I. INTRODUCTION AND DEFINITIONS

This Notice of Privacy Policy (“Policy”) is used and enforced by Shypright Holdings, LLC (“Company”) and all entities or sub-entities held or controlled by Company which provide services identical to, substantially similar to, or in support of Company (collectively “Affiliates”). For the purposes of this Policy, Company is engaged in the business of connecting carriers with shippers through technology platforms such as websites and mobile applications (“Services”). As such, this Policy applies to any and all persons and systems that seek to access Company's network and/or Services. By accessing Company's Services, entities, systems, or individuals (collectively “User” or “Customer”) agree Company may collect and utilize information when Customers use or communicate with us concerning our Services.

This Policy Notice details the data we obtain from Users, how this data is utilized and shared, and choices Users can make regarding this information.

II. POLICY APPLICATION AND SCOPE

This Policy is used and enforced for all Users that access Company's Services, regardless of geographic location. As such, unless governed by a separate Notice of Privacy Policy, all Users are governed by this Policy. The Policy abides by, and is subject to, applicable law in our Service locations.

Without limitation, the Policy applies to the following Users and/or Company agents, associates, and affiliates, all of whom constitute Users and/or Customers:

• Carriers: individuals or entities that transport goods using motor vehicles
• Commercial drivers: Licensees employed or engaged by Carriers to transport goods
• Shippers: any User that identifies as a shipper, consignor, or consignee. Alternatively, any User that owns the transported goods
• Dispatchers: individuals who direct motor vehicles and commercial drivers to convey goods

The Company engages in various data control and transfer policies. The Company is the data controller for data obtained pursuant to Customer's use of Company Services. While Company is based in and operates solely within the United States, Company may engage in global data processing. Therefore, we may transfer data to countries outside the United States, as necessary, to fulfill User agreements, based on User's previously obtained consent, or for Company's legitimate business needs subject to applicable law.

III. COMPANY COLLECTION OF USER DATA

Company may collect and utilize the following User data and may combine the data collected from these sources with other data in its possession:

• Data directly provided by User, including but not limited to data provided during account creation or use of Company Services
• Data indirectly generated while utilizing Company Services, including device data, location, and application usage
• Data directly or indirectly generated from other sources, such as use of third party APIs or data provided by Company partners or affiliates pursuant to their privacy policies.

More specifically, Company may collect and/or utilize the following data collected by or on Company's behalf:

1. User Provided Data

This includes:

• Profile and Usage Information:

  Users create, and Company collects, data when Users create, modify, or log in to their account. Likewise, Users create, and Company collects, data when Users request support from or otherwise communicate with Company or otherwise utilize Company Services.

• Personally Identifiable Information:

  During the account creation process and/or when Users access Company Services, Users may provide personally identifiable information (“PII”) to Company.

  The Company follows applicable law and best business practices to protect User PII at all times.

  PII includes, but is not limited to, User's name, email address, phone number, login name and password, postal address, profile picture, government identification documents, including driver's license numbers and images, birthdate, signature, and photo. This also includes vehicle registration information, insurance information, payment information, and other information they choose to provide.

• Demographic Information:

  Company may collect User demographic data through surveys or by other means. Company may also receive demographic data from third parties.

• Company Communication:

  Company collects User information when Users contact customer support, rate facilities, individuals or entities, or otherwise contact Company. Such data may include User created and/or provided photographs, recordings or other feedback.

2. Service Generated Data

This includes:

• Location Information:

  Company Services may require, or Users may opt to provide, relevant geographic information from mobile devices, web-based protocols, User provided information, or other available sources. Company may only obtain and utilize such data after Users “opt in,” typically through authorization on their mobile device. Users agree such information is generated when they open and run Company's mobile application, even if the application is running in the background and is not actively presented on screen.

• Transaction Information:

  Users generate, and Company may utilize, information regarding the type of Services requested or provided. Likewise, Users generate, and Company may utilize, Service and transaction related information including the date and time the Service, Service payment details, Service mileage, and other related transaction details.

• Photos:

  Users may provide, and the Company may utilize data from, User created or generated photographs. Such photography may include a picture of Customer's bills of lading, freight, or other matters directly related to the Company's Services.

• Usage data:

  Company may collect information about User interaction with Company Services (including analytics used to improving Company services). Such usage data may include access dates and times, application features and/or pages viewed, application crashes and other system activity, type of browser, and third-party sites or services used before interacting with our Services. Company reserves the right to collect such data through cookies, pixels, tags, and similar tracking technologies that create and maintain unique identifiers.

• Device data:

  We may collect data about the devices used to access our Services, including the hardware and software model identifiers, IP address, file names and versions, language preferences, serial numbers, motion data, mobile network data, unique device identifiers, and advertising identifiers.

• Communications data:

  We enable Users to interact with one another and Company through Company's online presence, including mobile applications and websites. To provide this Service, Company receives information regarding the calls, texts, or other communications, including the date, time, and content. Company may also use this data for customer support services (including to resolve disputes between users), for safety and security purposes, to improve our products and services, and for analytics.

3. Data from other sources

Company may receive data from other sources, including third-parties, from:

• Other Users (including carriers or shippers). Data may include User generated feedback, location information, or other User generated content.

• Third parties, including regulatory bodies involved in the regulation and investigation of commercial drivers or carriers.

• Brokers, carriers and/or commercial drivers from shippers who request quotes or Service.

• An application or website which utilizes Company APIs or an API used by Company.

• Publicly available sources and marketing service providers.

IV. COMPANY USE OF PERSONAL DATA

At its most basic level, Company collects and uses data to provide Users with an easy, reliable Service experience. Company collects and uses data to facilitate convenient, consistent, and complete Service satisfaction. Generally, we use User data:

• To bolster User and Service safety and security
• To streamline, quantify, and enhance User support
• For Company to plan and develop new products and Services
• To keep Users informed and engaged with Company Services and opportunities
• In connection with legal proceedings

Because Company takes User's PII seriously and understands the value and trust Users place in Company's use and protection of PII, Company does not sell or share PII with third parties for their direct marketing, except with user's consent.

More specifically, Company uses the data it collects for purposes including:

1. Providing services and features.

Company uses data to provide, personalize, and optimize Services. This includes using data to:

• Create and maintain User accounts
• Request quotes from, and allow Users to match with, third-party brokers, carriers and/or commercial drivers
• Track shipments made through Company Services, including data obtained en route to determine detention payments, safety and efficiency metrics, and other Service data
• Communicate to Users, including information related to shipment progress and estimated delivery times
• Customize and optimize Company Services, such as developing new features and to provide or recommend shipments, features, content, and advertisements
• Offer, process, or facilitate Service payment(s)
• Monitor and address Company IT problems, including software issues and operational problems; to conduct data analysis, testing, and research; and to monitor and analyze usage and activity trends

2. Safety and security.

Company uses data to help safeguard our Services and Users. This includes:

• Combating fraud, theft, and other illegal or unprofessional activity by using device, location, profile, usage, and other data
• Authenticating users
• Developing and implementing safety features

3. User support.

Company uses User provided information (including support call recordings with User notice and the consent) to provide User support, including:

• Minimizing wait times and optimizing resolution success by directing User questions and concerns to appropriate Company support personnel
• Investigate and address user concerns
• Monitor and improve User support responses and processes

4. Research and development.

Company may use data to improve User experience, such as using data testing, research, analysis, and product development. Doing so allows Company to improve and enhance the safety and security of our Services, develop new Services, and facilitate financial transactions involving our Services.

• Marketing.

  Company may market Services to Users from collected data. Marketing may include communications about Company Services, features, promotions, sweepstakes, studies, surveys, news, updates, and events. We may use the data we collect to personalize the marketing communications (including advertisements) that we send, including based on User location, past use of Company's Services, and User preferences and settings.

• Non-marketing.

  Company may use collected data to generate User receipts; inform Users of any amendments to Company terms, services, or policies; or send other communications that aren't for Service marketing purposes for Company or our Affiliates.

• Legal proceedings and requirements.

  Company may use collected data to review or address claims or disputes relating to use of Company’s Services, or as otherwise allowed by applicable law, or as requested by regulators, government entities, and official inquiries.

5. Cookies and third-party technologies

Company and Affiliates may use cookies or other identification technologies in mobile applications, websites, emails, and online ads. These technologies may be used for purposes described in this notice.

Cookies are small amounts of data stored on browsers or devices by websites, apps, online media, and advertisements. Generally, Company and Affiliates use this information to help understand the online behaviors and interests of people who interact with our Services. More specifically, Company uses cookies and similar technologies for purposes including:

• Authenticating Users
• Automatically applying User settings and preferences
• Marking research and analytics, including Service content popularity
• Delivering and measuring the effectiveness of advertising campaigns
• Analyzing online traffic and trends

We may also allow third parties to provide audience measurement and analytics services for us, to show and promote Company advertisements across the Internet, and to track and report on the performance of those advertisements. These entities may use cookies, web beacons, SDKs, and other technologies to identify the devices used by visitors to our websites, as well as when they visit other online sites and services.

V. DATA SHARING AND DISCLOSURE

Company's Services and features may require data sharing with other Users or at a User's request. We may also share data with Affiliates or other entities for legal reasons or in connection with claims or disputes.

Company may share the data we collect:

1. With other Users or third parties

This includes sharing data with other Users or with third parties who require, request, or use such data in connection with Services arranged or performed by Company. We may also share commercial driver's names, vehicle license numbers, vehicle truck numbers, and location with other Users or third parties such as operators of a receiving facility. We may also share their vehicle truck number and vehicle license number with third parties, such as a pickup facility. We may also share carrier's names with other Users.

2. At User's request

Company may share data:

• With other Users related to Company Services that require data sharing.
• With third parties in connection with Company partnerships or promotions with those third parties. This may include, for example, other services, platforms, apps, or websites that integrate with our APIs; those with an API or service with which we integrate; or other Company business partners and their users in connection with promotions, contests, or specialized services. Any such data used or obtained by those third parties is subject to their privacy notices, and Users should refer to those notices for more information on the handling of their data.

3. With the general public

User generated data, such as questions or comments submitted through public forums (including blogs and social media pages), may be viewable by the public, including any personal data included in the questions or comments submitted by a User, or other features of the Service(s) that are viewable by the general public.

4. With Company affiliates and third parties

Company may share data with Affiliates for Company to provide Services or conduct data processing on our behalf, or for data centralization and/or logistics purposes. Company may also share data with third parties with whom Users have authorized data, for example other apps or websites that integrate with our API or services, or those with an API or service with which we integrate.

5. With Company service providers and business partners

Company may provide User data to consultants, research firms, vendors, marketing , partners and other service providers or business partners, including:

• Payment processors and facilitators
• Cloud storage providers and facilities
• Marketing providers and services, including social media advertising services
• Data analytics providers
• Research partners, including those engaged by Company or on Company's behalf to perform surveys or research projects
• Security and safety vendors that assist Company safeguard its mobile applications
• Industry and legal professionals, including consultants, lawyers, accountants, and other service providers

6. For legal reasons in the event of a dispute

Company may provide User data if Company knows or believes such disclosure is required by applicable law, regulation, operating license or agreement, legal process or governmental request, or where the disclosure is otherwise appropriate due to safety or similar concerns.

By means of illustration, but not limitation, such disclosure may including sharing User data with law enforcement officials,public health officials,other government authorities, or other third parties as necessary to enforce Company's Terms and Conditions, agreements, or other olicies to protect Company's rights or property or the rights, safety, or property of others; or in the event of a claim or dispute relating to the use of our Services. Additionally, and more specifically, where a User utilizes uses another person's credit card, we may be required by law to share that User's personal data with the owner of that credit card.

Finally, Company may disclose User data, to the extent permitted by law, connection with or during negotiations of, any merger, sale of Company assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or into another company.

7. Through social media sharing

Company Services may integrate with online and social media applications to allow Users to share actions they take on Company Services with other apps, sites, or media, and vice versa. Users that engage with such features enable the sharing of data with others, depending on User settings in and from their social media service. Users are encouraged to review each social media service's separate privacy notices for additional information on how those services handle User data privacy.

8. With consent

Company may share User data other than as described in this notice if the User provides written consent.

VI. DATA RETENTION AND DELETION

Company stores User data for the purposes above indefinitely, so long as such data is necessary for or facilitates Company and/or User's purposes described above. Additionally, Users may delete their accounts at any time. Upon account deletion, Company may retain User data only to comply with legal or regulatory requirements or for the reasons stated in this policy.

Company retains User data for so long as the data fulfills the purposes described above. As such, Company may retain different sets of User data for different periods of time - depending on the category of User to whom the data relates, the type of data, and the purposes for which we collected the data.

Users may request to delete their account at any time by emailing [[email protected]] At that time, Company will delete User's account and data, unless they must be retained due to legal or regulatory requirements, for purposes of safety, security, and fraud prevention, or because of an issue relating to the User's account such as an outstanding credit or an unresolved claim or dispute.

VII. GROUNDS FOR PROCESSING

Company collects and utilizes User data where Company has lawful grounds to do so. These include processing User personal data to provide Company Services, for purposes of Company's legitimate interests or those of other parties, to fulfill our legal obligations, or based on consent.

Company collects User data only when it may lawfully do so. Legal grounds vary by User location, but generally include processing personal data:

1. To provide requested services and features

For Company to provide Services, we must collect and use certain User data, including:

• Profile data, to establish and maintain accounts; verify identity; communicate about User's
• booked loads, trips, and accounts; and enable Users to make payments or receive earnings
• Location data, to monitor transport and assist with navigation
• Usage data to maintain and enhance Company's services
• User-provided contacts, such as names, email addresses, and location addresses
• Transaction information
• Information relating to customer support

2. For Company's legitimate business interests or the interests of third parties

Company may use User data to maintain and enhance safety and security. This includes using data to bar bad actors from using Company Services after they have engaged in inappropriate or dangerous behavior in violation of the law or Company's terms of service.

Company may also use User data to combat fraud; improve Services, direct marketing, for research and development purposes; and to enforce Company's Terms and Conditions. Company may also use personal data to the extent necessary for the interests of other people or the general public, such as in connection with legal or insurance claims, and to protect the rights and safety of others.

3. To fulfill Company's legal obligations

Company is subject to the laws and regulations in the jurisdictions in which it operates that may require it to collect, process, retain, and disclose user's personal data. We collect and use personal data to comply with such laws.

Company may also share data with law enforcement regarding criminal acts or threats to public safety, or requests by third parties pursuant to legal processes. For more information about such sharing, please see Company's Guidelines for Law Enforcement Authorities - United States, Guidelines for Law Enforcement Authorities - Outside the US, and Guidelines for Third Party Data Requests and Service of Legal Documents.

4. With consent

Company may collect and utilize User data upon User consent, such as voluntary surveys.

Users may revoke their consent at any time. However, following revocation, Users may not have access to or be able to utilize Company Services or feature that require collection or use of that personal data.

VIII. CHOICE AND TRANSPARENCY

Users can access and control Company collected data in several ways, including:

• In-app settings
• Device permissions
• Marketing opt-outs

Company also enables Users to request access to or copies of their data, changes or updates to their vaccounts, deletion of their accounts, or that Company restrict its processing of User data.

1. Device permissions

Common mobile phone operating systems, including iOS and Android, prohibit applications fromvaccessing types of data without the device owner's permission. Each operating system has different methods that device owners provide or revoke application consent. For instance, iOS (forvApple iPhone and related devices) notifies Users the first time the Company app requests permission to access certain types of data, and that prompt allows Users to consent or deny Company application permissions. Similarly, Android devices notify Users of application permission requests the first time Users open Company's application, and construes User's continued use of the application as a grant of such permission.

• Location data

  Company's application seeks User's precise location from the permission system on their mobile operating system. If Users permit this system permission, they can later disable it by changing the location settings on their mobile device. However, revoking location information may prevent Users from engage in Company Services through the mobile application. Additionally, disabling precise location data will not necessarily prevent Company from obtaining or calculating User's approximate location from their IP address to personalize the content of the websites and/or app.

• Important information about device permissions

  Company's application collects User's location data for the purposes described above. This permission allows Company to collect this data when the Company app is running in the foreground (app open and on-screen) or background (app open but not on-screen) of User's mobile device.

  Carriers and commercial drivers cannot use the Company app if they do not permit location data collection. Likewise, for safety reasons, commercial drivers may have limited access to Company's application if their location settings and data indicate they are driving. Users that wish to disable Company's in-app location data settings, and thus limit (but not necessarily eliminate) Company's ability to collect precise location data should follow these steps:

  On iOS

  Settings → Privacy → Location Services → Company → choose Never

  On Android (current version)

  Settings → Apps → Company → scroll to Permission → toggle Location

  On Android Lollipop (5.1) and earlier

  Settings → Location → toggle Off

  • Notifications: account and updates

    Company provides Users with account related notifications, account activity and booked loads. These notifications are a necessary part of using the Company application and cannot be disabled.

  • Notifications: potential loads and news

    Users may permit push notifications about potential loads and news from Company by allowing application push notifications. These notifications may be changed under User's application settings on iOS or Android.

2. Marketing opt-outs

Users may opt out of Company marketing emails or other messages by following the unsubscribe instructions set forth in those messages. Follow opt-out, Company may still Users non-promotional communications and information, including information about their account, services requested, or our ongoing business relations.

3. User data requests

Users have a wide variety of ways to learn about, control, and submit requests, questions, and comments about Company's data use, retention, and this Policy. Users may contact Company by email at [[email protected]]. Users are encouraged to contact Company at the aforementioned email to provide feedback, ask questions, or request the following:

• Accessing data: Explanation of the data Company collects from Users and how we use it.
• Receiving data: Copies of data Company collected from Users with their consent or as necessary to provide Services.
• Changing or updating data: Requests to change or update User data, including data they know or believe is inaccurate or incomplete.
• Deleting data: Deletion of User's account at any time by emailing [[email protected]]
• Objections, restrictions, and complaints: Requests for Company to cease using all or some of User's personal data, or that we limit our use of such data. Company may continue to process data after such objection or request to the extent required or permitted by law.

In addition, depending on their location, users may have the right to file a complaint relating to Company's handling of their personal data with the applicable data protection authority.

Questions, comments, or complaints about Company's data practices can be submitted here - [[email protected]]

IX. UPDATES TO THIS POLICY

Company may occasionally update this Policy. If Company makes significant changes, we will notify Users in advance through the Company application or by other means, such as email. After such notice, continued use of our Services will be understood as consent to the updates to the extent permitted by law.

We encourage Users to periodically review this Policy for the latest information on our privacy practices.