Privacy Policy

Who we are

This Privacy Policy describes how Third Order Business Solutions d/b/a DSP Pilot (“Company,” “we,” “us”), as developer and owner of a business management platform and related services known as DSP Pilot – which we license to independent Delivery Service Partners (“Clients”) of Amazon Logistics, Inc. (“Amazon”) for use in our Clients’ business operations – collects, stores, and uses information regarding our Clients’ businesses and employees.

Information we collect on Clients’ behalf

• Mobile phone numbers, addresses, employment, and other personal identifying information of Delivery Associates, dispatchers, and other employees of Clients.
• Email addresses used by Clients for certain third-party logins and operational notifications.
• SMS messages sent to or received from a toll-free or local phone number to Clients’ employees providing necessary operational communications including dispatch, coaching, and safety messages.
• Aggregated delivery, performance, safety, timecard, and related data of Clients maintained by multiple third-party sources including Amazon, ADP, Paycom, Netradyne, and other third parties.

How we use it

We use and process the information described above (“User Data”) solely to assist Clients in the operations and management of their businesses by collecting, importing, analyzing, and reporting User Data within our management platform. All User Data is encrypted, segregated, and stored securely with each Client having access only to their own data. The Company will not sell, disclose, transfer, or otherwise provide User Data to third parties, except for limited disclosures to our service partners (identified below) as necessary to provide the management platform and related services to Clients. Access to User Data by Company personnel is strictly limited to what is required to fulfill our obligations to Clients under their license agreements with us.

Privacy & Security

The Company employs commercially reasonable administrative, technical, and physical safeguards designed to protect User Data against unauthorized access, disclosure, alteration, or destruction.

SMS consent is never shared

We do not share, sell, or rent phone numbers or SMS content to third parties. SMS opt-in consent is not shared with affiliates or marketing partners for any purpose. All mobile information is kept confidential within the Company and is used only for the internal communications described in our SMS / Text Messaging Terms.

Service providers

We rely on a small number of vetted service providers to run this platform:

• Telnyx — SMS delivery and toll-free verification.
• SendGrid — transactional email delivery.
• Supabase — user authentication and data storage.
• Railway — application hosting.
• Vercel — frontend hosting.

These providers receive only the data necessary to perform their function(s) and are bound by their own data-protection agreements.

Google user data (Gmail integration)

DSP Pilot offers an optional integration that connects to a Client’s dedicated Gmail inbox (typically <shortcode>fwdpilot@gmail.com) to ingest operational notifications from Netradyne (safety alerts) and Amazon Logistics (Flex scheduling). When a Client connects this inbox, we receive an OAuth refresh token from Google scoped to gmail.readonly.

What we access: message metadata, sender and recipient addresses, subject lines, and message bodies from the connected inbox. We do not send, modify, or delete email. We do not read messages from any Google account other than the dedicated inbox the Client connects.

How we use it: solely to parse and surface operational events (safety violations, scheduling changes, route counts) into the Client’s DSP Pilot dashboard.

Storage: refresh tokens are stored encrypted at rest in our Supabase database. Parsed event data is retained as described under “Data retention.” Raw message contents are not stored beyond the parse step.

Sharing: we do not share Google user data with any third party, do not use it for advertising, and do not allow humans to read it except (a) with the Client’s explicit consent, (b) for security investigations, or (c) to comply with applicable law.

Limited Use disclosure: DSP Pilot’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting: Clients may revoke access at any time from their DSP Pilot Configuration tab or from Google Account permissions. Upon disconnect we delete the stored refresh token immediately.

Data retention

We retain phone numbers and messaging records for as long as a Delivery Associate or other Client employees are employed and for a reasonable period thereafter for HR, payroll, and compliance purposes. We also continue to store Client Data for as long as Clients remain active subscribers to our platform and services, and for a commercially reasonable period of time thereafter to ensure continued access to such data by Clients. SMS messaging content is retained only for the minimum time necessary for operational review.

Your rights

Employees of Clients may:

• Opt-out of SMS at any time by replying STOP.
• Request a copy or deletion of their personal information by mailing info@dsppilot.com.

Contact

Questions about this Privacy Policy? Email info@dsppilot.com.