How your shipment and
contact details are handled.

Company and contact

ODPermit is operated by Frontline Express LLC.

Calculator inputs

Load details are sent to the calculation service when you calculate. Where routing is enabled, location and vehicle configuration are sent to the routing provider. The public calculator does not require a name, email address, or account. Results are not placed in a public URL or included in the sitemap.

Route maps use MapLibre and OpenFreeMap map data. When a map loads, your browser requests the visible geographic tiles from OpenFreeMap, which receives your IP address and the requested map areas. Your contact details, cargo documents and full calculation are not sent to the basemap provider. The Trimble route line is drawn in your browser.

Optional document extraction

If you choose to upload a document or extract a load message, its contents are processed by the configured extraction service, which may use a third-party AI provider. Avoid uploading unrelated personal or confidential information. Confirm extracted facts before calculating.

Requests for assistance

The request form collects your name, email, role, requested service, and optional notes. If you attach a calculation, it also includes the shipment, equipment assumptions, route, state results, and source references. ODPermit uses these details to handle your inquiry. A receipt confirms your request was saved; it does not place a permit order or book an escort.

Requests are stored in ODPermit’s database. Operator notifications use Telegram, including the contact details and attached calculation, in the chat configured by ODPermit. Access is limited to the people with access to that destination and the operational systems.

Your calculator result is temporarily kept in this browser tab’s session storage so it can accompany an assistance request. It is cleared when you submit, remove the attachment, start a new calculation, or close the tab. Contact form fields are not saved in browser storage. A downloaded draft stays on your device and does not submit a request.

Telegram permit desk

The Telegram Mini App verifies your Telegram sign-in and opens the same saved load, carrier profile and requests as the bot. Its session credential is kept in memory for up to one hour; private workspace data is not written to browser local or session storage. A public visit outside Telegram does not sign you into a carrier account.

The ODPermit bot keeps your Telegram identity, shipment draft and calculation so you can continue a conversation. Private calculator drafts expire after 30 days. The /forget command clears the current draft; it does not delete Telegram’s chat history or previously submitted requests.

Carrier onboarding records contain the company details you provide, your carrier identifiers and document metadata. When you upload carrier paperwork or confirm a permit-desk handoff, the documents, load details and your Telegram identity are shared with ODPermit’s configured operator group. While connected to the desk, your messages and attachments are relayed to that group and authorized operator replies are sent back to your private chat. Use /close to end that conversation. Requests and carrier profiles are retained for service and follow-up; contact the desk for access or deletion.

ODPermit stores Telegram file references. Documents submitted in an approved carrier permits group, or imported by the permit desk into a portal load, are also stored as private document copies for that request. Telegram holds its copies under its own terms. The permit desk can use the documents for applicable state-portal applications. Uploading a document or activating an ODPermit carrier profile does not confirm acceptance or approval by a state agency. Do not send passwords, payment-card details or unrelated personal records.

In an approved carrier permits group, ODPermit records the group and topic, Telegram sender identities, source messages, load details, confirmations and delivery results. Document reading may use the AI extraction provider described on this page. Every current member of that approved group can participate and see permits posted there. Released PDFs are also available in the carrier portal and sent to the assigned dispatcher’s private bot chat after they tap Start. Group participation and those private copies do not require a new portal account or account-linking code. Portal access retains its existing sign-in and customer permissions. Group requests and source documents are service records retained for the request and follow-up; contact the desk for access or deletion. Removing group access stops future authorized delivery but cannot recall downloaded copies.

Payments

Invoices are paid through Stripe. You enter card or bank details on Stripe’s payment page, and they go directly to Stripe. ODPermit receives the payment status and amount, not your full card number. Stripe’s own privacy policy covers the payment details it collects.

Display preference

The Reduce visual effects control saves your display preference in this browser’s local storage. It contains no shipment or contact details and is not sent to ODPermit. Your system’s display accessibility preference is also respected.

Operational records and deployment

To limit automated abuse, ODPermit derives keyed, non-readable identifiers from the IP address supplied by its hosting provider and from the network block it belongs to. The request-limit database stores those identifiers, time windows, and request counts, rather than the raw address. Expired counters are removed by a scheduled maintenance task. Hosting providers may keep their own operational and security logs.

For native Telegram updates, short-lived keyed identifiers help avoid processing the same update twice. These records contain processing status and retry times, not the message text or contact details. They expire after seven days and are removed during scheduled maintenance.

Mini App actions also retain their submitted operation’s response, which may include load, carrier or request details, to recognize retries without repeating the action. These records become eligible for removal after seven days once any related deliveries finish. The public updates channel and community are separate from the private permit desk; do not post carrier paperwork there.

When a page or service fails, ODPermit sends a technical error report to Sentry, its error-monitoring provider: the error message, the code location, the page address without its query, and the browser type. Cookies, form contents, contact details and request bodies are removed before the report is sent.

Hosting, document extraction, routing, database, error-monitoring and notification providers process the information needed to operate these features. Analytics and advertising tools are described under “Analytics and advertising” and load only with your permission. Do not include unrelated personal information in a load document or request.

For a question about your information or a request to access or delete it, email hello@odpermit.com or use the assistance form, and include your request reference, if available. No shipment attachment is needed for a privacy inquiry.

Analytics and advertising

Public pages of odpermit.com use Google Tag Manager to load Google Analytics, Microsoft Clarity and the Meta Pixel. Tag Manager itself sets no cookies. None of the three tools load until you allow them in the Cookie Consent banner, and they never load on workspace, quote, invoice, driver or customer pages. If your browser sends Global Privacy Control or Do Not Track, they stay off and the banner is not shown.

• Analytics (Google Analytics, Microsoft Clarity): pages visited, links and buttons clicked, time on page, device and browser type, approximate location derived from the IP address, and replays of how pages are used. Clarity masks what you type into forms.
• Advertising (Meta Pixel): pages visited and whether you ran an estimate or sent a permit request, linked to Meta cookies so ODPermit can measure its ads. Meta handles this data under its own privacy policy. Some state privacy laws, including California’s, treat this as “sharing” personal information for cross-context behavioral advertising. ODPermit does not sell personal information.

Use “Cookie Settings” to choose Analytics Cookies or Advertising Cookies separately, then “Save My Choices”. “Reject All” keeps both optional categories off; “Accept All” allows both. Essential browser storage remembers your privacy and display preferences and cannot be disabled in the banner.

Contact details, uploaded documents, load details and form contents are never sent to these tools. Use “Your privacy choices” in the site footer at any time to allow, change or withdraw permission. Your choice is stored in your browser for 12 months; clearing site data resets it. When you choose, ODPermit also keeps a receipt as proof of your choice: a random ID stored in your browser, what you allowed, the notice version and the time. It holds no IP address or page address and is deleted after three years.

Third parties, including Google, Microsoft and Meta, may use cookies, web beacons and similar technologies to collect or receive information from this website and use it to provide measurement services and, for Meta, to target ads. Google Analytics keeps this site’s event data for 14 months; Microsoft and Meta keep data under their own policies. Learn more and opt out:

• How Google uses information from sites that use its services and the Google Analytics opt-out browser add-on
• Microsoft Privacy Statement (covers Clarity)
• Meta Privacy Policy and your Meta ad preferences
• Interest-based ad choices: Digital Advertising Alliance, Network Advertising Initiative and, in Europe, Your Online Choices

Cookies and browser storage

Measured on this site on October 14, 2026. Providers can change their own cookies; this list is reviewed whenever a tool changes.

What we collect and why

• Identifiers and contact details: name, email, phone, company, Telegram identity and carrier identifiers such as a USDOT number, to answer requests and provide permit services. Keyed identifiers derived from IP addresses, for security and abuse prevention.
• Commercial and load information: shipment details, calculations, quotes, requests and payment status, to provide and bill the services you ask for.
• Documents you upload: carrier paperwork and load documents, to extract load details and file permits.
• Internet activity and approximate location: pages viewed, clicks and session replays, and location derived from the IP address, only with your permission, to measure and improve the site and our ads.

This information comes from you, your browser and, for permits, the agencies that issue them. It is disclosed to the service providers named on this page so they can operate these features, and, only with your permission, to Meta for ad measurement. Requests, carrier profiles and billing records are kept while needed to provide the service, follow up and meet tax and legal record-keeping duties, then deleted or de-identified. Private calculator drafts expire after 30 days. ODPermit does not sell personal information for money, does not use sensitive personal information to infer characteristics about you, and does not knowingly sell or share the personal information of anyone under 16.

Your privacy rights

Depending on where you live, including California, Colorado, Connecticut, Virginia, Texas, Oregon and other states with consumer privacy laws, you may have the right to:

• know what personal information ODPermit holds about you and get a copy in a portable format;
• correct inaccurate personal information;
• delete personal information;
• opt out of the sale of personal information, “sharing” for cross-context behavioral advertising, targeted advertising and profiling with significant effects; and
• use these rights without being treated differently.

To opt out of sharing and targeted advertising, use “Your privacy choices” in the footer or turn on Global Privacy Control in your browser. For any other request, email hello@odpermit.com or use the assistance form. ODPermit confirms receipt within 10 business days, verifies a request by matching details you have already given us, and answers within 45 days (one month for requests under the GDPR or UK GDPR). Where the law allows one extension, we will tell you why before the first deadline. An authorized agent may make a request for you with your signed permission.

If ODPermit declines your request, you may appeal by replying to the decision or emailing hello@odpermit.com with “Privacy appeal” in the subject. We answer appeals within 60 days and explain the result. If you disagree with the outcome, you may contact your state attorney general.

Security

ODPermit protects information with encrypted connections, restricted access and keyed identifiers in place of raw IP addresses. No method is perfectly secure. If a breach affects your personal information, ODPermit will notify you and the authorities as the law requires.

Children

ODPermit is a service for trucking and logistics businesses. It is not directed to children under 13, and ODPermit does not knowingly collect their personal information. If you believe a child has given us personal information, email hello@odpermit.com and we will delete it.

Visitors outside the United States

ODPermit operates in the United States, and information is processed there. If you visit from the European Economic Area, the United Kingdom or Switzerland, ODPermit relies on your consent for analytics and advertising tools, on what is needed to answer your request or provide the service you ask for, and on its legitimate interest in keeping the service secure. You may access, correct, delete, restrict or object to the use of your information, receive a portable copy, withdraw consent at any time without affecting earlier processing, and complain to your local data protection authority. Google, Microsoft and Meta receive analytics and advertising data in the United States under the EU–U.S. Data Privacy Framework, its UK and Swiss extensions, or Standard Contractual Clauses.

Changes to this notice

When this notice changes, the date at the top of the page changes with it. Material changes to how analytics or advertising tools are used will ask for your choice again.