Your privacy is important to Truckstop.

1. PRIVACY POLICY

Last Updated: April 15, 2025

This privacy policy (“Policy”) explains how Internet Truckstop Group, LLC and our respective affiliates (collectively, “Truckstop”, “we”, “us” or “our”) collects, stores, uses, and discloses personal data about you, how we use it, how and when it may be shared, the rights and choices you have with respect to your personal data, how we communicate with you and how you can make requests or submit inquiries to us about your personal data.

CONTENTS

• What Does This Policy Cover
• How Is This Policy Updated
• Information We Collect
• How We Use Your Personal Data
• Disclosure of Personal Data
• How We Protect Your Personal Data
• Cookies and Other Information Collection Tools
• Social Media and Other Third-Party Links and Services
• Retention of Personal Data
• Your Privacy Rights and Choices
• Children’s Privacy
• International Data Transfers
• Contact Us
• Region Specific Terms

WHAT DOES THIS POLICY COVER

This Policy applies to personal data we collect, including personal data we collect through our interactions (collectively the “Sites”) in connection with products and services we provide you (and together with the Sites, the “Services”), and any other interactions you may have with us.

In this Policy, “personal data” means any information that identifies, relates to, describes, is reasonably capable of being associated with or reasonably can be used to identify an individual or household and other data that is linked to personal data or is otherwise defined as “personal data,” “personal information,” or “personally identifiable information” by applicable laws.

HOW IS THIS POLICY UPDATED

We may modify this Policy from time to time. If we make changes, we will revise the “Last Updated” date at the top of the Policy on our Sites. We encourage you to review this Policy each time you visit our Sites to stay informed of our privacy practices and the choices available to you.

INFORMATION WE COLLECT

The personal data we collect about you depends on how you interact with us or use our Services. Below, we describe the categories of personal data we collect and the sources of this information.

Information You Provide to Us

We collect personal data from you when you use our Services, send us an email, fill out a form, subscribe to our newsletter, respond to a survey or job posting, interact with us on social media, or otherwise communicate with us.

Types of personal data we may collect include:

• Contact information such as your name, email address, telephone number, and mailing address;
• Registration Information such as username and credentials, professional or employment related information, bank account number, and taxpayer identification numbers, username and email address, and credentials such as your password, during account creation;
• Government-issued identification such as social security number, driver’s license, passport, or state-issued identification number;
• Demographic Information such as age, gender, race, ethnicity, and similar demographic details;
• Payment Information such as your credit card or bank account number, which we may share with third-party payment processors as described in this Policy;
• Communications with us including through our online chat service, feedback, and survey responses;
• Content and files such as code, text, photographs, documents, or other files, including videos or recordings, you upload to our Service;
• Any additional Information that you choose to provide.

In some cases, we may also collect information you provide about others, such as when you are the administrator for your company’s account and you provide information about other personnel at your company. We will use this information to fulfill your requests and will not send communications to your contacts unrelated to your requests unless they separately create an account, engage with us or consent to receive communications from us.

Information Collected Automatically When You Interact With Us

We and our service providers may automatically collect and/or log personal data about you, your computer or mobile device, and your interaction over time with the Services, such as:

• Device information. We may collect information about your device(s) such as Internet Protocol (“IP”) addresses, browser type, domain names, access times, log information, error messages, device type, unique device identifiers, and other technical information such as protocol status and substatus, bytes sent and received and server information.
• Transaction Information. We may collect information when you conduct transactions through our Sites or otherwise purchase Services from us.
• Usage information. We may collect information about your use of the Services, such as the pages you viewed, the Services you used or interacted with, referring website addresses and details about any links or communications with which you interacted.
• Location Information. We may collect information about the location of your device each time you access or use our mobile application or otherwise consent to the collection of this information. For example, we may collect information about the location of your device when you use our mobile application to use our Services. For more details about the collection of location information and the choices you have to disable our ability to collect your location information, please see the “Your Privacy Rights and Choices” section below.
• Information Collected by Cookies and Other Tracking Technologies. Please see our cookie policy in the section “Cookies and Other Information Collection Tools” for more details on the information we and our service providers collect about you.

Information We Collect From Other Sources

We may also collect personal data about you from other sources, including publicly available databases and third parties, and combine that with information we collect through the Services. For example, we may use information from LinkedIn to update information about you in our contact database.

If you provide or connect your third-party account credentials to an account with our Sites, some content and/or information in those accounts may be transmitted into your account with us. For example, when you connect with Facebook, we receive and collect your name, email address and profile photo.

When you agree with another user of our Services to provide load tracking data to the other user, we will provide location information to the user during the applicable trip.

Information We Infer or Derive

We may derive information or draw inferences about you based on the personal data we collect or have otherwise received about you. For example, we may infer your approximate location based on your IP address, or that you are interested in participating in an event based on your browsing behavior on our Sites.

HOW WE USE YOUR PERSONAL DATA

Depending on how you interact with us and the Services you or your organization utilize, we use your personal data to:

• Provide and Improve Products and Services. Provide, activate, operate, maintain, develop, enhance, improve, and manage our Services and your accounts on our Services, monitor and analyze trends, usage, and activities, and to perform services requested by you.
• Respond to You. Provide technical, product and other support and respond to your requests, inquiries, comments and concerns. We may record and process communications for training, quality assurance, and administration purposes. If required under applicable law, we will obtain your prior consent or give you the option to object to a call being recorded.
• Service Communications. Notify you about changes, updates and other announcements related to our Services and send you technical notices, updates, security alerts, support messages, and other transactional or relationship messages.
• Personalize Your Experience. Customize our product offerings and present you with tailored content, and otherwise personalize your experience while using our Services;
• Safety and Security For safety and security, including to detect and protect against fraud or illegal activities, security incidents, and harm to rights, property or safety of Truckstop, our users or others;
• Advertising and Marketing. To provide you with advertising, promotional messages and other information about products, events and services of ours, our affiliates and third parties, such as event sponsors;
• Research and Development. To conduct research and development, compile analytics, conduct industry and market research, develop new products and services, and other purposes consistent with our legitimate business needs;
• Corporate Transactions. We process personal data in the in the context of a merger, sale of our assets, financing or acquisition of all or a portion of our business to another company, or other corporate transactions;
• Events and Offers. To facilitate events, contests, promotions and sweepstakes, and process and deliver entries, rewards, and prizes;
• Comply with Legal and Financial Obligations. To comply with our legal and financial obligations, resolve disputes, enforce our agreements, and exercise our legal rights;
• Your Consent. We may process your personal data in accordance with your consent or when you intentionally direct or instruct us to do so; and
• Other Notified Purposes. Carry out any other purpose conveyed to you at the time the information was collected.

DISCLOSURE OF PERSONAL DATA

We may disclose your personal data as follows or as otherwise described in this Policy:

• Affiliates and Subsidiaries. We disclose your personal data to our affiliates and other organizations under common control for the purposes described in this Policy, including to provide the Services;
• Third Parties You Intentionally Interact With. You are using the Services to interact with one or more third parties and Truckstop to discloses information in our possession to one or more third parties as may be necessary to provide the Services;
• Vendors and Service Providers. We disclose your personal data to our vendors and service providers to perform the functions for which we engage them and we disclose your personal data to integrate the Services with a third-party service (which typically requires your API key to integrate with these third-party services);
• Corporate Transactions. We disclose your personal data as part of, in connection with, or during negotiations of, any merger, sale of our assets, financing or acquisition of all or a portion of our business to another company, or other corporate transactions;
• Analytics Providers. We disclose personal data to our analytics partners, such as Google Analytics (you can read more about our use of Google Analytics in the Cookies and Other Information Collection Tools section above);
• Professional Advisors. We disclose your personal data to our professional advisors like our lawyers, accountants, financial, insurance and other advisors in connection with the management of all or a part of our business or operations;
• Third-Party Partners. We disclose your personal data to unaffiliated third party companies or individuals we partner with to provide certain products, services, or experiences to you;
• Security. We may disclose personal information if we believe it is necessary or appropriate to: (a) Prevent, detect, mitigate, and investigate potential security issues, fraudulent or illegal activity on our Services; (b) Prevent physical harm or financial loss; or (c) Protect the rights or property of ourselves, our customers, or others, including enforcing our agreements, terms, and policies – this includes exchanging information with other companies and organizations.
• Aggregated, Anonymized, or De-Identified. We disclose aggregated, anonymized, or de-identified information, which cannot reasonably be used to identify you;
• Law Enforcement and Individuals Involved in Legal Proceedings. We disclose your personal data when we believe doing so is reasonably necessary to comply with applicable law or legal process or other legal reasons, including:
  • When we reasonably believe disclosure is required to comply with a subpoena, court order, or other applicable law, regulation or legal process;
  • To enforce, remedy, or apply our agreements and contractual rights;
  • To protect our property or protect the rights, property or safety of others;
  • To support external auditing, compliance and corporate governance functions; and
  • To prevent, detect, and remedy fraud, cybersecurity attacks or illegal activity.
• With your Consent or Direction. We disclose personal data with your consent or at your direction, including if we notify you that your personal data will be shared in a particular manner and you provide such personal data.

We may share your personal data with third parties for those third parties’ direct marketing purposes.

HOW WE PROTECT YOUR PERSONAL DATA

We implement commercially reasonable physical, technical and procedural measures to help protect personal data from unauthorized access or use; however, the transmission of information via the internet is not completely secure or private. If you have questions about the security of personal data we collect, please contact us using the information provided below.

COOKIES AND OTHER INFORMATION COLLECTION TOOLS

What are cookies? A cookie is a small file containing a string of characters that is sent to your computer when you visit a website or use an online service. When you visit the website or use the online service again, the cookie allows that website or online service to recognize your browser or device. Cookies may store unique identifiers, user preferences and other information.

The type of cookies we may use include:

Necessary Cookies. These cookies are strictly necessary to make our Services function properly. These cookies ensure basic functionalities and security features of the Sites.

Function Cookies. Functional cookies help to perform certain functionalities like sharing the content of the Sites on social media platforms, collect feedback, and other third-party features.

Performance Cookies. Performance cookies are used to understand and analyze the key performance indexes of the Sites which helps in delivering a better user experience for the visitors.

Analytics Cookies. Analytical cookies are used to understand how visitors interact with the Sites. These cookies help provide information on metrics, the number of visitors, bounce rate, traffic source, etc.

Advertisement. Advertisement cookies are used to provide visitors with relevant ads and marketing campaigns. These cookies track visitors across websites and collect information to provide customized ads.

Duration of Cookies. We may use “session cookies” or “persistent cookies.” Session cookies are temporary and expire once you close your browser or once your session ends. Persistent cookies remain on your device for much longer or until you or your browser erases them. Persistent cookies have varying durations that are dependent on their expiration date.

Why do we use them? We use cookies to collect information about you so we can provide the experiences you request, recognize your visit, track your interactions, improve your experience and detect and prevent fraud.

How do I control cookies? Web browsers allow some control of most cookies through the browser settings. Most mobile devices also offer settings to reject mobile device identifiers. Although users are not required to accept cookies or mobile device identifiers, blocking or rejecting them may prevent access to some features available through the Services or impair the functionality of the Services.

To find out more about cookies, including how to manage and delete cookies, visit www.aboutads.info/choices. You can also opt-out of interest based advertising from participating members by visiting http://www.networkadvertising.org/choices/. For individuals in the EEA, please visit www.youronlinechoices.eu and for individuals in Canada, please visit https://youradchoices.ca.

Where required by applicable law, we obtain your consent prior to placing or using optional cookies that are not (i) strictly necessary to provide the Sites or the Services e.g., Necessary Cookies; or (ii) for the purpose of facilitating a communication.

Cookies We May Use:

Some of the cookies we commonly use are listed below. This list is not exhaustive.

We use analytics cookies like Google Analytics and advertising cookies like Google Ads to help us operate our Services and provide marketing and advertising to you. You can find out more about how Google uses your personal data by visiting www.google.com/policies/privacy/partners/, and opt-out of them by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.

SOCIAL MEDIA AND OTHER THIRD PARTY LINKS AND SERVICES

Occasionally, at our discretion, we may include or offer third party products or services on our Sites or links to other websites. The privacy practices of these third parties will be governed by the parties’ own privacy notices. We are not responsible for the security or privacy of any information collected by these third parties. You should review the privacy notices or policies applicable to these third party products and/or services. We have no responsibility or liability for the content and activities of these linked websites or the services they provide.

Some aspects of the Sites may allow you to interface with social media services such as Facebook, LinkedIn, TikTok, and X (formerly known as Twitter®). By using these interfaces, you will allow us to access information about you from those social media services, including information and other content that you submit to those social media services. For a description on how such social media services and other third-party platforms, plug-ins, integrations, and applications handle your information, please refer to their respective privacy policies and terms of use, which may permit you to modify your privacy settings with that service or platform.

RETENTION OF PERSONAL DATA

We will retain your personal data for as long as is necessary to fulfil the purpose for which this data was collected and for the business purposes explained in this Policy. If your personal data is used for two purposes, we will retain it until the purpose with the latest period expires; but we will stop using it for the purpose with a shorter period once that period expires.

Even after we stop providing Services directly to you, and even if you close your account, we may retain your personal data:

• to comply with our legal and regulatory obligations.
• to protect against fraudulent or abusive activity on our Service.
• to exercise, establish or defend legal claims.

In cases where we keep personal data, we do so in accordance with any limitation periods and records retention obligations that are imposed by applicable law.

YOUR PRIVACY RIGHTS AND CHOICES

Consistent with applicable law, you may exercise the rights described in this section. Please note that the rights may vary depending on your country or state of residence. Please see the Region Specific Terms section below. To exercise your data protection rights please contact us as listed below.

While it is our policy to respect the rights of individuals, please be aware that your exercise of these rights is subject to certain exemptions and exceptions, and some of these rights might be limited (for example the right to withdraw consent) where we are required or permitted by law to continue processing your personal data to deliver services to you, defend our rights or meet our legal and regulatory obligations.

If you contact us to exercise any of these rights, please note that we may only implement requests with respect to the personal data associated with you as an individual. We may need to verify your identity before implementing your request and will try to comply with your request as soon as reasonably practicable and in accordance with the timelines required under applicable law. If we cannot verify your identity or your ownership rights to the data, we may not be able to service your request until you provide proper documentation.

Opt Out of Direct Marketing

If you would like to opt out of receiving direct marketing mail or promotional emails from us, please contact us at privacy@truckstop.com or (800) 203-2540. Please understand that if you opt out of receiving promotional correspondence from us, we may still contact you in connection with your Profile, relationship, activities, transactions, and communications with us.

If you would prefer that we not share your personal information with third-party marketers, please contact us at privacy@truckstop.com or (800) 203-2540. You may also have additional rights depending on where you live as described in the Region Specific Terms. Please understand that if you do request that we stop sharing your personal information with third parties for their direct marketing purposes, such request will only apply as of the date of your request, and we will not be responsible for any communications that you may receive from third parties that received your personal information prior to that request. In these cases, please opt out from or contact the third party directly. If you request that we do not share your personal information with any third parties at all, then do not use our Services, do not provide any personal information in a Profile and if you have already done so and later ask that we do not share such information, then we will have no choice but to terminate our Services.

Please note that there are certain communications we are required to send you that relate to the Services we are providing to you or the organization you represent that you may not be able to opt out of (e.g., support and important legal notices).

If you are receiving communications from us as part of a larger corporate email group within your own organization (e.g., info@abccorp.com), we will not have control over your individual personal data and will not be able to process your request.

Access, Correct or Delete your Personal Data

You may have the right to request access to and receive details about the personal data we maintain about you and how we process it, correct inaccuracies, or request that we delete your personal data by contacting us as indicated below. If you or the organization you represent are a subscriber to our Services, you can also update your personal data by signing into the customer portal.

Withdraw Consent

Where you have provided your consent for us to use your personal data and subject to applicable law, you have the right to withdraw your consent and we will apply that preference going forward.

Sensitive Information

Unless specifically requested, we ask that you not send us, and you not disclose on or through our Sites or otherwise to provide your sensitive personal information unless specifically requested by us or required by law.

Location Information

When you first visit one of the pages on our websites that collect location information or first launch our mobile application, you will be asked to consent to the collection of location information. If you initially consent to our collection of location information, you can later stop this collection by changing the settings on your mobile device or web browser. If you do so, certain features of the Services will no longer function. You can also stop our collection of location information by our mobile applications by following the standard uninstall process and removing the relevant Truckstop application(s) from your mobile device.

Additional Rights

Depending on your location and subject to applicable law, you may have the following additional rights regarding the personal data we control about you:

• The right to request confirmation of whether we process personal data relating to you, and if so, to request a copy of that personal data;
• The right to request that we restrict the use of your personal data in certain circumstances, such as while we consider another request that you have submitted (including a request that we make an update to your personal data);
• The right to request that we export your personal data that we hold to another company or organization, where technically feasible;
• Where we process your personal data based on our legitimate interests, you may also have the right to object to the processing of your personal data. Unless we have compelling legitimate grounds or where it is needed for legal reasons, we will cease processing your personal data when you object;
• The right not to be discriminated against for exercising these rights; and/or
• The right to appeal any decision by us relating to these rights.

CALIFORNIA “SHINE THE LIGHT” DISCLOSURE

The California “Shine the Light” law gives residents of California the right under certain circumstances to opt out of the disclosure of certain categories of personal information (as defined in the Shine the Light law) with third parties for their direct marketing purposes, or in the alternative, that we provide a cost-free means for consumers to opt out of any such disclosure. We do not currently disclose your personal information to third parties for their own direct marketing purposes.

DO NOT TRACK

We currently do not participate in any “Do Not Track” frameworks that would allow us to respond to signals or other mechanisms from you regarding the collection of your information. We may engage third parties, such as marketing or analytics partners, who may collect information about your online activities over time and across different websites when you use our website. To learn more about browser tracking signals and “Do Not Track,” please visit http://allaboutdnt.org.

CHILDREN’S PRIVACY

Truckstop is a workplace tool intended for use by businesses and organizations and not for consumer purposes. Our Services are not aimed at children under the age of 18 or the age defined under applicable law. We do not knowingly collect information from children under the age of 18 or the age defined under applicable law.

INTERNATIONAL DATA TRANSFERS

We may process and store your personal data in the United States, Canada, other countries which may have less-protective data protection laws than the region in which you are situated. Please note that this processing, including storage, may involve cross-border transfers of your personal data. In certain situations, we may be required to disclose personal data in response to lawful requests from officials (such as law enforcement or security authorities).

CONTACT US

You may contact us using the information below.

If you have questions about this Privacy Policy or if you wish to exercise your privacy rights as outlined above, please contact us at privacy@truckstop.com or by mail at: Truckstop, Attn: Legal, Re: Privacy Policy, 1444 S. Entertainment Ave., Suite 110, Boise, ID 83709.

Region Specific Terms

ADDITIONAL INFORMATION FOR RESIDENTS OF CERTAIN U.S. STATES

If you are a “consumer” as defined under privacy laws in California, Colorado, Connecticut, Montana, Oregon, Texas, Utah and Virginia, you may have certain rights and protections under applicable law regarding the processing of your personal data. However, note that certain state privacy laws do not include an individual acting in a commercial or employment context, as a job applicant, or as a beneficiary of someone acting in an employment context within the meaning of “consumer”. In the event of a conflict between the rest of our Policy, this Additional Information for Residents of Certain U.S. States notice will prevail as to consumers and their rights under the applicable state privacy law.

We may “sell” or “share” your personal data (as these terms are defined under U.S. state privacy laws). Where such sale or sharing occurs, Truckstop will post “Do Not Sell or Share My Personal Information” links on homepages and provide appropriate means for users to opt-out of such sale. We also do not knowingly “sell” or “share” personal data about consumers under the age of 16.

We do not use or disclose “sensitive personal information” for the purposes of inferring any characteristics about you.

Some U.S. state privacy laws require a description of data practices using specific categories. The table below uses these categories to organize the information in this Policy. In the last 12 months, we collected and disclosed the following categories of personal data from the categories of sources listed in this Policy for business or commercial purposes.

For more detailed information about the categories of sources, categories of personal data we collect, and the business or commercial purposes for collecting your personal data, please review the Information We Collect, How Do We Use Your Personal Data and Disclosure of Personal Data sections above.

Categories of Personal Data	Categories of Recipients with Whom Information May be Shared	Business Purposes for which Personal data may be Used or Disclosed
Identifiers (such as name, contact information and device identifiers) Commercial information (such as items purchased) Internet or other network activity information (such as browsing behavior and other usage data) Approximate location data Inferences (such as approximate location) Demographic data (such as gender) Audio, electronic, visual or similar information (such customer support call recordings or personal data collected from visitors to our offices/ premises) Characteristics of Protected Classifications under California and Federal Law Other personal data (such as product feedback or payment method information)	Affiliates and subsidiaries Analytics companies Service providers and vendors, including cloud service providers, Internet service providers, operating systems and platforms, communications providers, fraud prevention providers, webhosting providers and fulfillment partners Marketing and advertising partners Payment processing companies Providers of third-party app integrations Social networks Business partners Advisors and agents Government entities including regulators and law enforcement Others as required by law	Provide, maintain and improve our Services  Communicate with you  Identify, report and repair errors that impair the functionality of our Services  Protect against security threats, abuse, and illegal activity  Analyze trends, auditing and measurement  Personalize and improve the Services  Research and development  Advertising and Marketing  Use of service providers  Legal and financial reasons

Retention

We store personal data associated with your account for as long as your account remains active or as long as you are using our Services. If you close your account or stop using our Services, we will delete your account data; otherwise, we will delete your account data after a period of inactivity. We store other personal data for as long as necessary to carry out the purposes for which we originally collected it and for other business purposes explained in this Policy.

Personal data that we “Share,” “Sell,” or Use for “Targeted Advertising”

We may disclose the following categories of personal data to third parties for the purpose of engaging in targeted advertising and other marketing activities, including to expand the reach and effectiveness of our own marketing campaigns (and for the third parties’ own marketing purposes). These activities are considered “sales,” “sharing,” or “targeted advertising” under certain state laws and you have the right to opt out of having your personal data used or disclosed for these purposes. See below for details about opting out.

Category of Personal data “Shared,” “Sold,” or used for “Targeted Advertising”	Categories of Recipients
Identifiers	Advertising and marketing networks, data analytics providers, and social networks
Commercial information	Advertising and marketing networks, data analytics providers, and social networks
Internet or other electronic network activity information	Advertising and marketing networks, data analytics providers, and social networks
Inferences	Advertising and marketing networks, data analytics providers, and social networks

Your Additional Privacy Rights

Under certain circumstances and in accordance with applicable privacy laws, you may have the following additional rights:

• Opting Out of Sales, Sharing, and Targeted Advertising. As described above, you have the right to opt out of having your personal data sold, shared, or used for targeted advertising. You may opt out by following the prompts here. You may opt out of sales, sharing, or targeted advertising associated with your email address, or other information we may disclose to our advertising or other partners so they can show you ads that are more relevant to your interests, by visiting this form and submitting the required information. If you are a resident of certain states, you can also opt out by visiting our Services with a legally recognized opt-out preference signal enabled, such as the Global Privacy Control.
• Nondiscrimination. We will not discriminate against you for exercising your privacy rights.
• Authorized Agent. If you reside in California, Colorado, Connecticut, Montana, Oregon, and Texas you can designate an authorized agent to submit a privacy rights request on your behalf. We may ask authorized agents to submit proof of their authority to make a request, such as a valid power of attorney or proof that they have signed permission from the consumer who is the subject of the request. In some cases, we may be required to contact the consumer to verify his or her identity or confirm the authorized agent has permission to submit the request. Authorized agents can submit rights requests by following the instructions provided above.
• Access, Correction, and Deletion. You have the right to (1) request to know more about and access your personal data, including in a portable format, (2) request deletion of your personal data, and (3) request correction of inaccurate personal data. To request access, correction, or deletion of your personal data, you may contact us at the information listed above. We will verify your request by asking you to provide certain information to compare that information with our records. Please note that you can also access, correct, or delete certain information stored within your customer portal at any time by logging into your account.

Your Right to Appeal

If we deny your request to exercise any of the rights you may have under applicable state law, you may appeal our decision by contacting us at the information listed above. If you have concerns about the results of an appeal, you may contact the attorney general or other regulatory authority in the state where you reside.

ADDITIONAL INFORMATION FOR RESIDENTS OF CANADA

If you are a resident of Canada, you may have certain rights and protections under applicable law regarding the processing of your personal data. In the event of a conflict between the rest of our Policy, this Additional Information for Residents of Canada notice will prevail as to data subjects and their rights under the applicable privacy law.

Your Rights. You may exercise your rights to access and correct the personal data we hold about you by contacting us at the information above. By submitting personal data to us or our service providers, you consent to the collection, use, disclosure, and transfer of your personal data in accordance with this Policy and as permitted or required by law. You may withdraw your consent at any time by contacting us at the information above. If you withdraw your consent (or if you decide not to provide certain personal data), you acknowledge that we may not be able to provide you with certain products, services, or information.

Retention. We store personal data associated with your account for as long as your account remains active or as long as you are using our Services. If you close your account or stop using our Services, we will delete your account data; otherwise, we will delete your account data after a period of inactivity. We store other personal data for as long as necessary to carry out the purposes for which we originally collected it and for other business purposes explained in this Policy.

2. Biometric Data Notice

This Notice was last updated on April 15, 2025

This Biometric Data Notice (“Notice”) describes how Internet Truckstop Group, LLC, including its subsidiaries and affiliates (“Truckstop” “we” or “us”) collects and processes Biometric Data (as defined below) in connection with offering you our security and fraud prevention related products and services, including our ID Verification service (“Services”). This Notice supplements the Truckstop Privacy Policy located at https://truckstop.com/privacy-policy/ with respect to Biometric Data. Please consult our Privacy Policy for additional information on what rights you have with respect to your personal data, including your Biometric Data.

Please carefully review this Notice prior to consenting to our collection and use of your Biometric Data.

1. What is “Biometric Data”? When we refer to “Biometric Data,” we mean information about your physical or biological characteristics and information that identify you (some states call these “biometric identifiers”) and any information that is based on a biometric identifier (some states call this “biometric information”). Information like eye, hand, or face scans; fingerprints, voiceprints, and information derived from these biometric identifiers may be considered Biometric Data if they are being used to identify you. As used in this policy, “Biometric Data” includes any “biometric identifiers” or “biometric information” as defined under applicable law.
2. How we use your Biometric Data. We will only use your Biometric Data as follows:
   • To verify your identity when you are opening an account or using our Services;
   • To authenticate use of your account and the Services;
   • To mitigate fraudulent uses of Truckstop’s Services or the creation of multiple accounts; and
   • To comply with legal obligations or comply with a lawful request from law enforcement or government entities.
3. How long we retain your Biometric Data. Except to the extent that we are expressly mandated by law, subpoena, warrant or other lawful justification, we will retain Biometric Data only until the (a) initial purpose for collecting or obtaining such Biometric Data has been satisfied or (b) within 3 years of your last interaction with us, whichever occurs first.
4. How we protect your data. We are committed to protecting your Biometric Data. We use reasonable information security safeguards designed to protect Biometric Data when it is being collected, stored, and transmitted. Please note that no data transmission or storage can be guaranteed to be 100% secure.
5. Your privacy choices. If you decline consent for the biometric verification, please be aware of the following consequences: (a) your identity will not be verified, which may result in restricted access to some or all of our Services and (b) we reserve the right to terminate your account or disable your access.
6. How we share or disclose your Biometric Data. We will only share your Biometric Data where permitted by law and in the following circumstances:
   • With third parties to (a) enforce our terms of use for the Services, (b) to comply with legal obligations, or to cooperate with law enforcement agencies concerning conduct or activity that we reasonably believe may violate federal, state, or local law, (c) when required by a subpoena, warrant, or other court ordered legal action, or (d) to prevent harm, loss or injury to others.
   • To third party service providers that perform functions on our behalf. These service providers are limited to collecting, storing, or using the Biometric Data to assist in our provision of the Services and must comply with this Biometric Data Notice. Truckstop currently uses Ping Identity Corporation as a third-party service provider.
7. Changes. This Notice may be periodically updated. From time-to-time we may update this policy to reflect new features or changes in our practices or our Services. We will post any changes to this Site.
8. Questions? Should you have any inquiries, concerns, or require clarification regarding this process, please contact us at privacy@truckstop.com. We are committed to addressing your questions and providing the assistance you may need.

By using our Services, you explicitly acknowledge that you have read, understand, and grant your consent in accordance with the terms and conditions outlined in this Biometric Data Notice.