Privacy Policy

Scope & Who This Applies To

This Privacy Policy governs how TruckPartsXL ("we," "us," or "our") collects, uses, stores, and discloses information when you use the TruckPartsXL platform located at 174hz.github.io/truckpartsxl/index.html and related pages (the "Platform"), including when you submit a parts procurement request, browse the open contracts board, or interact with any of our forms or services.

TruckPartsXL is a B2B commercial marketplace facilitator serving the North American heavy-duty trucking, salvage, and fleet maintenance industry. This policy applies to all users, including fleet operators, procurement managers, salvage yard operators, parts distributors, and any other commercial parties accessing the Platform.

Information We Collect

2.1 Information You Provide Directly

When you submit a procurement request ("Bounty") through our Google Form, we collect:

• Fleet Procurement Parameters: Component descriptions, OEM reference numbers, casting stamps, engine series, part condition requirements, and target acquisition budgets.
• Vehicle Asset Identifiers: 17-digit Vehicle Identification Numbers (VINs) provided to facilitate accurate component matching and fitment verification.
• Business Contact Information: Business or contact name, professional phone number, and commercial email address. This information is collected for the purpose of facilitating direct contact between verified sellers and buyers, and is kept private until a seller completes a paid unlock.
• Regional Dispatch Information: Geographic sourcing region or province/state to route requests to relevant salvage networks.
• Priority Boost Selection: Whether you have selected an optional paid visibility upgrade ($9.99).

2.2 Information Collected Automatically

• IP address, browser type, device type, and operating system
• Pages visited, time on page, and referral sources
• Session data and general usage patterns via analytics tools
• Form submission timestamps recorded by Google Workspace

2.3 Payment Information

TruckPartsXL does not collect, store, or process payment card information. All payments (including the $9.99 Priority Boost and the Contact Unlock fee) are handled directly by Stripe, Inc. through their PCI-DSS-compliant infrastructure. We receive only a transaction confirmation and the email address used at checkout.

How We Use Your Information

• Platform Operations: To publish procurement requests to the live board, match buyers with verified salvage networks, and facilitate contact between parties upon payment.
• Contact Delivery: Upon a verified Stripe payment, buyer contact details (phone and/or email) are automatically delivered to the paying seller via email. This is the core commercial purpose of the Platform.
• Administrative Notifications: To send the platform operator summary emails when new bounties are submitted, including both the public listing data and private contact information for record-keeping.
• Platform Improvement: Aggregated, de-identified usage data may be used to improve Platform features, performance, and user experience.
• Legal Compliance: To comply with applicable laws, respond to lawful requests, and protect the rights and safety of the Platform and its users.
• Fraud Prevention: To detect and prevent fraudulent submissions, VIN misrepresentation, and platform abuse.

Public Disclosure of Procurement Data

4.1 What Is Made Public

The following fields from your submitted request are published to the live procurement board and pushed to our public GitHub repository:

• Part name and component description
• Year, Make, and Model of the vehicle
• VIN number (if provided)
• Engine series and OEM/casting number
• Required condition
• Target budget
• Sourcing region (city/province/state level only)
• Submission timestamp

4.2 What Remains Private

The following information is never published to the public board under any circumstances:

• Your name or business name
• Your phone number
• Your email address
• Any payment information

Contact details are stored securely in a private Google Sheet accessible only to the platform operator, and are released to a seller only upon successful completion of a Stripe payment for the Contact Unlock service.

Third-Party Services & Data Processors

TruckPartsXL operates a lean, serverless technology stack. The following third-party services process data on our behalf:

• Google Workspace (Forms & Sheets): Procurement requests are captured via Google Forms and stored in Google Sheets. Google's privacy policy applies: policies.google.com/privacy
• Google Apps Script: Automated scripts process submissions, push public data to GitHub, and send administrative notifications. No data leaves Google's infrastructure except what is intentionally published.
• GitHub (GitHub Pages & Repository): Public procurement data is stored in a JSON file in a public GitHub repository and served via GitHub Pages. GitHub's privacy policy applies: docs.github.com
• Stripe, Inc.: All payment processing is handled by Stripe. TruckPartsXL never stores credit card numbers, banking details, or billing account information. Stripe's privacy policy applies: stripe.com/privacy
• Zapier (if active): Automation workflows may be used to route data between services. Zapier's privacy policy applies: zapier.com/privacy

We do not sell, rent, or trade your personal information to any third party for marketing or advertising purposes.

Data Retention

• Active procurement listings: Remain on the public board until manually archived or removed by the platform operator upon fulfillment or request.
• Google Sheet records: Retained for a minimum of 7 years to comply with applicable commercial record-keeping requirements.
• GitHub public JSON: Public procurement data may persist in GitHub's version history indefinitely. We will make reasonable efforts to remove specific records upon valid deletion requests.
• Stripe transaction records: Retained by Stripe in accordance with their data retention policies and applicable financial regulations.

Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

To exercise any of these rights, submit a written request to tpartsxl@gmail.com. We will respond within 30 days (Canada) or 45 days (U.S. / California). We may require identity verification before processing requests. For deletion of specific records such as phone numbers or VIN patterns from our Google Sheet, we will action confirmed requests within 48 business hours.

International Data Transfers

TruckPartsXL operates across Canada and the United States. Data submitted through our Platform may be processed and stored by our third-party service providers (Google, GitHub, Stripe) in data centers located in the United States and other countries. By using the Platform, you acknowledge that your information may be transferred to, stored, and processed in jurisdictions outside your own, where privacy laws may differ.

For Canadian users: data stored or processed in the United States is subject to U.S. federal and state law enforcement access. We take reasonable measures to ensure our third-party processors maintain appropriate security standards.

Security

We implement reasonable technical and organizational measures to protect the information we handle, including:

• Role-based access controls on Google Workspace (only the platform operator can access private contact data in the Sheet)
• Private contact information is never written to the public GitHub repository
• Payment processing delegated entirely to Stripe's PCI-DSS-compliant infrastructure
• GitHub API tokens stored as encrypted Script Properties, not in publicly accessible code

However, no method of electronic transmission or storage is 100% secure. You submit information at your own risk and are responsible for maintaining the confidentiality of any account credentials.

Children's Privacy

TruckPartsXL is a B2B commercial platform intended exclusively for use by adults aged 18 and over. We do not knowingly collect personal information from minors. If you believe a minor has submitted information through our Platform, contact us immediately at tpartsxl@gmail.com and we will promptly delete the information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Reviewed" date at the top of this page. For significant changes, we may post a notice on the Platform. Continued use of the Platform after the effective date of any update constitutes acceptance of the revised policy.

We encourage you to review this page periodically to stay informed about how we protect your information.

Contact Us

For privacy-related inquiries, rights requests, or to request deletion of your data: