Your privacy is important to Truckstop.

1. PRIVACY POLICY

Last Updated: June 10, 2026

This privacy policy (“Policy”) explains how Internet Truckstop Group, LLC and our respective affiliates (collectively, “Truckstop”, “we”, “us” or “our”) collect, use, disclose, and retain personal data about you; the rights and choices you have regarding that data; and how to contact us with questions or requests.

CONTENTS

• What Does This Policy Cover
• How Is This Policy Updated
• Information We Collect
• How We Use Your Personal Data
• Artificial Intelligence and Automated Functions
• Disclosure of Personal Data
• How We Protect Your Personal Data
• Cookies and Other Information Collection Tools
• Social Media and Other Third-Party Links and Services
• Retention of Personal Data
• Your Privacy Rights and Choices
• Children’s Privacy
• International Data Transfers
• Additional Regulatory Notices
• Contact Us
• Region Specific Terms

WHAT DOES THIS POLICY COVER

This Policy applies to personal data we collect, including personal data we collect through our interactions (collectively the “Sites”) in connection with our websites, web-based platforms, mobile applications, browser extensions, desktop applications, application programming interfaces (APIs), and any other software or tools we make available, whether accessed through a browser, mobile device, or installed on your device (collectively, together with the Sites, the “Services”), and any other interactions you may have with us. Where Truckstop processes personal data as a service provider or processor on behalf of a business customer, that customer’s privacy policy governs that processing and you should direct individual rights requests to that customer.

In this Policy, “personal data” means any information that identifies, relates to, describes, is reasonably capable of being associated with or reasonably can be used to identify an individual or household and other data that is linked to personal data or is otherwise defined as “personal data,” “personal information,” or “personally identifiable information” by applicable laws.

HOW IS THIS POLICY UPDATED

We may modify this Policy from time to time. If we make changes, we will revise the “Last Updated” date at the top of the Policy on our Sites. We encourage you to review this Policy each time you visit our Sites to stay informed of our privacy practices and the choices available to you. Your continued use of the Services following any update constitutes your acceptance of the revised Policy to the fullest extent permitted by applicable law.

INFORMATION WE COLLECT

The personal data we collect about you depends on how you interact with us or use our Services. We collect personal data as described below, including for purposes beyond directly providing the Services, such as analytics, research and development, AI and product improvement, and marketing. Below, we describe the categories of personal data we collect and the sources of this information.

Information You Provide to Us

We collect personal data from you when you use our Services, send us an email, fill out a form, subscribe to our newsletter, respond to a survey or job posting, interact with us on social media, or otherwise communicate with us.

Types of personal data we may collect include:

• Contact information such as your name, email address, telephone number, and mailing address;
• Registration Information such as username and credentials, professional or employment related information, bank account number, and taxpayer identification numbers, username and email address, and credentials such as your password, during account creation;
• Government-issued identification such as social security number, driver’s license, passport, or state-issued identification number;
• Demographic Information such as age, gender, race, ethnicity, and similar demographic details;
• Payment Information such as your credit card or bank account number, which we may share with third-party payment processors as described in this Policy;
• Communications with us including through our online chat service, feedback, and survey responses;
• Content and files such as code, text, photographs, documents, or other files, including videos or recordings, you upload to our Service;
• Any additional Information that you choose to provide.

In some cases, we may also collect information you provide about others, such as when you are the administrator for your company’s account and you provide information about other personnel at your company. We will use this information to fulfill your requests and will not send communications to your contacts unrelated to your requests unless they separately create an account, engage with us or consent to receive communications from us.

Information Collected Automatically When You Interact With Us

We and our service providers may automatically collect and/or log personal data about you, your computer or mobile device, and your interaction over time with the Services, such as:

• Device information. We may collect information about your device(s) such as Internet Protocol (“IP”) addresses, browser type, domain names, access times, log information, error messages, device type, unique device identifiers, and other technical information such as protocol status and substatus, bytes sent and received and server information.
• Transaction Information. We may collect information when you conduct transactions through our Sites or otherwise purchase Services from us.
• Usage information. We may collect information about your use of the Services, such as the pages you viewed, the Services you used or interacted with, referring website addresses and details about any links or communications with which you interacted.
• Location Information. We may collect information about the location of your device each time you access or use our mobile application or when you otherwise consent to the collection of this information. This may include precise geolocation data when location services are enabled for our mobile application. Precise geolocation data is treated as sensitive personal data as described by this Policy. For more details about the collection of location information and the choices you have to disable our ability to collect your location information, please see the “Your Privacy Rights and Choices” section below.
• Information Collected by Cookies and Other Tracking Technologies. Please see our cookie policy in the section “Cookies and Other Information Collection Tools” for more details on the information we and our service providers collect about you.
• Browser Extension and Downloadable Software Data. If you install a browser extension, desktop application, or other downloadable software we provide, we and our service providers may collect additional data while the software is active, including: content, text, and data visible on or extracted from web pages you visit, including pages on third-party websites not operated by Truckstop; URLs, page titles, and metadata of web pages you visit; data appearing in or entered into form fields and other interactive elements on web pages you visit; your interactions with web page content and elements; clipboard content where required to provide a feature; and other browsing activity and usage data generated in connection with the software’s features. The specific data collected depends on the software’s features and the permissions you grant at installation or in your browser or device settings. Data collected through browser extensions or downloadable software may be linked to your Truckstop account.

Information We Collect From Other Sources

We may also collect personal data about you from other sources, including publicly available databases, commercial data brokers, industry databases, verification services, and third parties, and combine that with information we collect through the Services. For example, we may use information from LinkedIn to update information about you in our contact database. Where you use a browser extension or other downloadable software we provide, we may also collect data from third-party websites you visit while the software is active, as described above.

If you provide or connect your third-party account credentials to an account with our Sites, some content and/or information in those accounts may be transmitted into your account with us. For example, when you connect with Facebook, we receive and collect your name, email address and profile photo.

When you agree with another user of our Services to provide load tracking data to the other user, we will provide location information to the user during the applicable trip.

Information We Infer or Derive

We may derive information or draw inferences about you based on the personal data we collect or have otherwise received about you. For example, we may infer your approximate location based on your IP address, or that you are interested in participating in an event based on your browsing behavior on our Sites. Derived data and inferences are treated as personal data under this Policy to the extent required by applicable law.

HOW WE USE YOUR PERSONAL DATA

Depending on how you interact with us and the Services you or your organization utilize, we use your personal data to:

• Provide and Improve Products and Services. Provide, activate, operate, maintain, develop, enhance, improve, and manage our Services and your accounts on our Services, monitor and analyze trends, usage, and activities, and to perform services requested by you.
• Respond to You. Provide technical, product and other support and respond to your requests, inquiries, comments and concerns. We may record and process communications for training, quality assurance, product improvement, AI and automated function development, and administration purposes. Where required by applicable law, we will provide notice of or obtain consent for call recording.
• Service Communications. Notify you about changes, updates and other announcements related to our Services and send you technical notices, updates, security alerts, support messages, and other transactional or relationship messages.
• Personalize Your Experience. Customize our product offerings and present you with tailored content, and otherwise personalize your experience while using our Services;
• Safety and Security For safety and security, including to detect and protect against fraud or illegal activities, security incidents, and harm to rights, property or safety of Truckstop, our users or others;
• Advertising and Marketing. To provide you with advertising, promotional messages and other information about products, events and services of ours, our affiliates and third parties, such as event sponsors. Where required by applicable law, we will obtain your prior express written consent before contacting you via telephone, including through pre-recorded or artificial voice messages, or text (SMS/RCS/MMS) for marketing purposes. You may opt-out of marketing messages at any time by replying STOP to any text message or by contacting [email protected]. Standard message and data rates may apply.
• Research and Development. To conduct research and development, compile analytics, conduct industry and market research, develop new products and services, and other purposes consistent with our legitimate business needs;
• Corporate Transactions. To process personal data in connection with a merger, sale of our assets, financing or acquisition of all or a portion of our business to another company, or other corporate transactions;
• Events and Offers. To facilitate events, contests, promotions and sweepstakes, and process and deliver entries, rewards, and prizes;
• Comply with Legal and Financial Obligations. To comply with our legal and financial obligations, resolve disputes, enforce our agreements, and exercise our legal rights;
• Your Consent. We may process your personal data in accordance with your consent or when you intentionally direct or instruct us to do so; and
• Automated Tools in Recruitment. We may use automated applicant tracking systems, AI-assisted screening tools, or similar technologies to help us review and evaluate applications and match candidates to positions. For more information see the Applicant and Candidate Privacy Policy; and
• AI Transcription, Summarization, and Platform Sharing. We may use automated or AI-powered tools to transcribe, summarize, or otherwise process communications and User Content you submit through the Services. Processed content may be shared with other users of the Services in connection with providing the Services. Where such processing involves personal data, we do so as described in this Policy and in our Terms of Service.
• Other Disclosed Purposes. Carry out any other purpose conveyed to you at the time the information was collected.

ARTIFICIAL INTELLIGENCE AND AUTOMATED FUNCTIONS

Truckstop uses artificial intelligence, machine learning, large language models, voice processing, and other automated technologies (collectively, “AI Functions”) across our Services, including through our websites, mobile applications, browser extensions, and other software. This section describes how AI Functions interact with personal data and the rights available to you.

• AI-Powered Features. Our Services may include AI-powered features such as virtual assistants and chatbots, load matching and recommendation engines, fraud detection and risk-scoring tools, carrier and broker vetting and information tools, browser-based assistants that operate while you browse third-party or Truckstop-related web pages, and other AI-assisted features we may introduce over time. The specific features available depend on the Services you use. We will update this Policy or provide additional notice when we introduce new AI features that materially affect how we process your personal data.
• Data Used by AI Functions. AI Functions in our Services may process personal data including account and profile information, usage and activity data, transaction records, communications data, location data, third-party data incorporated into the platform, data collected through browser extensions or other software while you use the Services, and inferences and scores we or our service providers generate. We do not use sensitive personal data categories (as defined under applicable law) to train AI Functions except where permitted by applicable law.
• AI Training and Product Improvement. We may use personal data, including data collected through your interactions with AI-powered features and through browser extensions and other software we provide, to train, evaluate, test, and improve our AI Functions and Services, subject to applicable law. We may also use aggregated, de-identified, or anonymized data derived from personal data for AI model development, benchmarking, and analytics without restriction. Where required by applicable law, we will provide notice or obtain consent before using personal data for AI training purposes.
• Automated Decision-Making. Some AI Functions may produce outputs that have legal or similarly significant effects on you, such as fraud flags, risk scores, or eligibility determinations (“Automated Decisions”). Where required by applicable law (including Colorado SB 189, effective January 1, 2027, and similar state automated decision-making disclosure laws), we will provide notice of Automated Decisions and honor rights to request human review. To request human review of an Automated Decision affecting you, contact [email protected] with the subject line “Automated Decision Review Request.”
• AI Disclosure Requirements. Where required by applicable law, we will disclose when you are interacting with an AI-powered feature rather than a human. Our AI-powered features do not make final decisions on freight transactions, rates, or carrier or broker relationships; they provide information and recommendations to assist human decision-makers. Interactions with AI-powered features, including through browser extensions and other software, may be recorded and used for quality assurance, compliance, safety, and Service improvement, subject to applicable consent requirements.
• Third-Party AI Services. Some AI features are powered by third-party AI providers. Where such providers process personal data on our behalf, they do so as service providers under written agreements that restrict their use of your data to providing services to Truckstop. We do not authorize third-party AI providers to use your personal data to train their own foundation models or for their own independent commercial purposes.
• Browser Extensions and Third-Party Website Interaction. Our browser extensions and other downloadable software may operate while you visit third-party websites that are not operated by Truckstop. When the software is active on a third-party website, it may read, extract, or interact with content displayed on that page to provide its features. Truckstop is not responsible for the privacy practices of third-party websites. The data collected from third-party web pages through our software is governed by this Policy and used as described herein.
• Biometric Data Notice. This section constitutes Truckstop’s publicly available written policy regarding biometric data, as required by the Illinois Biometric Information Privacy Act (BIPA, 740 ILCS 14) and similar state biometric privacy laws including Texas’s Capture or Use of Biometric Identifier Act (CUBI Act).
  • What we collect. Certain AI-powered features within our Services, including voice-enabled features, may collect or generate biometric identifiers or biometric information, including voiceprints derived from voice recordings. Biometric data is not collected through all Services; it is only collected where voice or biometric functionality is an active feature of the specific Service you use.
  • Purpose. We collect biometric data solely to provide, operate, and improve the AI-powered features you use. We do not sell, lease, trade, or otherwise profit from biometric data.
  • Consent. Where required by applicable law (including BIPA), we will obtain your written consent before collecting biometric identifiers or biometric information. By enabling a voice-powered or biometric feature, you provide consent to the collection and processing of any biometric data generated by that feature, subject to applicable law.
  • Retention and destruction. We retain biometric data no longer than the earlier of: (a) the purpose for which it was collected is fulfilled; or (b) three (3) years after your last interaction with the applicable Service. Within one (1) year after the applicable retention period expires, biometric data will be permanently destroyed using a method that renders it unrecoverable.
  • Third-party access. Biometric data may be processed by our service providers under written agreements that restrict use to providing services to Truckstop. We do not disclose biometric data to third parties except as required by applicable law, with your consent, or to our service providers as described above.
  • Questions or requests. To request deletion of your biometric data, withdraw consent, or submit a question about our biometric data practices, contact [email protected] with the subject line “Biometric Data Request.”

DISCLOSURE OF PERSONAL DATA

We may disclose your personal data as follows or as otherwise described in this Policy:

• Affiliates and Subsidiaries. We disclose your personal data to our affiliates and other organizations under common control for the purposes described in this Policy, including to provide the Services;
• Third Parties You Intentionally Interact With. Where you use the Services to interact with other platform participants (such as brokers, carriers, or shippers), we disclose information necessary to facilitate those interactions;
• Vendors and Service Providers. We disclose your personal data to our vendors and service providers to perform the functions for which we engage them. We enter into written data processing agreements with our vendors and service providers that limit service providers to using personal data only for the purposes we specify, require appropriate security measures, restrict further disclosure, and require assistance with individual rights requests;
• Corporate Transactions. We disclose your personal data as part of, in connection with, or during negotiations of, any merger, sale of our assets, financing or acquisition of all or a portion of our business to another company, or other corporate transactions;
• Analytics Providers. We disclose personal data to our analytics partners, such as Google Analytics (you can read more about our use of Google Analytics in the Cookies and Other Information Collection Tools section above);
• Professional Advisors. We disclose your personal data to our professional advisors like our lawyers, accountants, financial, insurance and other advisors in connection with the management of all or a part of our business or operations;
• Third-Party Partners. We disclose your personal data to unaffiliated third party companies or individuals we partner with to provide certain products, services, or experiences to you;
• Security. We may disclose personal information if we believe it is necessary or appropriate to: (a) Prevent, detect, mitigate, and investigate potential security issues, fraudulent or illegal activity on our Services; (b) Prevent physical harm or financial loss; or (c) Protect the rights or property of ourselves, our customers, or others, including enforcing our agreements, terms, and policies – this includes exchanging information with other companies and organizations.
• Aggregated, Anonymized, or De-Identified. We disclose aggregated, anonymized, or de-identified information, which cannot reasonably be used to identify you;
• Law Enforcement and Individuals Involved in Legal Proceedings. We disclose your personal data when we believe doing so is reasonably necessary to comply with applicable law or legal process or other legal reasons, including:
  • When we reasonably believe disclosure is required to comply with a subpoena, court order, or other applicable law, regulation or legal process;
  • To enforce, remedy, or apply our agreements and contractual rights;
  • To protect our property or protect the rights, property or safety of others;
  • To support external auditing, compliance and corporate governance functions; and
  • To prevent, detect, and remedy fraud, cybersecurity attacks or illegal activity.
• With your Consent or Direction. We disclose personal data with your consent or at your direction, including if we notify you that your personal data will be shared in a particular manner and you provide such personal data.

We may share your personal data with third parties for those third parties’ direct marketing purposes.

HOW WE PROTECT YOUR PERSONAL DATA

We implement commercially reasonable physical, technical and administrative measures to help protect personal data from unauthorized access or use, disclosure, alteration, and/or destruction. These measures include, where appropriate, encryption of personal data in transit and at rest, access controls, and periodic security assessments. However, no transmission over the internet or electronic storage system can be guaranteed to be completely secure or error-free. If you have questions about the security of personal data we collect, please contact us using the information provided below. In the event of a data breach requiring notification under applicable law, we will notify affected individuals and relevant regulatory authorities as required.

COOKIES AND OTHER INFORMATION COLLECTION TOOLS

What are cookies? A cookie is a small file containing a string of characters that is sent to your computer when you visit a website or use an online service. When you visit the website or use the online service again, the cookie allows that website or online service to recognize your browser or device. Cookies may store unique identifiers, user preferences and other information.

The type of cookies we may use include:

Necessary Cookies. These cookies are strictly necessary to make our Services function properly. These cookies ensure basic functionalities and security features of the Sites.

Function Cookies. Functional cookies help to perform certain functionalities like sharing the content of the Sites on social media platforms, collect feedback, and other third-party features.

Performance Cookies. Performance cookies are used to understand and analyze the key performance indexes of the Sites which helps in delivering a better user experience for the visitors.

Analytics Cookies. Analytical cookies are used to understand how visitors interact with the Sites. These cookies help provide information on metrics, the number of visitors, bounce rate, traffic source, etc.

Advertisement. Advertisement cookies are used to provide visitors with relevant ads and marketing campaigns. These cookies track visitors across websites and collect information to provide customized ads.

Duration of Cookies. We may use “session cookies” or “persistent cookies.” Session cookies are temporary and expire once you close your browser or once your session ends. Persistent cookies remain on your device for much longer or until you or your browser erases them. Persistent cookies have varying durations that are dependent on their expiration date. Browser extensions and other downloadable software we provide may use local storage or similar mechanisms on your device to store preferences and operational data.

Why do we use them? We use cookies to collect information about you so we can provide the experiences you request, recognize your visit, track your interactions, improve your experience and detect and prevent fraud.

How do I control cookies? Web browsers allow some control of most cookies through the browser settings. Most mobile devices also offer settings to reject mobile device identifiers. Although users are not required to accept cookies or mobile device identifiers, blocking or rejecting them may prevent access to some features available through the Services or impair the functionality of the Services.

To find out more about cookies, including how to manage and delete cookies, visit www.aboutads.info/choices. You can also opt-out of interest based advertising from participating members by visiting http://www.networkadvertising.org/choices/. For individuals in the EEA, please visit www.youronlinechoices.eu and for individuals in Canada, please visit https://youradchoices.ca. If you use a legally recognized opt-out preference signal (such as the Global Privacy Control), we will honor it to the extent required by applicable law.

Where required by applicable law, we obtain your consent prior to placing or using optional cookies that are not (i) strictly necessary to provide the Sites or the Services e.g., Necessary Cookies; or (ii) for the purpose of facilitating a communication.

Cookies We May Use:

Some of the cookies we commonly use are listed below. This list is not exhaustive.

We use analytics cookies like Google Analytics and advertising cookies like Google Ads to help us operate our Services and provide marketing and advertising to you. You can find out more about how Google uses your personal data by visiting www.google.com/policies/privacy/partners/, and opt-out of them by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.

SOCIAL MEDIA AND OTHER THIRD PARTY LINKS AND SERVICES

Occasionally, at our discretion, we may include or offer third party products or services on our Sites or links to other websites. The privacy practices of these third parties will be governed by the parties’ own privacy notices. We are not responsible for the security or privacy of any information collected by these third parties. You should review the privacy notices or policies applicable to these third party products and/or services. We have no responsibility or liability for the content and activities of these linked websites or the services they provide.

Some aspects of the Sites may allow you to interface with social media services such as Facebook, LinkedIn, TikTok, and X (formerly known as Twitter®). By using these interfaces, you will allow us to access information about you from those social media services, including information and other content that you submit to those social media services. For a description on how such social media services and other third-party platforms, plug-ins, integrations, and applications handle your information, please refer to their respective privacy policies and terms of use, which may permit you to modify your privacy settings with that service or platform. Our browser extensions and other downloadable software may also access and display content from third-party websites as part of their functionality; this does not constitute an endorsement of those sites and Truckstop is not responsible for their privacy practices.

RETENTION OF PERSONAL DATA

We will retain your personal data for as long as is necessary to fulfil the purpose for which this data was collected and for the business purposes explained in this Policy. If your personal data is used for two purposes, we will retain it until the purpose with the latest period expires; but we will stop using it for the purpose with a shorter period once that period expires, to the extent technically feasible and consistent with our legal obligations.

Even after we stop providing Services directly to you, and even if you close your account, we may retain your personal data:

• to comply with our legal and regulatory obligations.
• to protect against fraudulent or abusive activity on our Service.
• to exercise, establish or defend legal claims.

In cases where we keep personal data, we do so in accordance with any limitation periods and records retention obligations that are imposed by applicable law.

YOUR PRIVACY RIGHTS AND CHOICES

Consistent with applicable law, you may exercise the rights described in this section. Please note that the rights may vary depending on your country or state of residence. Please see the Region Specific Terms section below. To exercise your data protection rights please contact us as listed below.

While it is our policy to respect the rights of individuals, please be aware that your exercise of these rights is subject to certain exemptions and exceptions, and some of these rights might be limited (for example the right to withdraw consent) where we are required or permitted by law to continue processing your personal data to deliver services to you, defend our rights or meet our legal and regulatory obligations.

If you contact us to exercise any of these rights, please note that we may only implement requests with respect to the personal data associated with you as an individual. We may need to verify your identity before implementing your request and will try to comply with your request as soon as reasonably practicable and in accordance with the timelines required under applicable law. If we cannot verify your identity or your ownership rights to the data, we may not be able to service your request until you provide proper documentation.

Opt Out of Direct Marketing

If you would like to opt out of receiving direct marketing mail or promotional emails from us, please contact us at [email protected] or (800) 203-2540. Please understand that if you opt out of receiving promotional correspondence from us, we may still contact you via telephone (including via pre-recorded or artificial voice messages) for informational purposes, in connection with your Profile, relationship, activities, transactions, and communications with us.

Telephone and Text Message Opt-Out. If you have provided consent to receive marketing calls or text (SMS/RCS/MMS) messages from us, you may withdraw that consent at any time by replying STOP to any text message or contacting us at [email protected] or (800) 203-2540. After we receive your opt-out request, we will process it promptly and in accordance with applicable law. Please understand that if you opt out of receiving promotional correspondence from us, we may still contact you by telephone (including via pre-recorded or artificial voice messages) for informational purposes, in connection with your Profile, relationship, activities, transactions, and communications with us.

Do Not Call.We respect the National Do Not Call Registry and applicable state “do not call” lists. To add your information to Truckstop’s internal do not call list, please contact us at [email protected] or 800-203-2540. After we receive your request, we will process it promptly and in accordance with applicable law.

If you would prefer that we not share your personal information with third-party marketers, please contact us at [email protected] or (800) 203-2540. You may also have additional rights depending on where you live as described in the Region Specific Terms. Please understand that if you do request that we stop sharing your personal information with third parties for their direct marketing purposes, such request will only apply as of the date of your request, and we will not be responsible for any communications that you may receive from third parties that received your personal information prior to that request. In these cases, please opt out from or contact the third party directly. If you request that we do not share your personal information with any third parties at all, then do not use our Services, do not provide any personal information in a Profile and if you have already done so and later ask that we do not share such information, then we will have no choice but to terminate our Services.

Please note that there are certain communications we are required to send you that relate to the Services we are providing to you or the organization you represent that you may not be able to opt out of (e.g., support and important legal notices).

If you are receiving communications from us as part of a larger corporate email group within your own organization (e.g., [email protected]), we will not have control over your individual personal data and will not be able to process your request.

Access, Correct or Delete your Personal Data

You may have the right to request access to and receive details about the personal data we maintain about you and how we process it, correct inaccuracies, or request that we delete your personal data by contacting us as indicated below. If you or the organization you represent are a subscriber to our Services, you can also update your personal data by signing into the customer portal.

Withdraw Consent

Where you have provided your consent for us to use your personal data and subject to applicable law, you have the right to withdraw your consent and we will apply that preference going forward.

Sensitive Information or Data

Certain categories of personal data are considered “sensitive” under applicable law, such as health or financial information. Where required by law, we will obtain your consent or “opt-in” before collecting or processing your sensitive personal data beyond those permitted by applicable law. Unless specifically requested, we ask that you not send us, and you not disclose on or through our Sites or otherwise to provide your sensitive personal information unless specifically requested by us or required by law. Residents of certain states may have additional rights regarding sensitive personal data; please see the Region Specific Terms for details.

Location Information

When you first visit one of the pages on our websites that collect location information or first launch our mobile application, you will be asked to consent to the collection of location information. If you initially consent to our collection of location information, you can later stop this collection by changing the settings on your mobile device or web browser. If you do so, certain features of the Services will no longer function. You can also stop our collection of location information by our mobile applications by following the standard uninstall process and removing the relevant Truckstop application(s) from your mobile device.

Additional Rights

Depending on your location and subject to applicable law, you may have the following additional rights regarding the personal data we control about you:

• The right to request confirmation of whether we process personal data relating to you, and if so, to request a copy of that personal data;
• The right to request that we restrict the use of your personal data in certain circumstances, such as while we consider another request that you have submitted (including a request that we make an update to your personal data);
• The right to request that we export your personal data that we hold to another company or organization, where technically feasible;
• Where we process your personal data based on our legitimate interests, you may also have the right to object to the processing of your personal data, where required by applicable law in your jurisdiction. Where it applies, we will cease processing unless we have compelling legitimate grounds or are required to continue by law;
• The right not to be discriminated against for exercising these rights;
• The right to request human review of a decision made solely or primarily by automated means (including artificial intelligence or algorithmic technologies) that produces legal or similarly significant effect on you. To exercise this right, please contact us at [email protected] with the subject line “Automated Decision Review Request.”
• The right to appeal any decision by us relating to these rights.

CALIFORNIA “SHINE THE LIGHT” DISCLOSURE

California Civil Code Section 1798.83 gives residents of California the right to request certain information regarding our disclosure of personal information to third parties for their own direct marketing purposes. Once per calendar year and free of charge, California residents may request a list of the categories of personal information we disclosed to third parties for their direct marketing purposes during the preceding calendar year, and the names and addresses of those third parties.

To make such a request, or to opt out of future sharing of your personal information with third parties for their own direct marketing purposes, contact us at [email protected] or (800) 203-2540 with “Shine the Light Request” in the subject line or message.

DO NOT TRACK

We do not currently respond to browser-level Do Not Track (DNT) signals. However, we honor legally recognized opt-out preference signals, such as the Global Privacy Control, to the extent required by applicable law. We may engage third parties, such as marketing or analytics partners, who may collect information about your online activities over time and across different websites when you use our website. To learn more about browser tracking signals and “Do Not Track,” please visit http://allaboutdnt.org.

CHILDREN’S PRIVACY

Truckstop is a workplace tool intended for use by businesses and organizations and not for consumer purposes. Our Services are for business purposes only and are not aimed at children under the age of 18 or the age defined under applicable law. We do not knowingly collect information from children under the age of 18 or the age defined under applicable law.

INTERNATIONAL DATA TRANSFERS

We may process and store your personal data in the United States, Canada, other countries which may have less-protective data protection laws than the region in which you are situated. Please note that this processing, including storage, may involve cross-border transfers of your personal data. Where we transfer personal data from or to jurisdictions with legal restrictions on data transfers, we do so pursuant to appropriate safeguards and applicable law. In certain situations, we may be required to disclose personal data in response to lawful requests from officials (such as law enforcement or security authorities). For transfers of personal data from Canada, we do so in accordance with applicable Canadian privacy law, including through contractual protections where required.

ADDITIONAL REGULATORY NOTICES

Fair Credit Reporting Act.

Certain products and services provided by Truckstop may involve the compilation or reporting of information that could constitute a “consumer report” under the Fair Credit Reporting Act (FCRA). Where FCRA applies, we follow procedures to ensure accuracy and to respond to disputes from individuals about the information we maintain. If you believe information we have reported about you is inaccurate, please contact [email protected].

Driver’s Privacy Protection Act.

Where our products involve the collection or use of motor vehicle records, such as commercial driver’s license data, we access and use such records only for permissible purposes as defined under the Driver’s Privacy Protection Act (DPPA) and applicable state motor vehicle privacy laws. We do not disclose motor vehicle record information for purposes other than those authorized by law.

Financial Privacy (Factoring Services).

Customers who use factoring products and services offered by Truckstop or its affiliates may receive a separate financial privacy notice as required by the Gramm-Leach-Bliley Act (GLBA). If you are a factoring customer and have not received a financial privacy notice, please contact us at [email protected].

CONTACT US

You may contact us using the information below. Disputes arising out of or relating to this Policy or our data practices are subject to the arbitration and dispute resolution provisions in our Terms of Service, available at truckstop.com/terms-conditions, which are incorporated herein by reference.

If you have questions about this Privacy Policy or if you wish to exercise your privacy rights as outlined above, please contact us at [email protected] or by mail at: Truckstop, Attn: Legal, Re: Privacy Policy, 2261 Market Street PMB 85402 San Francisco, CA 94114.

Region Specific Terms

ADDITIONAL INFORMATION FOR RESIDENTS OF CERTAIN U.S. STATES

If you are a “consumer” as defined under privacy laws in California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, you may have certain rights and protections under applicable law regarding the processing of your personal data. However, note that certain state privacy laws do not include an individual acting in a commercial or employment context, as a job applicant, or as a beneficiary of someone acting in an employment context within the meaning of “consumer”. In the event of a conflict between the rest of our Policy, this Additional Information for Residents of Certain U.S. States notice will prevail as to consumers and their rights under the applicable state privacy law.

We may “sell” or “share” your personal data (as these terms are defined under U.S. state privacy laws). Where such sale or sharing occurs, Truckstop will post “Do Not Sell or Share My Personal Information” links on homepages and provide appropriate means for users to opt-out of such sale. We also do not knowingly “sell” or “share” personal data about consumers under the age of 16.

We do not use or disclose “sensitive personal information” for the purposes of inferring any characteristics about you except as necessary to provide the Services, prevent fraud, ensure security, or as otherwise permitted by applicable law.

Some U.S. state privacy laws require a description of data practices using specific categories. The table below uses these categories to organize the information in this Policy. In the last 12 months, we collected and disclosed the following categories of personal data from the categories of sources listed in this Policy for business or commercial purposes.

For more detailed information about the categories of sources, categories of personal data we collect, and the business or commercial purposes for collecting your personal data, please review the Information We Collect, How Do We Use Your Personal Data and Disclosure of Personal Data sections above.

Categories of Personal Data	Categories of Recipients with Whom Information May be Shared	Business Purposes for which Personal data may be Used or Disclosed
Identifiers (such as name, contact information and device identifiers) Commercial information (such as items purchased) Internet or other network activity information (such as browsing behavior, web pages visited while using our browser extensions or other downloadable software, and other usage data) Approximate location data Inferences (such as approximate location) Demographic data (such as gender) Audio, electronic, visual or similar information (such customer support call recordings or personal data collected from visitors to our offices/ premises) Characteristics of Protected Classifications under California and Federal Law AI-generated inferences and scores (such as match recommendations); Neural data (see Biometric Data Notice); Data extracted from third-party web pages through our browser extensions or other downloadable software; Biometric data (see Biometric Data Notice for details); Motor vehicle and commercial driver records (where collected through our Products or Services); Other personal data (such as product feedback or payment method information)	Affiliates and subsidiaries Analytics companies Service providers and vendors, including cloud service providers, Internet service providers, operating systems and platforms, communications providers, fraud prevention providers, webhosting providers and fulfillment partners Marketing and advertising partners Payment processing companies Providers of third-party app integrations Social networks Business partners Advisors and agents Government entities including regulators and law enforcement Others as required by law	Provide, maintain and improve our Services  Communicate with you  Identify, report and repair errors that impair the functionality of our Services  Protect against security threats, abuse, and illegal activity  Analyze trends, auditing and measurement  Personalize and improve the Services  Research and development  AI and automated function training and improvement; Advertising and Marketing  Use of service providers  Legal and financial reasons

Retention

We store personal data associated with your account for as long as your account remains active or as long as you are using our Services. If you close your account or stop using our Services, we will delete your account data; otherwise, we will delete your account data after a period of inactivity. We store other personal data for as long as necessary to carry out the purposes for which we originally collected it and for other business purposes explained in this Policy.

Personal data that we “Share,” “Sell,” or Use for “Targeted Advertising”

We may disclose the following categories of personal data to third parties for the purpose of engaging in targeted advertising and other marketing activities, including to expand the reach and effectiveness of our own marketing campaigns and for the third parties’ own marketing purposes. These activities are considered “sales,” “sharing,” or “targeted advertising” under certain state laws and you have the right to opt out of having your personal data used or disclosed for these purposes. See below for details about opting out.

Category of Personal data “Shared,” “Sold,” or used for “Targeted Advertising”	Categories of Recipients
Identifiers	Advertising and marketing networks, data analytics providers, and social networks
Commercial information	Advertising and marketing networks, data analytics providers, and social networks
Internet or other electronic network activity information	Advertising and marketing networks, data analytics providers, and social networks
Inferences	Advertising and marketing networks, data analytics providers, and social networks

Your Additional Privacy Rights

Under certain circumstances and in accordance with applicable privacy laws, you may have the following additional rights:

• Opting Out of Sales, Sharing, and Targeted Advertising. As described above, you have the right to opt out of having your personal data sold, shared, or used for targeted advertising. You may opt out by following the prompts here. You may opt out of sales, sharing, or targeted advertising associated with your email address, or other information we may disclose to our advertising or other partners so they can show you ads that are more relevant to your interests, by visiting this form and submitting the required information. If you are a resident of certain states, you can also opt out by visiting our Services with a legally recognized opt-out preference signal enabled, such as the Global Privacy Control.
• Nondiscrimination. We will not discriminate against you for exercising your privacy rights.
• Authorized Agent. If you reside in California, Colorado, Connecticut, Delaware, Maryland, Minnesota, Montana, Nebraska, New Jersey, Oregon, Rhode Island, and Texas you can designate an authorized agent to submit a privacy rights request on your behalf. We may ask authorized agents to submit proof of their authority to make a request, such as a valid power of attorney or proof that they have signed permission from the consumer who is the subject of the request. In some cases, we may be required to contact the consumer to verify his or her identity or confirm the authorized agent has permission to submit the request. Authorized agents can submit rights requests by following the instructions provided above.
• Access, Correction, and Deletion. You have the right to (1) request to know more about and access your personal data, including in a portable format, (2) request deletion of your personal data, and (3) request correction of inaccurate personal data. To request access, correction, or deletion of your personal data, you may contact us at the information listed above. We will verify your request by asking you to provide certain information to compare that information with our records. Please note that you can also access, correct, or delete certain information stored within your customer portal at any time by logging into your account.

Your Right to Appeal

If we deny your request to exercise any of the rights you may have under applicable state law, you may appeal our decision by contacting us at the information listed above. If you have concerns about the results of an appeal, you may contact the attorney general or other regulatory authority in the state where you reside.

ADDITIONAL INFORMATION FOR RESIDENTS OF CANADA

If you are a resident of Canada, you may have certain rights and protections under applicable law regarding the processing of your personal data. This includes rights under PIPEDA (or applicable provincial privacy legislation in Quebec, British Columbia, and Alberta) and, for Quebec residents, additional rights under Quebec’s Act respecting the protection of personal information in the private sector (Law 25). In the event of a conflict between the rest of our Policy, this Additional Information for Residents of Canada notice will prevail as to data subjects and their rights under the applicable privacy law.

Your Rights. You may exercise your rights to access and correct the personal data we hold about you by contacting us at the information above. By submitting personal data to us or our service providers, you consent to the collection, use, disclosure, and transfer of your personal data in accordance with this Policy and as permitted or required by law. You may withdraw your consent at any time by contacting us at the information above. If you withdraw your consent (or if you decide not to provide certain personal data), you acknowledge that we may not be able to provide you with certain products, services, or information.

Quebec Residents — Additional Rights Under Law 25. In addition to the rights above, Quebec residents have the right to: request de-indexation of personal information disseminated online; object to the use of personal information for profiling; be informed of and request human review of automated decisions made using their personal information; and request data portability where technically feasible. To exercise these rights, contact [email protected].

Retention. We store personal data associated with your account for as long as your account remains active or as long as you are using our Services. If you close your account or stop using our Services, we will delete your account data; otherwise, we will delete your account data after a period of inactivity. We store other personal data for as long as necessary to carry out the purposes for which we originally collected it and for other business purposes explained in this Policy.

2. Biometric Data Notice

This Notice was last updated on April 15, 2025

This Biometric Data Notice (“Notice”) describes how Internet Truckstop Group, LLC, including its subsidiaries and affiliates (“Truckstop” “we” or “us”) collects and processes Biometric Data (as defined below) in connection with offering you our security and fraud prevention related products and services, including our ID Verification service (“Services”). This Notice supplements the Truckstop Privacy Policy located at https://truckstop.com/privacy-policy/ with respect to Biometric Data. Please consult our Privacy Policy for additional information on what rights you have with respect to your personal data, including your Biometric Data.

Please carefully review this Notice prior to consenting to our collection and use of your Biometric Data.

1. What is “Biometric Data”? When we refer to “Biometric Data,” we mean information about your physical or biological characteristics and information that identify you (some states call these “biometric identifiers”) and any information that is based on a biometric identifier (some states call this “biometric information”). Information like eye, hand, or face scans; fingerprints, voiceprints, and information derived from these biometric identifiers may be considered Biometric Data if they are being used to identify you. As used in this policy, “Biometric Data” includes any “biometric identifiers” or “biometric information” as defined under applicable law.
2. How we use your Biometric Data. We will only use your Biometric Data as follows:
   • To verify your identity when you are opening an account or using our Services;
   • To authenticate use of your account and the Services;
   • To mitigate fraudulent uses of Truckstop’s Services or the creation of multiple accounts; and
   • To comply with legal obligations or comply with a lawful request from law enforcement or government entities.
3. How long we retain your Biometric Data. Except to the extent that we are expressly mandated by law, subpoena, warrant or other lawful justification, we will retain Biometric Data only until the (a) initial purpose for collecting or obtaining such Biometric Data has been satisfied or (b) within 3 years of your last interaction with us, whichever occurs first.
4. How we protect your data. We are committed to protecting your Biometric Data. We use reasonable information security safeguards designed to protect Biometric Data when it is being collected, stored, and transmitted. Please note that no data transmission or storage can be guaranteed to be 100% secure.
5. Your privacy choices. If you decline consent for the biometric verification, please be aware of the following consequences: (a) your identity will not be verified, which may result in restricted access to some or all of our Services and (b) we reserve the right to terminate your account or disable your access.
6. How we share or disclose your Biometric Data. We will only share your Biometric Data where permitted by law and in the following circumstances:
   • With third parties to (a) enforce our terms of use for the Services, (b) to comply with legal obligations, or to cooperate with law enforcement agencies concerning conduct or activity that we reasonably believe may violate federal, state, or local law, (c) when required by a subpoena, warrant, or other court ordered legal action, or (d) to prevent harm, loss or injury to others.
   • To third party service providers that perform functions on our behalf. These service providers are limited to collecting, storing, or using the Biometric Data to assist in our provision of the Services and must comply with this Biometric Data Notice. Truckstop currently uses Ping Identity Corporation as a third-party service provider.
7. Changes. This Notice may be periodically updated. From time-to-time we may update this policy to reflect new features or changes in our practices or our Services. We will post any changes to this Site.
8. Questions? Should you have any inquiries, concerns, or require clarification regarding this process, please contact us at [email protected]. We are committed to addressing your questions and providing the assistance you may need.

By using our Services, you explicitly acknowledge that you have read, understand, and grant your consent in accordance with the terms and conditions outlined in this Biometric Data Notice.