Privacy Policy
Version 2026-08-07.3 · Last updated August 7, 2026
AuthWatch LLC, a New York limited liability company operating as AuthorityWatch, is responsible for the information described in this policy. This policy is incorporated into our Terms of Service.
What we collect
Account data: your name, email address, company name,
and billing details (card data is held by our payment processor,
Stripe - we never see full card numbers).
Watchlist data: the carrier DOT/MC numbers you monitor.
Carrier data: public records about motor carriers from
federal sources (FMCSA registration, authority, insurance and
safety datasets). This is business data about companies, not
consumer data.
What we use it for
Operating the service: matching federal record changes to your watchlist, sending the alerts and digests you signed up for, billing, and support. Transactional email is sent through Postmark.
What we do not do
We do not sell or rent your data. We do not profile consumers. We do not send SMS. We do not share your watchlist with anyone - who you monitor is your business.
Who processes data for us
Stripe (payments and card storage), Postmark (email delivery), DigitalOcean (hosting). Each receives only what it needs to perform that function, and none of them receive your data for their own purposes.
How we protect it
The service runs on a hardened server with encrypted connections, restricted administrative access, network-level filtering, and daily backups. Card numbers never touch our systems. We maintain reasonable administrative, technical, and physical safeguards, as required by New York's SHIELD Act.
If there is a breach
If we learn of a security breach affecting your data, we will notify you by email without unreasonable delay and comply with applicable breach notification law.
Retention & deletion
Account and watchlist data are kept while your account is active. Email ops@authoritywatch.io to delete your account; we remove your account and watchlist data within 30 days, with two exceptions:
(a) records we must keep for tax or accounting compliance; and (b) a log of the alerts we sent you and the federal records those alerts were based on - which we keep for as long as a claim about the service could be brought, so that we can establish what the service actually did.
Your watchlist itself is deleted; exception (b) is the record of what we sent, not the list of carriers you asked us to watch. Carrier data on its own is public federal record and is not personal to you - we hold it independently of any account and it is unaffected by deleting yours. Records kept under (a) or (b) are not used for any other purpose.
Where we operate
AuthorityWatch is operated from the United States for United States businesses. It is not directed at or offered to individuals in the EU or UK.
Cookies
We use session cookies required to keep you logged in. No third-party advertising trackers.
Changes to this policy
We may update this policy. Material changes are announced by email to account holders before they take effect, and each version carries the version number shown at the top of this page.
Contact
AuthWatch LLC
PO Box 365, Buffalo, NY 14205
ops@authoritywatch.io