requested.
To communicate with you about your bookings, estimates, and account.
To comply with legal obligations including DOT, FMCSA, and state transportation regulations.
To improve our services, troubleshoot issues, and develop new features.
We do not sell your personal data to third parties under any circumstances.

3. Data Encryption & Security

All data in transit is encrypted using TLS 1.2+ (HTTPS) between your browser and our servers.
Data at rest is encrypted using AES-256 encryption in our cloud infrastructure.
Access to production systems is restricted to authorized personnel with MFA-enabled accounts.
We conduct regular security audits and penetration testing.
Role-based access control (RBAC) ensures users only see data relevant to their role.

4. Your Rights Under GDPR & CCPA

Right to Access: You may request a copy of the personal data we hold about you.
Right to Rectification: You may correct inaccurate or incomplete data at any time via your profile settings or by contacting us.
Right to Erasure ('Right to be Forgotten'): You may request deletion of your personal data, subject to legal retention requirements (e.g., DOT records must be retained per federal regulations).
Right to Data Portability: You may receive your data in a structured, machine-readable format.
Right to Object: You may object to processing of your data for marketing purposes.
Right to Withdraw Consent: You may withdraw cookie consent at any time by clearing your browser storage.

5. Data Retention

Active account data is retained for the life of your account.
After account closure, personal data is deleted within 90 days, except where federal regulations (DOT, FMCSA) require longer retention.
Compliance records such as DOT numbers, CDLs, and permits are retained per federal requirements — typically 3 years.
Audit logs are retained for 7 years to support security investigations.

6. Third-Party Processors

Square (payment processing) — PCI-DSS Level 1 compliant.
Google Cloud / Microsoft (cloud infrastructure) — SOC 2 Type II certified.
Each processor is bound by data processing agreements that prohibit unauthorized use of your data.
A full list of subprocessors is available upon request.

Exercise Your Rights

To submit a Data Subject Request (DSR) — access, correction, deletion, or portability — contact our Data Protection Officer. We respond to all verified requests within 30 days as required by GDPR and CCPA.

dpo@exactmoveos.com Contact form