Security and data handling

How Linehaul protects your data

Private workspace access

Workspace invoice files and records are scoped to the company and permissions of the signed-in user. Authorized teammates share company records. Public-audit documents are handled separately for the requested review.

Isolated document processing

Uploaded PDFs are processed in restricted environments separated from application secrets, other customer files, and outbound network access during raw document processing.

Protected account sessions

Linehaul uses secure session cookies, server-side authorization, and request protections for authenticated customer actions.

Restricted internal access

Privileged administrative access is separately authenticated, protected with multi-factor authentication and reauthentication, and audit logged. Authorized personnel may access information needed for support, requested public-audit reviews, security investigations, and data requests.

Invoice processing and AI

Linehaul uses deterministic extraction, OCR, and freight-specific validation for supported invoice layouts. Raw PDF processing remains isolated from application secrets and other customer data.

When optional AI-assisted extraction is enabled, Linehaul may send limited extracted text or sandbox-rendered page previews to the configured extraction arrangement. These can contain personal information and confidential shipment or rate details. External AI extraction is disabled in the supplied default configuration; that default does not establish the settings of a particular deployment. Supported providers and gateway arrangements are listed on the Subprocessors page. Confirm the enabled arrangement before submitting documents with provider or residency restrictions.

Payments and service providers

Payment-card entry is handled by Whop. Linehaul receives the billing and subscription information needed to manage access, but does not receive or store the buyer’s full payment-card number from Whop checkout.

Linehaul uses service providers for infrastructure, network protection, transactional email, billing, backups, and selected public-page analytics. The provider list and relevant data categories are published on the Subprocessors page.

Retention, recovery, and deletion

Linehaul has backup and recovery controls designed to reduce data-loss risk. They do not guarantee uninterrupted availability or recovery of every record. Public Concierge Audit source PDFs are removed from active storage according to the retention period shown when they are submitted; related findings, correspondence, and required records can have separate retention periods.

Privacy Mode removes source PDFs and raw extracted text from active storage after processing while keeping structured invoice records and required audit information. Queued source copies have separate staging cleanup. Privacy Mode does not retroactively remove earlier records or override an external provider’s data terms. Keep any originals your team needs for review, disputes, or accounting.

Workspace owners can request workspace deletion through Linehaul. Active data is removed through a controlled deletion process, while backup, security, transaction, or legally required records may follow separate retention periods.

Archiving an invoice, removing an upload grouping, cancelling billing, and requesting workspace deletion are separate actions. None means every copy is immediately erased. Retention categories and request details are explained in the Privacy Policy.