Privacy Policy Last revised: February 5, 2020 Welcome to Shipwell’s Privacy Policy. Shipwell provides a platform for shippers, 3PLs, and carriers to connect and coordinate on the shipment of goods. The Privacy Policy explains how Shipwell may collect, use, store, disclose, process and secure your personal information through your access to or use of the “Service“, defined as the Shipwell web platform, the mobile apps, and other offerings. The terms “Shipwell“, “we“, and “us” include Shipwell, Inc. and our affiliates and subsidiaries. This Privacy Policy is incorporated by reference into the Shipwell Terms and Conditions. Any capitalized terms used and not defined in this Privacy Policy shall have the meaning given to them in the Terms of Use. By using these Services, you signify your acceptance of this Privacy Policy. If you do not agree to this Privacy Policy, please do not use the Services. Shipwell may change this Privacy Policy from time to time by posting changes at this URL and may send notification emails. Your continued use of the Services following the posting of such changes will be deemed your acceptance of those changes. “Personal Information” can be used to readily identify, contact, or locate you. “Personal Information” means information that alone or when in combination with other information may be used to readily identify, contact, or locate you, such as: name, address, email address, or phone number. Except where required by law, we do not consider Personal Information to include information an individual makes public through the Service or information about a device. Information We Collect We collect all information that you provide including information you provide via the Services, your devices (e.g., computers, smartphones, tablets, and electronic logging devices), name, company address, email address, telephone number, IP address, and geo-location, as well as information we receive from third parties and through the use of cookies, server logs, and other such technologies. If you are a carrier, you may also be asked to provide DOT#, MC#, CDL#, and insurance-related information. More Cookies and Third-Party Tracking When you visit our Service or open our emails, we and our third-party partners, such as advertising networks, social media widgets, and analytics providers, may collect certain information by automated means, such as cookies, web beacons and web server logs. More How We Use Information We Collect We process your personal information only with your consent or as needed to provide you with Services or to communicate with you. We may also use your personal information to comply with legal obligations, operate our business, protect the vital interests of you, our customers, or the public, or for other legitimate interests of Shipwell as further described below. More How We Share Information We Collect We share your information with our partners, service providers, third-party vendors, and other users as they need it to fulfill Services or orders, or for other requests, you make of Shipwell. We may also share your information to comply with the law or for other legitimate interests. More How We Secure Your Information Shipwell takes technological and organizational measures to protect your personal information against loss, theft, and unauthorized access, use, disclosure or modification. Shipwell’s databases are located in the United States and you consent to the transfer of your personal information from your location to the United States. The Services are not for use by children under the age of 13 years old. You may have additional rights under applicable law. If you have any questions about this privacy policy, please contact us via the information below. More International Transfer of Information Shipwell may store your information in any country where Shipwell or its affiliates, partners, or providers operate facilities and will retain your information as long as necessary for the purposes outlined in this Privacy Policy. More How to Control Your Personal Information You can access, get copies of, delete, change or correct your personal information, or request changes to our use of your personal information by using the contact information below. More INFORMATION WE COLLECT We collect information when: You register to use the Service; You use the Service; We receive it from third parties; and You communicate with us We also collect information, such as de-identified usage statistics, by using cookies, server logs, and other similar technology as you use the Service. Registration and Account Information. You must register to use the Service. To register, you may need to provide personal information that can identify or relates to you, such as your name, company address, email address, and telephone number. If you are a carrier, you may also be asked to provide DOT#, MC#, CDL#, and insurance-related information. You may also provide other optional information. You have the choice of what information to share and the services you want to engage in. You can choose not to provide information to us, but in general, some information about you is required in order for you to access certain functionality of the Services, such as those mentioned above or for tracking your preferences or initiating other such actions. Using the Service. We collect the information you provide through the Service. For example, when you interact with other users by posting reviews or other comments and by using the chat functionality to contact Shipwell, the Service will collect the information you provide in such submissions, including any personal information. Making Payments. When you make payments through the Service, you may need to provide financial account information, such as your credit card number or bank routing information, to our third-party service providers. We do not collect or store such information, though we may receive information about completed transactions that does not include credit card or bank account numbers. Communicate with Us. We may collect personal information through your communications with our customer support team or through other communications with us, including through social media. From Other Sources. We may receive information, including personal information, about carriers from third parties. For example, we may use third-party services to obtain information about an individual carrier’s shipping history and licensing and insurance status. We may combine this information with other personal information we received through the Service. If we do so, this Privacy Policy governs any of this combined information that is personal information. Location Information from Mobile Devices. We may collect and store geolocation information from the devices using our Apps. For example, we may collect and store geolocation information when carriers are searching for shipping jobs or transporting shipments initiated through the Service, so we can suggest shipping jobs to carriers, provide shipment status updates to shippers, and otherwise provide and improve the provision of the Service. We may also receive geo-location information any time the Apps are running and store it anonymously to help us improve the Service and perform data analysis. Any user may at any time prohibit the Service from collecting location information by turning this feature off on the mobile device, but the Service likely will not permit the user to perform any shipment jobs if the Service does not have access to geolocation information. When your mobile device settings permit our collection of geolocation information, you expressly consent to our use of location-based services, and you expressly waive and release us from any and all liability, claims, causes of action or damages arising from your use of the Service, or in any way relating to the use of the geo-location and other location-based services. Information and Content from Your Device. The Service automatically collects information about your devices, such as a device ID, IP address and browser type, so that we can provide and customize functionality, such as push notifications. With your permission, the Service may access and collect information from your device’s contact list and photo storage. COOKIES AND THIRD-PARTY TRACKING Automatic Data Collection: Cookies and Related Technologies. When you visit our Service or open our emails, we and our third-party partners, such as advertising networks, social media widgets, and analytics providers, may collect certain information by automated means, such as cookies, web beacons and web server logs. By using the Service, you consent to the placement of cookies, beacons, and other similar technology in your browser and on emails in accordance with this Privacy Policy. The information collected in this manner includes, without limitation, IP address, browser characteristics, device IDs and characteristics, operating system version, language preferences, referring URLs, and information about the usage of our Service. We may use this information, for example, to determine how many users have visited certain pages or opened messages or newsletters, or to prevent fraud. We may link this data to your profile. Our partners also may collect information about your online activities over time, on other devices, and on other websites or apps, if those websites and apps also use the same partners. When they provide such services, they are governed by their own privacy policies. All 3rd-party tracking partners listed below are GDPR compliant. By using the Service, you are authorizing us to gather, process, analyze, and retain data related to the provision of the Service. We will retain your information as long as necessary for the purposes outlined in this Privacy Policy and for a commercially reasonable time thereafter for backup, archival, fraud prevention or detection or audit purposes, or as otherwise required by law. The Services are not designed to recognize or respond to “do not track” signals received from browsers. You can control the information collected by such tracking technologies or be alerted when cookies are sent by adjusting the settings on your Internet browser or devices. You can learn more about Google Analytics and your options for opting out of interest-based Google ads at https://adssettings.google.com. You can learn more about targeted ads and your ability to opt-out of receiving interest-based ads at optout.aboutads.info and www.networkadvertising.org/choices. Category Provider Purpose Web Analytics and CRM HubSpot HubSpot collects and provides certain website usage data, email tracking, and contact history. To learn more about HubSpot, please visit: https://legal.hubspot.com/privacy-policy Web and Mobile Analytics Google Analytics Google Analytics collects and provides certain website usage data and anonymized user information. To learn more about Google Analytics, please visit: www.google.com/policies/privacy/partners/ Web Analytics FullStory FullStory provides video playback of user sessions to provide insight into users’ experiences, usability issues and diagnostic information for bugs and other issues. To learn more about FullStory, please visit: https://www.fullstory.com/legal/privacy/ Mobile App Analytics Mixpanel Mixpanel collects and provides usage analytics and metrics on Shipwell’s mobile apps. To learn more about Mixpanel, please visit: https://help.mixpanel.com/hc/en-us/sections/115001299023-Data-Security-and-Privacy Mobile App Analytics Amplitude Amplitude collects and provides usage analytics and metrics on Shipwell’s mobile apps. To learn more about Amplitude, please visit: https://amplitude.com/privacy HOW WE USE INFORMATION WE COLLECT We process your personal information with your consent or as needed to provide you with Services. We may also use your personal information to comply with legal obligations, operate our business, protect the vital interests of you, our customers, or the public, or for other legitimate interests of CLIENT as described in this Privacy Policy More specifically, we may use your personal information to: Facilitate and improve our services; Communicate with you; and As set forth in more detail below We may use de-identified information for any purpose, including for marketing purposes. Internal and Service-Related Usage. We use information, including personal information, for internal and service-related purposes. We may use and retain any data we collect to provide and improve any of our services. Communications. We may call you at the telephone number and send email to the email address you provide to us and send push notifications to your mobile device if they are enabled, to verify your account and for informational and operational purposes, such as managing shipments, account management, customer service, system maintenance, and other Service-related purposes. Marketing. We may use information, including personal information, to provide online advertising on the Service and to send you information we think may be useful or relevant to you. You may opt-out of email marketing by using the unsubscribe link in a marketing email. Aggregate Data. We may de-identify or aggregate data collected through the Service and use and disclose it for any business purpose, including to perform shipping optimization analysis. HOW WE SHARE INFORMATION WE COLLECT We may share information: With our partners, third-party vendors, contractors/agents, and service providers; With authorized employees; With other users; To comply with legal obligations; To protect and defend our rights and property; and With your permission Please note that our partners may contact you as necessary to obtain additional information about you, facilitate any use of the Services, fulfill orders, or respond to a request you submit. Third-party vendors who provide products, services or functions on our behalf may include business analytics companies, customer service vendors, communications service vendors, marketing vendors, delivery, parcel, and transportation vendors, and security vendors. We may also authorize third-party vendors to collect information on our behalf, including as necessary to operate features of the Services, facilitate the delivery of orders, or provide online advertising tailored to your interests. Third-party vendors have access to and may collect personal information only as needed to perform their functions, may only use personal information consistent with this Privacy Policy and other appropriate confidentiality and security measures, and are not permitted to share or use the information for any other purpose. We also may share your information: In response to subpoenas, court orders, or other legal processes; to establish or exercise our legal rights; to defend against legal claims; or as otherwise required by law In such cases, we reserve the right to raise or waive any legal objection or right available to us When we believe it is appropriate to investigate, prevent, or take action regarding illegal or suspected illegal activities; to protect and defend the rights, interests, or safety of our company or the Services, our customers, or others; or in connection with our Terms of Service and other agreements In connection with a corporate transaction, such as a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy Other than as set out above, we will attempt to notify you when your personal information will be shared with third parties. Personal Information You Post in Public Areas. When you post a message in a Shipwell forum, chat room, review, or customer feedback, the information you post may be accessible to other users of the Services and the public. If you post personal information anywhere on the Services that is accessible to other users or the public, you are advised that such personal information can be read, collected, used, or disseminated by others and could be used to send you unsolicited information or for other purposes. Accordingly, you assume full responsibility for posting such information and agree that we are not responsible in any way for the personal information you choose to post in these public areas. Aggregated Information. We may publish, share, distribute, or disclose personal information that has been aggregated with information from other users or otherwise de-identified in a manner that does not allow such data about you to be separated from the aggregate data and identified as originating from you, to third parties, including Shipwell partners, sponsors, and advertisers. Such information may help us identify and analyze training, demographic, and psychographic trends and information, and report to third parties how many people saw, visited, or clicked on certain content, areas of the Services, ads, or other materials. We may also use such data for research purposes. WE DO NOT RENT, SELL, OR SHARE PERSONAL INFORMATION ABOUT YOU WITH OTHER PEOPLE OR NONAFFILIATED COMPANIES FOR THEIR DIRECT MARKETING PURPOSES UNLESS WE HAVE YOUR PERMISSION. We Use Vendors and Service Providers. We may share any information we receive with vendors and service providers we use to help us provide and improve the Service. For example, we will provide personal information to payment processors as part of financial transactions and to service providers that provide web and database hosting services. We use the Google Maps service, and you acknowledge and agree to the Google privacy policy located at http://www.google.com/policies/privacy. We also use the Plaid payments service, and you acknowledge and agree to the Plaid privacy policy located at https://plaid.com/legal/#privacy-and-end-user-data. You also agree to grant Plaid the right, power, and authority to (acting on behalf of such end-user) access and transmit the End User Data (as such term is defined in the Plaid privacy policy) as reasonably necessary for Plaid to provide the Service to such end-user. We also work with third parties, such as FMCSA, insurance companies, and transportation authorities, to obtain information about carriers, such as their shipping history, licensing, and insurance status. Displaying to Other Users. The information and content you provide to the Service may be displayed on the Service to other users. For example, the information will be shared between shippers and carriers to complete transactions. In addition, employees of one shipper or carrier may see information about their colleagues. We are not responsible for how other users will view and use the posted information. Marketing. We do not rent, sell, or share personal information about you that we collect on the Service with other people or unaffiliated companies for their direct marketing purposes unless we have your permission. We may allow access to data collected by the Service to enable the delivery of online advertising on the Service, or to send you information we think may be useful or relevant to you. Legal and Similar Disclosures. We may access, preserve, and disclose collected information if we believe doing so is required or appropriate to: comply with law enforcement requests and legal processes, such as a court order or subpoena; respond to your requests; comply with the law; or protect your, our, or others’ rights, property, or safety. Merger, Sale, or Other Asset Transfers. If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of Shipwell assets, or transition of service to another provider, your information may be disclosed in connection with the negotiation of such transaction, and/or sold or transferred as part of such a transaction as permitted by law and/or contract. We cannot control how such entities may use or disclose such information. With Your Permission. We may also disclose your personal information with your permission. HOW WE SECURE INFORMATION WE COLLECT We take steps in an effort to treat your information securely and in accordance with this Privacy Policy. Unfortunately, the Internet cannot be guaranteed to be 100% secure, and we cannot ensure or warrant the security of any information you provide to us. We do not accept liability for unintentional disclosure. We take technological and organizational measures to protect your personal information against loss, theft, and unauthorized access, use, disclosure or modification. For example: We transmit data over secured communication channels using SSL Login credentials, All personal information is stored by trusted third-party providers (e.g., Salesforce, HubSpot, and AWS), All systems used to provide the Services are password-protected, and All Services usage is restricted on a per-user basis on the principle of least privilege We rely on our third-party vendors’ security programs to protect personal information while stored in their respective controlled facilities. Not all of our third-party vendors see the same information. Third-party vendors include, but are not limited to the following: For more information on AWS’ security practices and processes, please see this page For more information on Hubspot’s security practices and processes, please see this page For more information on Salesforce’s practices and processes, please see this page For more information on Pardot’s practices and processes, please see this page For more information on TriumphPay’s practices and processes, please see this page For more information on Quickbooks’ practices and processes, please see this page For more information on NetSuite’s practices and processes, please see this page For more information on MongoDB’s practices and processes, please see this page For more information on Looker’s practices and processes, please see this page For more information on Snowflake’s practices and processes, please see this page We comply with applicable data protection laws, including applicable security breach notification requirements. By using the Service or providing Personal Information to us, you agree that we may communicate with you electronically regarding security, privacy, and administrative issues relating to your use of the Service. If we learn of a security system’s breach, we may attempt to notify you electronically by posting a notice on the Service or sending an email to you. CHILDREN’S PRIVACY We do not knowingly collect, maintain, or use personal information from children under 13 years of age, and no part of the Service is directed to children under the age of 13. If you learn that your child has provided us with personal information without your consent, you may alert us at privacy@shipwell.com. If we learn that we have collected any personal information from children under 13, we will promptly take steps to delete such information and terminate the child’s account. INTERNATIONAL TRANSFER OF INFORMATION Our databases are currently located in the United States. We make no claim that its Services are appropriate or lawful for use or access outside the United States. If you access the Services from outside the United States, you are consenting to the transfer of your personal information from your location to the United States. You are solely responsible for complying with all local laws, rules, and regulations regarding online conduct and access to the Services. By sending us your information, you further consent to its storage within the United States. HOW TO CONTROL YOUR PERSONAL INFORMATION You can request that we update, correct or delete any personal information that you have provided to us through your use of the Service or otherwise. Your California Privacy Rights. California Civil Code Section 1798.83 permits our customers who are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please e-mail us, call us or write to us at the addresses below. How to Contact Us. You can call us at 1-866-467-8688 ext 833, use the web form located at www.shipwell.com/Contact, e-mail us at privacy@shipwell.com or write to us at Shipwell, Inc., Attn: Privacy Dept., 515 Congress Avenue, Suite 2650 Austin, TX 78701. Depending on where you are located, you may also have a right to complain to your local data protection regulator. CHANGES TO OUR PRIVACY POLICY AND PRACTICES We may revise this Privacy Policy, so review it periodically. Posting of Revised Privacy Policy. We will post any adjustments to the Privacy Policy on this web page, and the revised version will be effective when it is posted. New Uses of Personal Information. From time to time, we may desire to use personal information for uses not previously disclosed in our Privacy Policy. If our practices change regarding previously collected personal information in a way that would be materially less restrictive than stated in the version of this Privacy Policy in effect at the time we collected the information, we will make reasonable efforts to provide notice and obtain consent to any such uses as may be required by law. Click to download a copy of this Privacy Policy Contact Information Shipwell, Inc. 515 Congress Avenue, Suite 2650 Austin, TX 78701 1-866-467-8688 ext 833 privacy@shipwell.com Effective Date: February 5, 2020 About Company story Careers Blog Press Contact us Shippers Release notes API documentation Shipper support Carriers Carrier overview Carrier signup Carrier support Shipwell® HQ 515 Congress Avenue, Suite 2650 Austin, TX 78701 Privacy Policy Terms + Conditions Data Security Shipwell uses cookies to deliver a better browsing experience. By clicking OK, you agree to Shipwell and our 3rd-party partners' use of cookies to process your personal information. OK Privacy Policy