Privacy Policy

Last updated 29 August 2026

This policy explains what AVIATO, LTD. (“Aviato”, “we”) collects when you apply to drive with us, how we use it, who we share it with, and how long we keep it. It covers this website, the driver portal, and the documents you send us during onboarding.

1. Who we are

AVIATO, LTD. is a motor carrier running container drayage out of the Port of New York and New Jersey under its own authority — US DOT 3230286, MC 1012644. We hire CDL-A drivers directly. We are the controller of the information described here.

Questions, requests or corrections: aviato@aviato.us.

2. What we collect

When you apply

The application form asks for:

• your first and last name;
• your mobile phone number and email address;
• your ZIP code;
• how many years you have held a CDL-A;
• whether you are applying as an owner-operator or a company driver;
• the model year of your tractor, if you own one;
• whether you hold a TWIC card, or have applied for one;
• whether you are authorized to work in the United States (yes or no);
• how you heard about us, and who referred you if someone did;
• anything you choose to add in the free-text notes box.

During onboarding

If we invite you to onboard, the driver portal collects the documents your file requires. Depending on which path you are on, that can include your CDL, DOT medical card, TWIC and SeaLink cards, certificate of insurance, W-9, signed agreement, tractor registration and cab card, IRP and IFTA credentials, stamped Form 2290, annual DOT inspection, road test certificate, and employment verification. We record the expiry date of each credential so we can tell you before it lapses.

Once you are driving with us we hold your date of birth and, where a terminal requires it, the RFID tag numbers issued to you and to your tractor for gate access.

When you contact us

Messages you send through the portal’s question box, and our replies, are stored against your file so whoever picks it up can see the conversation.

Automatically

We record the IP address a submission came from and the time it arrived. This is used to rate-limit the public form and to catch automated abuse — nothing else. Where an email address or phone number is used as a rate-limiting key it is stored as a keyed one-way hash, never in the clear. We do not use advertising cookies, analytics trackers or third-party pixels on this site.

3. What we never collect

We do not ask for your Social Security number anywhere on this website or in the driver portal. It is not a form field and it is not stored in our database. It must never appear in a file you upload or in a file name — if a document you need to send us shows it, cover it before you photograph it.

We also do not ask about your citizenship or immigration status, your country of birth, your visa type, or any document number establishing those. On the application we ask one question — whether you are authorized to work in the United States — and nothing further.

4. Text messages

If you give us your mobile number on the application, you agree we may text you about your application and your onboarding — your portal link, a reply to a question you asked, or a document we still need. These are service messages about a process you started. We do not send marketing texts.

• Message frequency varies with where you are in the process; expect a handful of messages, not a stream.
• Message and data rates may apply.
• Reply STOP to any message to opt out, or HELP for help. You can also email aviato@aviato.us.
• Opting out of texts does not withdraw your application — we will use email instead.
• We do not sell, rent or share mobile numbers or SMS consent with anyone for their own marketing. Your number goes only to the messaging provider that delivers the message on our behalf.

5. Background checks and DOT testing

Federal regulation requires a motor carrier to investigate the driving record and safety history of the drivers it engages. With your written authorization, and separately from this policy, we obtain:

• your Motor Vehicle Record (MVR);
• your FMCSA Pre-Employment Screening Program (PSP) report;
• a query of the FMCSA Drug and Alcohol Clearinghouse, and its annual renewal;
• controlled substances and alcohol testing under 49 CFR Part 382 — pre-employment, random, post-accident, reasonable suspicion, return-to-duty and follow-up, as the rule requires;
• verification of your previous employment as a driver.

Some of these are consumer reports under the Fair Credit Reporting Act. You will receive the disclosure and authorization the FCRA requires before any report is obtained, as a separate document — not buried in this page.

Two commitments about how those results are handled, because they are the ones that matter to you:

• Screening and testing results are never used by the automated scoring our recruiting dashboard runs. That score looks at experience, credentials and equipment. It does not see your MVR, your PSP, your Clearinghouse query, or any test result.
• Nothing is ever auto-rejected on a screening result. A decision to turn down an application because of one is made by a person, and you receive the pre-adverse-action notice, a copy of the report, a summary of your FCRA rights, and time to dispute it before anything is final.

6. Work authorization documents

This applies to the company driver path only. If you are engaged as an independent owner-operator we do not ask you for work authorization documents, because there is no such requirement for an independent contractor.

Where it does apply, we ask you to provide a document establishing your authorization to work — and you choose which one. We will never tell you which document to produce, never refuse an acceptable document because a different one would be easier for us, and never ask you again once your authorization is on file unless the document itself has expired. We store the document and its expiry date. We do not operate E-Verify.

7. How we use what we collect

• To evaluate your application and tell you where it stands.
• To contact you about it, by email and text.
• To onboard you: collect the documents your file needs, and track what is still outstanding.
• To meet our obligations as a motor carrier — maintaining a driver qualification file, monitoring credential expiry, and producing records to FMCSA or a state agency in an audit or investigation.
• To protect the application form from automated abuse, and to keep an internal record of administrative actions taken on your file.

We do not sell your information. We do not share it with anyone for their own marketing. We make no automated decision that produces a legal or similarly significant effect without a person reviewing it.

8. Who we share it with

We use a small number of service providers who process information on our instructions and for no purpose of their own:

• Supabase — our database, document storage and sign-in, hosted in the United States.
• Vercel — hosting for this website and the portal.
• Resend — delivery of the emails we send you.
• Telnyx — delivery of the text messages we send you.
• Screening and testing providers — the consumer reporting agencies, collection sites and Medical Review Officer named in the authorization you sign.

We will also disclose information where we are legally required to:

• to FMCSA, the DOT, or a state agency in an audit, inspection or investigation;
• to the FMCSA Drug and Alcohol Clearinghouse, where Part 382 requires a report;
• to a subsequent employer who sends us a valid, signed request for your safety performance history under 49 CFR 391.23;
• in response to lawful legal process.

Aviato does not hand driver files to any outside platform. This database is our permanent record.

9. How long we keep it

Some of these periods are set by federal regulation and are not ours to shorten:

• Driver qualification records — for as long as you drive for us and three years after you stop (49 CFR 391.51). Ending an engagement does not delete your file; it archives it.
• Drug and alcohol testing records — five years for positives, refusals, alcohol results of 0.02 or higher, and random selection records; one year for negatives (49 CFR 382.401).
• Applications that do not proceed — kept for the period the recruiting record requires, then removed. If you were never engaged and no regulatory clock applies to your file, you can ask us to delete it.
• Our internal record of administrative actions — retained as an append-only trail. It is deliberately not linked to your file by a database key, so that deleting your file does not also erase the record that a deletion happened.

10. How we protect it

• Uploaded documents live in a private storage bucket. There is no public URL for any file. A document is opened through a signed link that expires in sixty seconds.
• The database refuses access by default. The public website has no read or write access to any table; everything privileged happens on our servers.
• Everything is encrypted in transit.
• Administrative access is limited to named accounts, and administrative actions are logged.

No system is perfect. If you believe something about this site is insecure, please write to aviato@aviato.us rather than posting it publicly.

11. Your choices

• See what we hold. Ask us and we will tell you what is on your file.
• Correct it. If something is wrong, tell us and we will fix it.
• Delete it. We will delete what we are not required to keep. Where a retention period above applies, we will tell you which one and when it ends.
• Withdraw. You can withdraw an application at any time.
• Stop texts. Reply STOP, as described in section 4.
• Dispute a screening report. The FCRA notice you receive explains how, and who to contact at the agency that produced it.

Email aviato@aviato.us for any of these. We may need to confirm your identity before we act, so that somebody else cannot make the request for you.

12. Children

This site is for CDL-A drivers and is not directed to anyone under 18. We do not knowingly collect information from children.

13. Changes

If we change this policy we will update the date at the top. If a change materially affects how we handle information we already hold about you, we will tell you directly rather than relying on you noticing.

14. Contact

AVIATO, LTD. — US DOT 3230286, MC 1012644
Newark / Elizabeth, New Jersey
aviato@aviato.us
Recruiting: recruiting@aviato.us