cdlhr.ai

Privacy Policy

Effective October 15, 2026 ยท Last updated October 15, 2026

This policy covers GIG Invest Inc ("cdlhr.ai", "we", "us"), the operator of the hiring service at cdlhr.ai, including the phone calls and text messages described below. It is written for two groups: CDL drivers who apply for a job through us, and the trucking employers who use our software to hire them.

1. Information we collect

From a driver applicant, when they submit an application to an employer through our service: name, mobile phone number, CDL class, email address where given, the job applied to, and the answers given on the application form and during the screening call. We also create a recording and a written transcript of the screening call, and a score derived from the answers. If an employer uses our CDLScan reviews feature, we may also receive information about an applicant from CDLScan, as described in section 4.

From an employer user: name, work email, company details, and the settings they configure in the product. If an employer user signs in with Google, we receive their name and email address from Google. Card payments are taken by our payment processor; we receive a record of the payment, not the full card number.

From anyone who uses our pages: the technical data a web server records with each request, such as IP address, browser type and the time of the request, kept in security and error logs.

We do not ask an applicant for a date of birth, a social security number, or any protected characteristic during screening, and our scoring never uses one.

If a driver is hired, the employer uses our software to hold that driver's qualification file: date of birth, licence details, medical certificate and the other records federal rules require a motor carrier to keep. We collect those only after hire, and they are never used in screening or scoring.

2. How we use it

We do not use applicant information to advertise to them, and we do not build marketing profiles from it.

3. Screening calls and recordings

Screening calls are placed by an automated voice agent. At the start of every call, before any question, the agent states that it is automated and that the call is recorded. Calls are placed only inside legal calling hours for the applicant's location; where we cannot place that location with confidence we use a narrower nationwide window that falls inside legal hours in every continental US time zone. We place a screening call only where we hold a record of the applicant's prior express consent to be called about that job, given on the application page, or given by the applicant to the employer directly and attested by that employer in our system.

4. Driver reviews from CDLScan

CDLScan is a separate service where people in the trucking industry review drivers. An employer who has this feature turned on can ask us to look an applicant up there. When they do:

Because the search is by name, a match can belong to a different driver with a similar name, so the employer sees every match marked as unverified. Reviews are shown only to the employer who ran the search and are never used in our screening or scoring. If a review about you is wrong, contact CDLScan, because the review is theirs. To have us delete our copy, see section 9.

5. Text messages and SMS consent

We do not send text messages yet. When we start, we will text an applicant only if they ticked a separate SMS box on the application page. That box will be unticked by default, separate from our Terms, and ticking it will never be a condition of applying for a job or of anything else. Our SMS consent page shows what the application page asks for today.

We never send a text message to a number that reached us any other way, whether an imported list, a lead bought from a third party, or a number an employer typed in, even if that employer tells us the person agreed.

Message and data rates may apply. Message frequency varies. Reply STOP to opt out. Reply HELP for help.

6. Who we share information with

We share applicant information with the single employer the applicant applied to, and with the service providers that make the product work. These are the providers that receive personal information today, and what each one is for. When an employer asks us to look an applicant up on CDLScan, we send the applicant's name to CDLScan to run the search. To suggest a name match from several results, we may also send the applicant's name and the returned profile names to TypeSafe, directly or through OpenRouter (section 4):

Twilio
Phone numbers, call connection and text message delivery
Retell AI
The automated voice agent that places the screening call, records it and transcribes it
OpenRouter and Anthropic
The AI model that scores the call transcript against the job's criteria (OpenRouter routes the request, Anthropic runs the model)
OpenRouter
Routes names-only CDLScan comparisons to TypeSafe when that route is enabled. It receives the applicant's name and returned profile names, without dates of birth, ratings or reviews
TypeSafe
An AI model that reads the call transcript and suggests additional notes for the recruiter, such as answers to double check; it does not change the score. For the separate CDLScan reviews feature, it may also compare only the applicant's name and returned profile names to suggest an unverified name match
Langfuse
A record of each scoring request and response, including the transcript, kept so we can check and correct how calls are scored
DigitalOcean
Hosting of the application and its database
Cloudflare
Storage of call recordings, delivery of our web pages, and network security
Postmark
Sending email, such as sign-in links and account notices
Migadu
Receiving email sent to our addresses, including privacy and consent requests
Ably
Live updates of an application's status in the employer's screen
Google
Sign-in for employer users who choose to sign in with Google
Square
Card payments from employers; Square does not receive applicant information

Those providers act on our instructions and may not use the information for their own purposes. We update this list before a new provider receives personal information.

All the above categories exclude text messaging originator opt-in data and consent; this information won't be shared with any third parties. Mobile information and SMS consent are not shared or sold to third parties or affiliates for marketing or promotional purposes, and we do not sell personal information.

7. Employers who use our software

Our product is used by many employers, so it matters exactly where an applicant's phone number goes. An applicant applies to one named employer, on a page that carries that employer's name. Their contact details, their answers, the recording and the score are shown to that employer only. They are not shown to other employers on the platform, are not pooled into a shared candidate database, are not passed to affiliates, and are not sold.

Consent is scoped the same way. Agreeing to be called or texted about one employer's job is not consent for any other employer. If you want every employer on our platform to stop, tell us and we will suppress your number across the whole service, as described in our consent revocation policy.

8. How long we keep it

We keep an application, its screening record and the call recording until the person it is about, or the employer that holds it, asks us to delete it (see section 11). We do not yet delete records automatically after a fixed period. When we do, this section will state the periods, and they will be no longer than 30 months from the application for an application and its screening record, and 24 months for a call recording. An employer can export what it needs to keep for longer under the rules that apply to it, and from then on that copy is the employer's record. Copies held by the providers listed in section 6 are deleted on those providers' own schedules, which may be longer than ours. Consent and opt-out records are kept longer, because we have to be able to prove that a call or a message was permitted and that a withdrawal was honoured. A copy of CDLScan reviews is part of the screening record and is kept for the same period.

9. Your choices, and how to withdraw consent

Withdrawing consent does not withdraw an application already sent to an employer; to withdraw the application itself, tell the employer or tell us and we will pass it on.

10. Security

We encrypt driver data in transit and at rest with our hosting and storage providers. An applicant's application, recording, transcript and score are readable only by the employer they applied to (enforced in the database itself rather than only in the application) and by the cdlhr.ai staff who operate and support the service, whose access is logged.

11. State privacy rights

Depending on the state you live in, including California, you may have the right to know what personal information we hold about you and how we use it, to get a copy of it, to correct it, and to have it deleted. Email privacy@cdlhr.ai to use any of these rights, or to have someone you authorise make the request for you. We will confirm who you are before we act, and we will not treat you differently for asking. We do not sell personal information and we do not share it for targeted advertising. Where we hold an application on behalf of an employer, we may pass your request to that employer, who decides on it, and we will tell you that we did.

We may keep information despite a deletion request where the law requires it, such as the record that you withdrew consent, which is what keeps us from contacting you again.

12. How to reach us

GIG Invest Inc
15850 New Ave, Suite 114, Lemont, IL 60439
privacy@cdlhr.ai