Security and data handling

How Linehaul protects your data

Private workspace access

Invoice files and records are available through authenticated Linehaul workspaces and are scoped to the company and permissions of the signed-in user.

Isolated document processing

Uploaded PDFs are processed in restricted environments separated from application secrets, other customer files, and outbound network access during raw document processing.

Protected account sessions

Linehaul uses secure session cookies, server-side authorization, and request protections for authenticated customer actions.

Restricted internal access

Privileged administrative access is separately authenticated, protected with multi-factor authentication and reauthentication, and audit logged.

Invoice processing and AI

Linehaul uses deterministic extraction, OCR, and freight-specific validation for supported invoice layouts. Raw PDF processing remains isolated from application secrets and other customer data.

When optional AI-assisted extraction is needed, Linehaul may send limited extracted text or sandbox-rendered page previews to the configured extraction provider. Provider details and the types of data involved are listed on the Subprocessors page.

Payments and service providers

Payment-card entry is handled by Whop. Linehaul receives the billing and subscription information needed to manage access, but does not receive or store the buyer’s full payment-card number from Whop checkout.

Linehaul uses service providers for infrastructure, network protection, transactional email, billing, backups, and selected public-page analytics. The provider list and relevant data categories are published on the Subprocessors page.

Retention, recovery, and deletion

Linehaul maintains backup and recovery controls designed to protect customer data against loss. Public Concierge Audit source PDFs are removed from active storage according to the retention period shown when they are submitted.

Workspace owners can request workspace deletion through Linehaul. Active data is removed through a controlled deletion process, while backup, security, transaction, or legally required records may follow separate retention periods.