Privacy Policy
This Privacy Policy explains how New Age Domain LLC (“New Age Domain,” “we,” “us”) collects, uses, shares, and protects personal information in connection with the NADX Suite (the “Service”), and the choices and rights you have.
1. Our role
- Account data (your login, name, email, and how you use the Service): we decide how this is used, so we are the controller.
- Client Data (information your company enters or uploads, such as employee rosters, routes, route-sheet images, claims, and photos): we process it on behalf of your company, which is the controller. If your information was entered by a company that uses NADX (for example, your employer), please contact that company first; we will help it respond.
2. Information we collect
| Category | Examples | Source |
|---|---|---|
| Account & identity | Username, first and last name, email, role, company membership, hashed password | Your company administrator or New Age Domain |
| Business contacts | Company name, owner name, business address, email, phone, EIN / DOT / MC numbers | Your company |
| Workforce data | Employee and driver names, work email and phone, team, role, market badges, route assignments, earnings calculations | Your company |
| Operational records | Route sheets and images, trucks, insurance policies, damage and liability claims, claim photos, adjuster contacts | Your company |
| Connected mailboxes (optional) | Mailbox address, encrypted access tokens, and for recent messages the subject, sender, date, and preview text | Google or Microsoft, only if your company connects a mailbox |
| Technical & security | IP address, browser user agent, sign-in times, session and security cookies, server logs, Terms acceptance records | Automatically when you use the Service |
We collect only what the Service needs. We do not ask for, and you should not upload, Social Security numbers, bank or card numbers, health information, precise location tracking, biometric data, or information about children.
3. How we use information
- To provide, operate, secure, and support the Service (signing you in, enforcing access to only your own company’s data, running the modules you use).
- To communicate with you about your account, security, billing, and changes to the Service or these policies.
- To maintain records of Terms acceptance, prevent fraud and abuse, and comply with legal obligations.
- To improve reliability and fix problems.
We do not sell personal information, share it for cross-context behavioral advertising, use it to train third-party AI models, or use advertising or tracking cookies.
4. Legal bases (EEA, UK and Switzerland)
Where the GDPR or UK GDPR applies, we rely on: contract (providing the Service you or your company signed up for); legitimate interests (keeping the Service secure, preventing abuse, and improving it, balanced against your rights); legal obligation (tax, accounting, and responding to lawful requests); and consent where we ask for it (for example, connecting a mailbox), which you can withdraw at any time.
5. Connected Google and Microsoft mailboxes
If your company chooses to connect a Gmail or Microsoft 365 / Outlook mailbox to the Claims module, NADX
requests read-only access (Google gmail.readonly; Microsoft Graph
Mail.Read) to identify incoming claim-related messages. We store access tokens encrypted, never
send email on your behalf, and never modify or delete your messages. You can disconnect the mailbox in NADX at
any time and revoke access in your Google or Microsoft account settings.
NADX’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, do not allow humans to read it except with your consent, for security purposes, or to comply with law, and do not use it to train generalized AI or machine-learning models.
6. How we share information
We share personal information only with:
- Service providers that host and operate the Service for us (cloud hosting, database, and backup infrastructure), bound by contracts to protect the data and use it only to provide services to us.
- Google or Microsoft, only when your company connects a mailbox, to complete the authorization you requested.
- Your company: administrators of your company can see data in your company’s workspace. Data is never shared with other client companies.
- Authorities or others when required by law, to protect rights and safety, or in connection with a merger, acquisition, or sale of assets (subject to this Policy).
Route-sheet text recognition (OCR) runs on our own servers; images are not sent to a third-party OCR service. Fonts and assets are served from our own servers.
7. International transfers
NADX is operated from the United States. If you access it from outside the US, your information will be transferred to and processed in the US. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum).
8. Retention
- Account and Client Data are kept while your company’s subscription is active.
- After termination, Client Data can be exported for 30 days and is then deleted within 90 days, except backups, which roll off within a further 35 days, and data we must keep by law.
- Terms acceptance records are kept for as long as needed to prove agreement and defend legal claims.
- Sessions expire after 30 minutes of inactivity or when you close the browser.
9. Security
We use HTTPS encryption in transit, salted and hashed passwords, encrypted storage of mailbox tokens, strict per-company access controls, automatic session timeouts, and limited internal access. No system is perfectly secure; if a breach affects your personal information we will notify you and authorities as required by law.
10. Your rights and choices
Depending on where you live (including the EEA/UK under the GDPR, California under the CCPA/CPRA, and other US states with privacy laws), you may have the right to:
- access and receive a copy of your personal information (portability);
- correct inaccurate information;
- delete your personal information;
- object to or restrict certain processing, and withdraw consent;
- opt out of sale or sharing (we do not sell or share personal information);
- not be discriminated against for exercising these rights; and
- lodge a complaint with your local data protection authority.
How to exercise them: email info@newagedomain.com with the subject “Privacy request.” Your company administrator can also correct your details or ask us to delete your account. We will verify your identity and respond within 30 days (45 days where US state law allows), and tell you if we need more time. You may use an authorized agent where the law allows.
11. Children
NADX is a business service for adults. It is not directed to children, and Authorized Users must be at least 18. We do not knowingly collect personal information from children under 16 (or under 13 in the US). If you believe a child’s information was submitted, contact us and we will delete it.
12. Changes
We will post changes to this Policy here, update the version and effective date, and where the changes are material, notify you in the Service or by email before they take effect.
13. Contact
New Age Domain LLC — Privacy
Doral, Florida, USA
info@newagedomain.com · +1 (305) 877-5945