Dollar Traq Privacy Policy

Table of Contents

1. Scope and Our Roles
2. Information We Collect
3. Driver App Disclosures (Location, Camera, Identity)
4. Connected Mailboxes and Google API Services
5. Voice Calls, AI Voice Agents, Call Recording, and Text Messages
6. How We Use Information
7. Artificial Intelligence, Trust Scores, and Review Rights
8. How We Disclose Information
9. Affiliate Brokerage Firewall
10. Cookies, Analytics, and Tracking Technologies
11. Data Retention
12. Biometric Information Privacy Notice and Retention Schedule
13. Security
14. International Transfers and Processing in India
15. Your Privacy Rights and Choices
16. Additional Disclosures for U.S. States
17. Canada and Other Jurisdictions
18. Children
19. Third-Party Services and Links
20. Communications Preferences
21. Changes to This Policy
22. Contact Us

1. Scope and Our Roles

Who this Policy covers. This Policy applies to personal information about:

• Customers and Authorized Users — freight brokers, third-party logistics providers, shippers, and their employees, agents, and contractors who purchase or use the Services ("Customers").
• Carriers — motor carriers, owner-operators, dispatchers, and their personnel who onboard with a Customer, claim a carrier profile, receive rate confirmations, respond to verification requests, or otherwise interact with the Services ("Carriers").
• Drivers — individuals who use the Dollar Traq Driver App or receive tracking, check-in, or one-time-passcode messages from us ("Drivers").
• Insurance Producers — insurance agents, brokers, and carriers we contact to verify a Carrier's coverage.
• Shippers, consignees, and facility contacts whose information appears in load documents, bills of lading, or tracking links.
• Website visitors, prospects, and people who communicate with us, including callers to Dollar Traq-provisioned phone numbers.

Our roles. We act in two capacities:

• As a business (controller). We decide how and why to process information when you interact with our website, register an account, call or message us, use the Driver App, claim a carrier profile, or when we compile carrier intelligence from public regulatory records and other sources. This Policy governs that processing.
• As a service provider (processor). When a Customer uploads, connects, or generates data through the Services — for example, a broker's shipment records, connected mailbox content, carrier packets collected on the broker's behalf, or a broker's rate history — we process that data on the Customer's instructions under our Terms of Service and Data Processing Addendum. The Customer's own privacy policy governs its use of that data. If you have questions about data a Customer has provided to us, or wish to exercise rights over it, please contact that Customer; we will assist as their service provider.

Publicly available information. A substantial portion of the carrier data we process is drawn from public government records, including Federal Motor Carrier Safety Administration ("FMCSA") registration, authority, insurance filing, inspection, crash, and safety measurement data, and similar federal and state sources. Some privacy laws exclude lawfully obtained public records from the definition of personal information. We nevertheless handle such data with the safeguards described in this Policy.

2. Information We Collect

2.1 Information you provide to us

2.2 Information we collect automatically

• Device and usage data — IP address, browser type, operating system, device identifiers, mobile network, language, pages viewed, features used, clicks, timestamps, referring pages, crash logs, and diagnostic data.
• Driver App telemetry — precise geolocation (including background location during an active trip), speed and heading derived from location, motion and activity state, device time, battery and connectivity status, camera captures with embedded GPS and time watermarks, and app events (check-in, loaded, arrived, delivered). See Section 3.
• Browser extension data — When you install the Dollar Traq browser extension, it reads carrier identifiers (MC, DOT, and carrier names) on the transportation-management-system page you are viewing in order to display trust and compliance information. The extension does not collect your browsing history, page content unrelated to carrier identification, or keystrokes.
• Communications metadata — For emails, calls, and text messages sent or received through the Services: sender, recipient, phone numbers, timestamps, duration, delivery status, and caller line-type and carrier information used for fraud detection (for example, whether a number is a VoIP line).
• Cookies and similar technologies — described in Section 10.

2.3 Information we receive from other sources

• Government and regulatory sources — FMCSA (including its registration, licensing and insurance, safety measurement, inspection, crash, and out-of-service data), the U.S. Department of Transportation, the National Highway Traffic Safety Administration (VIN decoding), state agencies (for example, California Air Resources Board registrations and Secretary of State filings), court and bankruptcy records, and sanctions and watch lists (for example, OFAC).
• Insurance sources — insurance producers, insurers, and public insurance filings, including certificates of insurance and responses to our verification emails.
• Customers — carrier contacts, performance history, incident reports, documents, and shipment data that a Customer uploads or connects.
• Telematics and ELD providers — with the Carrier's authorization, location and vehicle data from electronic logging devices and telematics platforms, either directly or through a telematics aggregation partner.
• Transportation management systems, load boards, and rate-data providers — shipment, capacity, posting, and market-rate data that a Customer connects to the Services.
• Email and calendar providers — the content of mailboxes a Customer connects (Section 4).
• Identity verification vendor — verification outcomes, document authenticity results, and fraud signals (Section 12).
• Payment processor and KYC/KYB vendors — identity verification results, account status, risk signals, and transaction data for DT Pay.
• Fraud-prevention and data-enrichment partners — signals about phone numbers, email domains, addresses, and known fraud patterns, and business contact enrichment.
• Other users — for example, a Carrier's identity-theft report about its own MC number, or a Customer's report about a load.

2.4 Sensitive information

Depending on how you use the Services, we may process the following categories that some laws treat as sensitive: precise geolocation (Drivers, Carrier vehicles); government identification numbers and images (Drivers and Carrier principals, via our vendor); biometric information (via our vendor, Section 12); Social Security or taxpayer identification numbers (W-9 collection for Carriers); financial account information (DT Pay payouts, processed by our payment processor); and account log-in credentials. We use sensitive information only to provide the specific Service for which it was collected, to verify identity, to prevent fraud, and as otherwise permitted by law. We do not use sensitive information to infer characteristics about individuals, and we do not sell it.

3. Driver App Disclosures (Location, Camera, Identity)

The Dollar Traq Driver App is built to prevent freight fraud and to document a shipment from pickup through delivery. Because of this, it collects more data than a typical app, and we want to be direct about what it does.

Precise and background location. With your permission, the Driver App collects your device's precise location, including when the app is closed or not in use, from the time a load is assigned to you until the load is completed and closed out by the broker, plus a short close-out window. Location is used to: provide live tracking to the broker (and, if the broker chooses, to the shipper or consignee through a tracking link); confirm arrival at pickup and delivery using geofences; detect route deviations and location anomalies that indicate fraud or theft; time-stamp and geo-stamp photographs; and calculate ETAs. The app requires "Always" (background) location permission to function during an active trip. You may withdraw permission at any time in your device settings, but the app will not allow a trip to progress without it, and the broker who assigned the load may be unable to work with you on that load. We do not collect your location when no load is active, and we do not use Driver location for advertising.

Camera and photographs. The Driver App uses your camera to capture live photographs of the VIN, tractor, trailer, cargo, bills of lading, seals, damage, and proof of delivery. To prevent tampering, the app allows live captures only; it does not access your photo gallery, and each capture is watermarked with GPS coordinates and a timestamp burned into the image. Photographs may be processed with optical character recognition and AI to extract text (such as VIN or BOL numbers).

Identity verification. Before a Driver's first load, and periodically thereafter or when a fraud signal appears, you may be asked to complete identity verification with our specialist vendor, which compares a live selfie to your government-issued ID and checks that the ID is authentic. We receive the verification outcome, document data fields we request, and fraud signals; the biometric processing is described in Section 12.

Phone number matching. Loads are matched to Drivers by mobile phone number. Brokers provide driver phone numbers when assigning a load; we use that number to deliver one-time passcodes and to associate your app session with the correct shipment.

Equipment verification. The app may require VIN and equipment photographs before pickup so the broker can confirm the truck and trailer at the shipper match the equipment the carrier represented and that the equipment is insured.

Who sees Driver App data. Driver App data is shared with the broker that assigned the load, with the carrier you drive for, and, at the broker's election, with the shipper, consignee, or the broker's transportation management system. Location history is also used, in de-identified or aggregated form, to improve fraud detection and ETA models.

4. Connected Mailboxes and Google API Services

Customers may connect business email accounts (for example, Google Workspace or Microsoft 365) so that Fleetra, Vault, and related agents can read and draft shipment quotes, carrier correspondence, proof-of-delivery and invoice emails, insurance verification replies, and tracking updates. When a mailbox is connected:

• We access only the mailbox scopes the Customer authorizes, through an email-integration provider, and we encrypt access tokens at rest.
• We use mailbox content solely to provide and improve the features the Customer has enabled (for example, classifying a shipper's quote request, extracting a rate confirmation, matching a POD to a load, or drafting a reply for human approval).
• We do not use mailbox content for advertising, and we do not sell it.
• Humans at Dollar Traq do not read mailbox content except (a) with the Customer's explicit consent for support or troubleshooting, (b) for security review, (c) to comply with law, or (d) where the data has been aggregated or de-identified for internal operations.
• We do not use data obtained through Google APIs to develop, improve, or train generalized or non-personalized artificial-intelligence or machine-learning models.
• We do not transfer mailbox data to third parties except as necessary to provide or improve the connected feature, for security, to comply with law, or as part of a merger or acquisition with notice.

Dollar Traq's use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. A Customer may disconnect a mailbox at any time from the Integrations settings, which revokes our access; retained extractions are handled under Section 11.

5. Voice Calls, AI Voice Agents, Call Recording, and Text Messages

Dollar Traq-provisioned phone numbers. Customers may use phone numbers we provision to post loads, receive carrier calls, and run inbound carrier screening. Calls to these numbers may be answered by an AI voice agent (such as Scout) acting on the Customer's behalf. At the start of such calls, the caller is told that they are speaking with an automated assistant and that the call is recorded. If you do not consent, you may hang up or ask to be transferred to a person where available.

What we collect on calls. Caller phone number and line type, call audio, transcripts, extracted data (for example, the carrier's MC number, equipment, rate offer, and availability), and AI-generated summaries. We use this to verify the caller against our carrier database, check for fraud indicators, record rate offers, and surface a summary to the Customer. Recordings and transcripts are shared with the Customer whose number was called.

Outbound calls and texts. Customers control outbound calls and text messages sent through the Services and are responsible for obtaining any consent required by law. Dollar Traq sends the following messages directly: one-time passcodes for login and Driver check-in, security and account alerts, verification requests to insurance producers, and transactional notices about a shipment or payment. Message frequency varies. Message and data rates may apply. Reply STOP to opt out of a text program and HELP for help. Consent to receive marketing texts is never a condition of purchase.

No sharing of mobile opt-in data. Mobile phone numbers and text-messaging opt-in data and consent are not shared with third parties or affiliates for marketing or promotional purposes.

Recording laws. Some states require the consent of all parties to record a call. Our voice agents announce recording at the start of calls. If you use your own telephony with our Services, you are responsible for providing required notices.

6. How We Use Information

We use personal information to:

• Provide the Services — create and administer accounts; build and maintain carrier profiles; compute compliance status and trust scores; run onboarding packets and e-signatures; verify insurance with producers; track loads; verify Drivers and equipment; operate voice and messaging channels; draft and send communications on a Customer's instruction; process payments through DT Pay; and integrate with the Customer's TMS, ELD, load board, and email systems.
• Prevent fraud, theft, and abuse — detect identity theft, double brokering, chameleon carriers, spoofed domains, VoIP-originated calls, location anomalies, altered documents, and duplicate or synthetic identities; share fraud signals within the Dollar Traq network as described in Section 8.
• Verify identity and eligibility — including Know-Your-Business and Know-Your-Customer checks required for DT Pay and sanctions screening.
• Communicate — send transactional, security, and service messages; respond to support requests; and, with your consent where required, send marketing communications.
• Improve and develop the Services — analyze usage, test features, train and evaluate our proprietary scoring, extraction, matching, and fraud models (subject to the restrictions in Sections 4 and 7 and our Terms of Service), and produce aggregated statistics.
• Personalize — remember your settings, guardrails, and preferences.
• Comply with law and protect rights — meet regulatory, tax, and recordkeeping obligations (including broker recordkeeping rules), respond to lawful requests, enforce our Terms, and protect the safety and property of users, Dollar Traq, and the public.

Legal bases. Where a law requires a legal basis, we rely on performance of a contract, our legitimate interests (operating and securing a fraud-prevention platform, improving the Services, and marketing to businesses), compliance with legal obligations, and consent (for example, for background location and biometric verification).

7. Artificial Intelligence, Trust Scores, and Review Rights

The Services use artificial intelligence, including large language models provided by third-party model providers under contracts that prohibit them from training on your data, and proprietary rules-based and statistical models.

Trust scores and compliance status. Our Sentinel engine generates carrier trust scores, tiers, and hard-stop flags using exposure-normalized safety, inspection, crash, authority-history, insurance, and identity data, together with data-confidence caps and rules aligned with published FMCSA thresholds. A score is our opinion about risk based on the data available to us. It is not an FMCSA safety rating, not a determination that a carrier is safe or unsafe, and not a credit, employment, or insurance eligibility decision. Customers configure their own thresholds and make their own decisions about whom to hire.

Human decision-making. Our agents are designed with human-in-the-loop controls: they draft, flag, and recommend; a Customer's personnel approve actions that affect a third party, such as tendering a load, sending a counteroffer, or releasing a payment. We do not make legally significant decisions about individuals solely by automated means.

Carrier review and dispute. If you are a Carrier or Driver and believe that a score, status, flag, or report about you is inaccurate, incomplete, or based on an error, you may request a review by emailing disputes@dollartraq.com with your MC or DOT number, a description of the item, and any supporting documentation. We will acknowledge your request within 5 business days, investigate, correct data we determine to be inaccurate, add a notation where a matter is contested, and tell you the outcome within 30 days (extendable once by 30 days for complex matters). Public government data can only be corrected by the agency that maintains it; we will tell you where to go. We may also notify Customers who accessed the item.

8. How We Disclose Information

We disclose personal information to the following categories of recipients:

• Customers. Carrier, Driver, insurance, and shipment information is disclosed to the Customer(s) with whom you are onboarding, hauling, corresponding, or transacting, at your direction or as necessary to provide the Services. A broker sees the Carrier packet completed for that broker, that Carrier's public compliance profile, verification results, tracking data for its own loads, and DT Pay payment status for its own transactions.
• Carriers and Drivers. Customers' business contact details, load details, rate confirmations, and payment information are disclosed to the Carrier and Driver assigned to a load.
• Insurance Producers. A Carrier's identifying information, VINs, and the requesting broker's name are disclosed to the Carrier's insurance producer to verify coverage and request certificates.
• Service providers and subprocessors. Cloud hosting and storage (United States regions), email-integration, telephony, speech and voice, AI model providers, identity verification, payment processing and KYC, telematics aggregation, VIN decoding, analytics, customer support, e-signature, and security vendors. Each is bound by contract to use information only to perform services for us and to protect it. A current list of subprocessors is available at www.dollartraq.com/subprocessors or on request.
• Integration partners at your direction. When a Customer connects a TMS, ELD, load board, factoring, accounting, or other third-party system, we exchange data with that system as the Customer instructs. The third party's privacy policy governs its use.
• Network fraud-prevention signals. To protect all users, we may make certain fraud-relevant signals available to Customers across the Dollar Traq network — for example, that an MC number has been reported by multiple brokers for double brokering, that a Carrier reported its own identity as stolen, that a phone number or email domain is associated with impersonation, or that a Carrier's authority, insurance, or safety status changed. Incident reports submitted by Customers are attributed to the reporting Customer only where that Customer consents; the subject Carrier may respond and dispute under Section 7.
• Payment processor. DT Pay transactions are processed by Stripe, Inc. and its affiliates, which act as the licensed custodian of funds. Stripe collects and processes identity, bank, and transaction information under its own privacy policy and the Stripe Connected Account Agreement.
• Affiliates. Dollar Traq's subsidiaries and affiliates, including our engineering and business-development affiliate in India, may access personal information to provide services to us under this Policy and binding intercompany agreements — subject to the firewall in Section 9.
• Professional advisors, auditors, and insurers.
• Legal, safety, and enforcement. Courts, regulators, law enforcement, and other parties when we believe disclosure is required by law or legal process, necessary to investigate or prevent fraud or theft (including cargo theft), necessary to enforce our Terms or protect the rights, property, or safety of Dollar Traq, our users, or the public, or requested by a governmental authority.
• Corporate transactions. In connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business, subject to customary confidentiality and, where required, notice.
• With your consent or at your direction.
• De-identified and aggregated data that cannot reasonably be linked to you, which we may use and disclose for any purpose, including benchmarks, industry reports, and product improvement.

We do not sell personal information, and we do not disclose it to third parties for their own direct marketing. Our marketing website uses advertising cookies that may qualify as "sharing" for cross-context behavioral advertising under some state laws; you can opt out as described in Sections 10 and 15. We do not sell or share sensitive personal information, precise location, or biometric information for any purpose.

9. Affiliate Brokerage Firewall

Dollar Traq's founders have owned and operated freight brokerage and forwarding businesses. Customers reasonably want assurance that their shipper relationships, lanes, rates, and carrier networks will never be used to compete with them. We commit that:

• Customer Data (as defined in our Terms of Service), including shipper identities, lanes, rates, margins, carrier lists, and mailbox content, is not disclosed to, accessed by, or used for the benefit of any freight brokerage, forwarder, or carrier owned, operated, or controlled by Dollar Traq's founders, officers, or affiliates.
• Access to Customer Data is restricted to Dollar Traq personnel with a need to know for support, engineering, and security, is logged, and is reviewed as part of our SOC 2 controls.
• Any affiliated brokerage that uses the Services is treated as an ordinary Customer with the same segregation from every other Customer's data.
• Aggregated, de-identified benchmarks are constructed so that no individual Customer's non-public pricing or shipper relationships can be identified or reverse-engineered.

10. Cookies, Analytics, and Tracking Technologies

We and our vendors use cookies, pixels, local storage, and software development kits to operate the Services, keep you signed in, remember preferences, measure performance, detect fraud, and, on our marketing website only, measure and target advertising. Categories:

• Strictly necessary — authentication, session management, security, load balancing.
• Functional — preferences, language, feature settings.
• Analytics — usage measurement and product analytics (for example, page views and feature adoption).
• Advertising (marketing website only) — cookies from advertising and social-media platforms used to measure campaigns and show Dollar Traq ads on other sites.

You can manage cookies through the cookie banner or preferences link on our website and through your browser settings. We honor Global Privacy Control signals as an opt-out of sale/sharing and targeted advertising for the browser sending the signal. We do not respond to "Do Not Track" signals, for which there is no common standard. Opting out of advertising cookies does not stop you from seeing ads; it stops them from being personalized based on your visit to our site.

11. Data Retention

We keep personal information only as long as needed for the purposes described in this Policy, to satisfy legal, regulatory, tax, accounting, and recordkeeping requirements (including broker and payment recordkeeping obligations), to resolve disputes, and to enforce agreements. Typical periods:

When a Customer terminates, we return or delete Customer Data as described in the Terms of Service, except for copies retained in routine backups (purged on the backup cycle) and records we must keep by law.

12. Biometric Information Privacy Notice and Retention Schedule

This Section is our written, publicly available biometric policy and retention schedule under the Illinois Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act, the Washington biometric identifier law, and similar laws.

What is collected and by whom. To verify a Driver's or Carrier principal's identity and prevent fraud, our identity verification vendor captures a live selfie and images of a government-issued photo ID and generates a facial geometry comparison to confirm that the person presenting the ID is its holder and is physically present (liveness). The scan of facial geometry may be a "biometric identifier" and the data derived from it "biometric information" under these laws. Dollar Traq receives the verification outcome (pass, fail, referred), document data fields, and fraud signals. Dollar Traq does not itself create, store, or receive facial geometry templates.

Purpose. Identity verification, fraud prevention, and security, at the request of the Customer who assigns the load or onboards the Carrier.

Consent. Before any biometric identifier is captured, you are informed of the specific purpose and retention period and asked to provide a written release (electronic acceptance) on the verification screen. You may decline; if you decline, you may not be able to complete verification, and the Customer may decline to work with you on that basis.

Retention and destruction. Biometric identifiers and biometric information are permanently destroyed when the initial purpose for collection has been satisfied, and in all cases no later than three (3) years after your last interaction with the Services or the completion of verification, whichever occurs first, unless a shorter period is required by law or a longer period is required by a valid warrant or subpoena. Our vendor is contractually required to apply this schedule and to destroy data on our instruction. Destruction is performed using secure deletion methods that render the data unrecoverable.

No sale; limited disclosure. We do not sell, lease, trade, or otherwise profit from biometric identifiers or biometric information. We do not disclose them except (a) to our verification vendor and its subprocessors to perform verification, (b) with your consent, (c) to complete a transaction you requested, or (d) as required by law, warrant, or subpoena.

Security. Biometric data is stored and transmitted using a reasonable standard of care within our industry and at least as protective as the manner in which we store other confidential and sensitive information, including encryption in transit and at rest and role-based access.

13. Security

We maintain an information-security program with administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest, encrypted storage of integration tokens, role-based access controls with multi-factor authentication, private cloud storage with short-lived signed links for documents, logging and monitoring, vulnerability management, secure development practices, background checks and confidentiality obligations for personnel, and incident-response procedures. A SOC 2 examination of our controls is in progress; a bridge letter is available to Customers under NDA. No system is perfectly secure, and we cannot guarantee absolute security. If we confirm a breach of security affecting your personal information, we will notify affected Customers without undue delay and, where required, notify individuals and regulators in accordance with applicable law. Report suspected vulnerabilities to security@dollartraq.com.

14. International Transfers and Processing in India

We are headquartered in the United States and store personal information on servers located in the United States. Our engineering, product, and business-development personnel, including those employed by our affiliate in India, may access personal information from India under binding intercompany agreements, access controls, logging, and the security program described in Section 13. By using the Services you acknowledge that your information may be accessed from and processed in the United States and India. If you are located outside the United States, the laws of the United States and India may differ from those of your jurisdiction; where required by law, we implement appropriate transfer safeguards.

15. Your Privacy Rights and Choices

Regardless of where you live, you may:

• Access the personal information we hold about you and receive a copy in a portable format.
• Correct inaccurate or incomplete information.
• Delete your personal information, subject to exceptions (for example, records we must keep for fraud prevention, legal compliance, recordkeeping, or to complete a transaction).
• Opt out of marketing communications, cookie-based advertising, and any sale or sharing of personal information (we do not sell).
• Limit use of sensitive personal information to the purposes permitted by law.
• Withdraw consent for location or biometric processing (Sections 3 and 12), understanding that certain features will stop working.
• Dispute a score, status, or report about you (Section 7).
• Appeal a decision we make on your request by replying to our response; we will respond to appeals within 45 days and tell you how to contact your state's Attorney General if you remain unsatisfied.
• Not be discriminated against for exercising your rights.

How to exercise rights. Email privacy@dollartraq.com, use the privacy request form at www.dollartraq.com/privacy-request, or write to Dollar Traq Corp, Attn: Privacy, Suite 304, 1560 Wall Street, Naperville, IL 60563. We will verify your identity using your account credentials, a one-time code to your email or phone on file, or other reasonable means, and we may ask for information sufficient to locate your records. An authorized agent may submit a request with written proof of authority; we may still verify directly with you. We respond within 45 days (extendable once by 45 days with notice). Requests are free unless manifestly unfounded or excessive.

Requests about Customer Data. If your information was provided to us by a Customer (for example, a broker that onboarded you), we will forward your request to that Customer and assist them in responding, unless the data is also held by us as a business, in which case we will respond directly.

16. Additional Disclosures for U.S. States

16.1 California Notice at Collection and Privacy Rights

This section supplements the Policy for California residents and serves as our notice at collection under the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA").

We retain each category for the periods in Section 11. We do not use or disclose sensitive personal information for purposes other than those permitted by Cal. Code Regs. tit. 11, § 7027(m). We do not knowingly sell or share the personal information of anyone under 16. California residents have the rights described in Section 15, including the right to know, delete, correct, opt out of sale/sharing, limit use of sensitive personal information, and non-discrimination. To opt out of sharing for cross-context behavioral advertising, use the "Your Privacy Choices" link on our website or enable Global Privacy Control. California's "Shine the Light" law: we do not disclose personal information to third parties for their direct marketing purposes.

Notice of financial incentive. We do not offer financial incentives in exchange for personal information.

16.2 Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states with comprehensive privacy laws

To the extent these laws apply to our processing (many exclude business-to-business and employment data and apply only above volume thresholds), residents have the rights to access, correct, delete, obtain a portable copy, opt out of targeted advertising, sale, and profiling in furtherance of decisions that produce legal or similarly significant effects, and appeal a denial. Where required, we obtain consent before processing sensitive data, and we honor universal opt-out signals such as Global Privacy Control. Oregon residents may request a list of specific third parties to which we have disclosed their personal data. Minnesota residents may question the result of profiling and request the personal data used. Exercise these rights as described in Section 15.

16.3 Texas and Washington biometric laws; Illinois BIPA

See Section 12. Texas residents: we do not sell, lease, or disclose biometric identifiers except as permitted by Tex. Bus. & Com. Code § 503.001, and they are destroyed within a reasonable time and not later than the first anniversary of the date the purpose for collecting them expires, except as that statute otherwise permits. Illinois residents: we and our vendor comply with 740 ILCS 14, including informed written consent, no profit, and the retention schedule above.

16.4 Nevada

We do not sell covered information as defined by Nevada law. Nevada residents may submit a verified request to opt out of any future sale to privacy@dollartraq.com.

16.5 Washington My Health My Data Act

We do not collect consumer health data as defined by that Act.

17. Canada and Other Jurisdictions

Canada. If you are a Canadian Carrier or Driver hauling for a U.S. Customer, we collect, use, and disclose your personal information with your consent (express or implied by the onboarding or hauling relationship) for the purposes above, store and process it in the United States and India, and give you the rights of access, correction, and withdrawal of consent under PIPEDA and applicable provincial law. Commercial electronic messages are sent only with express or implied consent and include an unsubscribe mechanism.

United Kingdom, European Economic Area, and Switzerland. The Services are not directed to individuals in these regions. If we nonetheless process your personal data, you have the rights to access, rectification, erasure, restriction, portability, objection, and to lodge a complaint with a supervisory authority, and we transfer data under standard contractual clauses or another lawful mechanism.

India. Personal data of Indian residents processed by our affiliate is handled in accordance with the Digital Personal Data Protection Act, 2023, where applicable.

18. Children

The Services are intended for adults engaged in commercial transportation. We do not knowingly collect personal information from anyone under 18, and we do not direct the Services to children under 13. If you believe a child has provided us information, contact privacy@dollartraq.com and we will delete it.

19. Third-Party Services and Links

The Services link to and integrate with third-party websites, apps, and services (for example, load boards, ELD portals, TMS platforms, payment processors, and app stores). Their privacy practices are governed by their own policies. Downloads from the Apple App Store or Google Play are also subject to those platforms' terms and privacy policies.

20. Communications Preferences

You can opt out of marketing emails by clicking "unsubscribe" in any message or emailing privacy@dollartraq.com; opt out of text programs by replying STOP; and manage push notifications in your device settings. You cannot opt out of transactional and security messages (for example, one-time passcodes, fraud alerts, payment notices, and legal notices) while you maintain an account or an active load.

21. Changes to This Policy

We may update this Policy to reflect changes in law, technology, or our practices. We will post the updated Policy with a new "Last Updated" date and, for material changes, provide at least 30 days' notice by email to account holders or a prominent notice in the Services before the change takes effect. Changes do not apply retroactively to information collected under a prior version without your consent where consent is required.

22. Contact Us

Dollar Traq Corp
Attn: Privacy Office
Suite 304, 1560 Wall Street
Naperville, IL 60563, United States

Privacy requests and questions: privacy@dollartraq.com
Score, status, or report disputes: disputes@dollartraq.com
Security vulnerabilities: security@dollartraq.com
Legal notices: legal@dollartraq.com
Website: www.dollartraq.com