Privacy Policy

Operator: IGL Holdings LLC · Service name: Broker Verify

Effective date: July 21, 2026 · Last updated: August 3, 2026

1. What we collect

Account information (name, email, company name, your own MC/DOT authority), subscription and billing identifiers held by our payment processor, and the content of the reports, responses, and disputes you submit.

2. Cookies and tracking technologies

Broker Verify uses a small number of first-party cookies to run the site, and nothing more. Today these are the only cookies in use:

• Sign-in cookie. Set by ASP.NET Core Identity when you log in, so the site knows you're signed in as you move between pages. By default it lasts only until you close your browser. If you tick "Remember me" when signing in, it is kept for a limited period instead, so you stay signed in on your next visit. Signing out clears it.
• Two-factor sign-in cookies. If you use two-factor authentication, a short-lived cookie carries you through the code-entry step. If you tick "Remember this machine" at that step, a further cookie is kept on that device for a limited period so you are not asked for a code every time you sign in from it. Both are used only to complete and remember your own sign-in.
• Security (anti-forgery) cookie. A standard ASP.NET Core cookie that helps protect forms and account actions from cross-site request forgery. It does not identify you or track you across sites.
• Status-message cookie. A cookie that lasts only a few seconds, used solely to carry a one-time confirmation or error message (for example, after you reset your password) to the next page you land on. It expires almost immediately and is not used for tracking.
• Security / bot-protection cookie. Our content delivery and security provider, Cloudflare, sits in front of the site to filter malicious traffic. If it needs to confirm a visitor is not an automated attack, it may set its own strictly necessary security cookie on that visit. It is used for security and abuse prevention only, not to profile you or track you for advertising.

Broker Verify does not use analytics, advertising, or tracking cookies or scripts. We do not run Google Analytics, Meta/Facebook Pixel, Microsoft Clarity, advertising pixels, or any similar tool, and we do not embed third-party trackers on our pages. Because the only cookies we use are the strictly necessary, functional ones described above, a cookie-consent banner is not legally required today.

If that ever changes, for example if we add analytics or advertising tools in the future, we will update this policy first and add whatever consent banner or notice the law requires before those tools go live.

3. Evidence files

If you attach supporting evidence to a report (rate confirmation, invoice, bill of lading, proof of payment), we store it privately and encrypted, never in a public web folder, and it is not published on broker profiles. Factoring-company uploads are operator-blind: no person, not even the operator, opens the file. See Section 9 for how long evidence and other records are kept.

4. How the ledger is shared

The core ledger is members-only and not indexed by search engines. Only a named broker’s response pages are intended to be public.

5. Payment processing

Subscriptions are processed by Stripe. We store a customer and subscription identifier and your subscription status; we do not store full card numbers.

6. Notifications

We intend to notify a named broker when a new report is filed about them, so they can exercise their right of reply.

7. Your choices

You can manage your account and subscription from your account page, and you can correct or withdraw your own reports within the applicable window.

8. Who we share with

We do not sell your personal information. We share it only with the service providers that make Broker Verify run: Stripe for payment processing, our cloud hosting and database provider, our content delivery and security provider, our email provider for account and notification messages, and the FMCSA QCMobile system, which we query to verify carrier authority. Each acts on our behalf under its own terms. We may also disclose information when required by law, valid legal process, or to protect our rights, our members, or the public.

9. How long we keep data

We keep account records for as long as your account is active and for up to 24 months after it closes, so we can handle billing questions, disputes, and legal obligations. Published reports and their status history are part of the ledger’s append-only audit trail and are retained for the life of the service, though a withdrawn or removed report no longer counts toward a broker’s grade or shows on the profile. Supporting evidence files are retained for up to 24 months after the related report is resolved, then deleted, unless we are required to keep them longer for a legal claim, investigation, or law. Stripe retains payment records under its own retention rules.

10. How we protect your data

We use technical and organizational safeguards to protect your information. Evidence files are encrypted at rest with AES-256, stored outside any public web folder, with the encryption key held separately from the files themselves, so a stolen disk or database copy alone cannot open them. Passwords are stored as salted hashes through ASP.NET Identity, and you can add a passkey for stronger sign-in. Your payment card details go directly to Stripe and never touch Broker Verify's own servers; we only ever hold a Stripe customer and subscription identifier, never your card number or CVV. No system is perfectly secure, but we work to keep access limited and your data protected.

11. Your privacy rights (including California)

You can access, correct, or delete your account information from your account page, and you can correct or withdraw your own reports within the applicable window.

If you are a California resident, the CCPA and CPRA give you specific rights: the right to know what personal information we collect and how we use it, the right to delete it (subject to the records we have to keep for legal, billing, and dispute-resolution reasons described in Section 9), the right to correct inaccurate information, and the right to opt out of the sale or sharing of your personal information. Broker Verify does not sell your personal information and does not share it for cross-context behavioral advertising. We will not deny you service, charge you a different price, or give you a lower level of service for exercising any of these rights.

Do Not Sell or Share My Personal Information. Because we do not sell or share your personal information, there is nothing to opt out of today. If you would still like that preference recorded on your account, or you want to exercise any of the rights above, email support@brokerverify.us and we will verify your request and respond within the time the law allows. Residents of other states with privacy laws (for example Virginia, Colorado, or Connecticut) have comparable rights and can reach us the same way.

12. Contact