Union Pacific Corporation
Industrials
29
out of 100. Number 409 of 512, counting from the worst.
Where Union Pacific Corporation does well
- Arbitration 2 of 20. Few problems found.
- Renewals 0 of 20. Nothing found.
- No forced arbitration or class-action waiver anywhere: disputes go to regular state/federal courts in Douglas County, Nebraska — fairer than most consumer giants.
- UP explicitly states it does not sell or lease personal information, customer listings, or aggregate data to any outside party (repeated in the Nevada and Texas notices); ALPR data is never sold either.
- Retention is bounded: personal information is 'anonymized or destroyed' once no longer needed, and security-log data is 'scheduled for regular deletion.'
- Real, concrete privacy channels: a dedicated Privacy-Requests@up.com address, toll-free 1-866-251-9185, and an intake form, with a non-discrimination promise for exercising rights.
- No auto-renew, no cancellation traps, no surprise subscription mechanics exist anywhere in the documents.
If UP's freight-customer portal loses or leaks your data, UP's total liability is capped at $1,000, no matter the damage.
The fine print
6 clauses and findings from the draft archive, dated 1 October 2026. The plain English comes first; the small print is the company's own words. None of these has been checked yet.
-
If UP's freight-customer portal loses or leaks your data, UP's total liability is capped at $1,000, no matter the damage. Separately, you waive any claim for losses from UP's own 'unintentional disclosure' of your company's confidential information. Your only remedy for a bad experience is to quit the portal.
IF UNION PACIFIC IS FOUND TO BE LIABLE TO YOU FOR ANY DAMAGE OR LOSS WHICH ARISES OUT OF OR IS IN ANY WAY CONNECTED WITH YOUR USE OF THE CUSTOMER PORTAL, UNION PACIFIC'S LIABILITY SHALL IN NO EVENT EXCEED ONE THOUSAND DOLLARS... YOUR SOLE REMEDY AGAINST UNION PACIFIC FOR DISSATISFACTION WITH THE CUSTOMER PORTAL OR ANY CONTENT IS TO STOP USING THE CUSTOMER PORTAL OR ANY SUCH CONTENT.
-
UP can rewrite the customer portal terms whenever it wants; notice is just a posting inside the portal, and simply logging in again afterward counts as your legally binding acceptance of the new terms. The privacy policy works the same way: 'After such notice, use of our services... will be understood as consent to the updates.'
You agree that Union Pacific may, at its discretion, amend or modify the Customer Portal and/or these terms and conditions. Any such amendment or modification shall be communicated to you via the Customer Portal. Your continued use of the Customer Portal will constitute a binding acceptance of such amendments or changes.
-
You must defend UP in court and pay its legal bills (including attorneys' fees) for anything arising from your portal use — even disputes UP picks with others about you. A broad, one-sided indemnity from customer to railroad.
You agree to defend, indemnify, and hold Union Pacific and its affiliates, and their respective directors, employees, agents, successors, and assigns harmless from and against any and all claims, damages, costs and expenses, including attorneys' fees, arising from or related to your use of the Customer Portal, your violation of these terms and conditions or your misuse of the Customer Portal.
-
UP buys your identifiers and internet activity from third-party data resellers and social media companies, builds a 'profile' of you (including sensitive personal information and 'inferences'), and shares it with analytics companies. Setting Do Not Track in your browser does nothing — UP says so explicitly.
We may collect this type of information from: You, Cookies and tracking technologies, Third-Party Service Providers, Third-party social media companies, Third-party business partners, Third-party data resellers... 'Inferences drawn from any of the information identified above to create a profile about You' ... We may disclose this type of information to: Service providers, such as analytics companies. At this time, we do not respond to Do Not Track browser settings or signals.
Website Privacy Policy (CCPA notice tables, Do Not Track section)
-
Cameras at UP's intermodal truck terminals photograph every vehicle's license plate plus time and location, feeding a searchable database. UP keeps that data for as long as it deems 'necessary' (no fixed period) and hands it to law enforcement, vendors, and legal advisors. Drivers (incl. the UPGo app users) have no opt-out.
Where allowed by law, Union Pacific may operate and use ALPR systems at certain of its intermodal facilities. These ALPR systems use cameras to capture images of vehicles and their license plates, along with the date, time, and general location... Union Pacific will retain ALPR information for as long as necessary for the Authorized Purposes... (ii) law enforcement officials, public health officials, and other government authorities in order to comply with Union Pacific's legal duties (e.g., in response to a warrant or other legal process).
Website Privacy Policy (Automated License Plate Recognition section)
-
Your company's name and your username on UP's portal can be shown to other freight customers and third parties on UP's systems — no confidentiality there, and no way to hide it.
As part of this process, your organization's name(s) and user name(s) may be visible to other Union Pacific customers and third parties who are also using Union Pacific systems.
How these were found
Both documents were read in full directly from up.com on Oct 1, 2026 via browser_open (no mirror needed; up.com loaded without blocking). The Website Privacy Policy is dated 'Last Updated: May 20, 2026'. The MyUPRR Terms page carries no version date. The Website Security Policy was not opened in full; its fair-point language ('accumulated data logs will be scheduled for regular deletion') comes from a search-result snippet of the official up.com page. Notable drafting sloppiness observed in the official Texas notice: it references 'Walmart' twice (under Communications sources and sensitive-personal-information consent), suggesting copy-paste from another company's template — a trust ding, not a clause. Union Pacific is B2B freight rail; most visitors never become registered users, so the MyUPRR Terms affect shipping customers only.
These notes come from the original draft and are not independent verification.