Last updated: April 10, 2026
Welcome to DrayList (draylist.com), a business-to-business drayage and intermodal carrier directory serving the United States and Canada. DrayList is operated by Drayage Guru ("we," "us," or "our").
This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have regarding your data. It applies to all visitors, early-access subscribers, carriers listed in our directory, and future registered users of the DrayList platform.
By accessing or using DrayList, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our platform.
Early Access Signups. When you join our early-access waitlist, we collect your email address.
Contact Form Submissions. When you use our contact form, we collect your name, email address, and the content of your message.
Future Account Information. When we launch user accounts, we will collect additional information necessary to create and manage your account, such as your name, company name, business email, and password. This policy will be updated at that time to reflect any new data collection.
When you visit DrayList, our infrastructure providers automatically collect certain technical information, including:
This information is collected through standard server logs and Cloudflare analytics. We do not use third-party tracking cookies, advertising pixels, or behavioral tracking scripts.
DrayList aggregates carrier business information from publicly available sources to build our directory. These sources include:
This data consists of business information that companies have made publicly available through federal registrations and industry directories. It does not include personal consumer data.
We collect information through three channels:
Directly from you — when you submit your email for early access, fill out a contact form, or (in the future) create an account, claim a carrier listing, submit a review, or request a quote.
Automatically— through server logs and Cloudflare's edge network when you visit our website. This includes standard web analytics data and does not involve third-party tracking technologies.
From public sources — by aggregating carrier business data from federal databases (FMCSA) and public industry directories (LoadMatch). We access only information that is publicly available and intended for business use.
We use the information we collect for the following purposes:
We do not use your information for targeted advertising, behavioral profiling, or any purpose unrelated to the operation and improvement of DrayList.
We process personal information under the following legal bases:
Consent. When you provide your email address for early access or submit a contact form, you consent to our processing of that information for the stated purpose. You may withdraw consent at any time by contacting us.
Legitimate Interest. We have a legitimate business interest in aggregating publicly available carrier data to build a useful industry directory, analyzing platform usage to improve our services, and maintaining the security of our platform.
Contractual Necessity. When we launch user accounts and paid services, processing will be necessary to fulfill our contractual obligations to you.
Legal Obligation. We may process information when required to comply with applicable laws or respond to valid legal requests.
We do not sell, rent, or trade your personal information to third parties for marketing or advertising purposes. We will never monetize your data by selling it.
We share information only with the following parties:
Cloudflare, Inc.— Our website is hosted on Cloudflare Pages. Cloudflare provides our CDN, DNS, DDoS protection, and edge computing (Cloudflare KV storage). Cloudflare processes web traffic data as part of delivering and securing our platform. Cloudflare's privacy practices are governed by their own privacy policy.
MongoDB, Inc. / Amazon Web Services (AWS). Our database is hosted on MongoDB Atlas, which runs on AWS infrastructure in the US East 1 (N. Virginia) region. MongoDB and AWS process stored data as part of providing database hosting services. Both maintain SOC 2 compliance and industry-standard security certifications.
Legal Requirements. We may disclose information if required to do so by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect the rights, property, or safety of DrayList, our users, or the public.
Business Transfers. In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our platform before your information is transferred and becomes subject to a different privacy policy.
We retain your information only as long as necessary to fulfill the purposes described in this policy:
When data is no longer needed, we delete it or anonymize it so that it can no longer be associated with you.
Regardless of where you are located, we respect your right to control your personal information. You have the following rights:
To exercise any of these rights, contact us at [email protected] or use our contact form. We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with specific rights regarding your personal information.
Right to Know. You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business purpose for collecting the information, and the categories of third parties with whom we share it.
Right to Delete. You have the right to request deletion of your personal information, subject to certain exceptions permitted by law.
Right to Correct. You have the right to request correction of inaccurate personal information we maintain about you.
Right to Opt-Out of Sale or Sharing. We do not sell your personal information, and we do not share your personal information for cross-context behavioral advertising. Because we do not engage in these activities, there is no need to opt out.
Non-Discrimination. We will not discriminate against you for exercising any of your CCPA/CPRA rights.
Categories of Information Collected. In the preceding 12 months, we have collected the following categories of personal information:
To submit a CCPA/CPRA request, email [email protected] with the subject line "CCPA Request." We will verify your identity and respond within 45 days as required by law.
If you are located in Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) governs how we collect, use, and disclose your personal information in the course of commercial activity.
Consent. We obtain your consent before collecting, using, or disclosing your personal information, except where permitted or required by law. By providing your email for early access or submitting a contact form, you consent to the collection and use of your information as described in this policy.
Limiting Collection. We collect only the personal information necessary for the purposes identified in this policy. We do not collect information indiscriminately.
Accuracy. We make reasonable efforts to ensure that carrier directory data is accurate, complete, and up to date. Carriers may request corrections at any time.
Access and Correction. You have the right to access the personal information we hold about you and to request corrections to any inaccurate information. We will respond to access requests within 30 days.
Challenging Compliance. You have the right to challenge our compliance with PIPEDA by contacting us. If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada.
Cross-Border Transfers. Your information is stored on servers located in the United States (AWS US East 1 region). By using DrayList, you consent to the transfer of your information to the United States, where data protection laws may differ from those in Canada.
To exercise your rights under PIPEDA, contact us at [email protected].
DrayList takes a minimal approach to cookies and tracking. Here is exactly what we use:
Essential Cookies.We use strictly necessary cookies for basic site functionality, such as Cloudflare's security cookies (e.g., __cf_bm) that help distinguish human visitors from bots and protect against malicious traffic. These cookies are required for the site to function and cannot be disabled.
Cloudflare Web Analytics. We use Cloudflare Web Analytics, which is a privacy-first analytics service that does not use client-side tracking, does not set cookies for analytics purposes, and does not collect personal information. It provides aggregate data about page views and visitor counts.
What We Do Not Use. DrayList does not use:
Because we do not use non-essential cookies or tracking technologies, there is no cookie consent banner or opt-out mechanism required.
We implement industry-standard security measures to protect your information:
While we take reasonable measures to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to promptly addressing any security incidents in accordance with applicable breach notification laws.
DrayList is a business-to-business platform designed for use by freight and logistics professionals. Our services are not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA).
Additionally, we do not knowingly collect personal information from anyone under the age of 16 without verifiable parental or guardian consent where required by applicable law (including the EU General Data Protection Regulation).
If we learn that we have inadvertently collected personal information from a child under 13 (or under 16 where applicable), we will take immediate steps to delete that information. If you believe a child under 13 or 16 has provided us with personal information, please contact us at [email protected] so we can take appropriate action.
DrayList serves users in the United States and Canada. Your information is processed and stored in the United States, specifically:
If you are accessing DrayList from Canada or any jurisdiction outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States. By using DrayList, you consent to this transfer. We ensure that our service providers maintain appropriate safeguards and comply with applicable data protection requirements.
DrayList may contain links to third-party websites, including carrier websites, FMCSA databases, and industry resources. These links are provided for your convenience and informational purposes.
We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policy of any third-party site you visit. A link from DrayList does not imply endorsement of or affiliation with the linked site.
Some web browsers transmit "Do Not Track" (DNT) signals to the websites and online services that a user visits. There is currently no universally accepted standard for how companies should respond to DNT signals.
Because DrayList does not use third-party tracking cookies, advertising pixels, behavioral tracking scripts, or cross-site tracking technologies, our data practices remain the same regardless of whether we receive a DNT signal. We do not track users across third-party websites for advertising purposes, and we do not alter our data collection or use practices in response to DNT signals.
We will continue to monitor developments around DNT standards and may update this section as uniform industry standards are adopted.
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:
We encourage you to review this page periodically. Your continued use of DrayList after changes are posted constitutes your acceptance of the updated policy.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, you can reach us through any of the following channels:
For CCPA requests, please include "CCPA Request" in your email subject line. For PIPEDA requests, please include "PIPEDA Request" in your subject line. All privacy-related requests should be directed to [email protected]. We will acknowledge receipt of your request within 5 business days and provide a substantive response within the timeframe required by applicable law.
Join the waitlist and be the first to access DrayList when we launch.