HaulGuard AI LLC — Privacy Policy

1. Introduction

HaulGuard AI LLC (“HaulGuard AI,” “we,” “us,” or “our”) is committed to protecting the privacy and security of information entrusted to us. This Privacy Policy explains how we collect, use, store, share, and protect personal and business information when you use the HaulGuard AI platform, website at haulguard.ai, APIs, and all related services (collectively, the “Service”). The Service is currently delivered as a web application accessed through a browser (including mobile browsers); HaulGuard AI does not currently offer a native mobile application.

This Policy should be read alongside our Terms of Service and EULA. By accessing or using the Service, you agree to the data practices described in this Policy. If you do not agree, you must discontinue use of the Service immediately.

This Policy applies to: (a) registered account holders (drivers, owner-operators, carrier owners, fleet operators, freight brokers); (b) individual drivers who access the Service under a fleet or company account; and (c) visitors to our website. Where practices differ between these user types, this Policy notes those differences.

2. Who We Are — Data Controller

HaulGuard AI LLC is an Arizona limited liability company (ACC #25047349) with registered offices at 5830 W Thunderbird Rd, Ste B8-142, Glendale, AZ 85306. HaulGuard AI is the “controller” of personal data collected through the Service, meaning we determine the purposes and means of data processing.

Privacy contact: support@haulguard.ai · +1 (623) 462-3405

3. Information We Collect

The Service collects different categories of information depending on your role and the features you use.

3.1 Account and Business Information (All Users)

When you register for the Service, we collect:

• Full name and job title;
• Business name, business address, USDOT number, and MC/MX number (where applicable);
• Email address and phone number;
• Account credentials (username and securely hashed password); and
• Payment and billing information (credit/debit card or ACH details — processed by our payment processor; HaulGuard AI does not store full card numbers).

3.2 Driver-Specific Credential Data

For drivers using the Service (directly or through a fleet account), we collect:

• Photographs of the CDL that the driver chooses to upload, and the fields extracted from them by AI-assisted optical character recognition (OCR): CDL number, issuing state, class, endorsements (including Hazmat (H), Tank Vehicle (N), Doubles/Triples (T), and Combination Vehicle (X)), restrictions, expiration date, name, and date of birth;
• Saved CDL profile data the driver chooses to persist for reuse across scans; and
• Driver attestation records for each hazmat load.

Note on credential verification: CDL data is recorded as presented by the driver at scan time. HaulGuard AI does not verify credentials against state DMV records or CDLIS. We do not collect medical card, TWIC, IFTA, or cab card data; if credential tracking is extended to additional document types in the future, this Policy will be updated first.

3.3 Load and Cargo Data

When you create a Compliance Record or process a load through the Service, we collect:

• Photographs of shipping documents (Bills of Lading, EPA hazardous waste manifests, and similar) that you upload for scanning;
• Hazmat cargo description, UN/NA identification number, hazard class, and packing group extracted from those documents;
• Shipping document details and load manifest data;
• Origin and destination information;
• Placard determination and associated 49 CFR citations generated by the AI;
• Load weight, quantity, and packaging information; and
• Trailer placard photographs you choose to upload for inclusion in the Evidence Packet.

AI processing of uploaded images: Document and CDL photographs you upload are transmitted to our AI inference provider (Anthropic’s Claude API) to perform extraction and placard determination. Under Anthropic’s commercial API terms, data submitted via the API is not used to train Anthropic’s models. Shipping-document images (but not CDL photographs) may additionally be transmitted to our optical character recognition (OCR) provider (Microsoft Azure AI Document Intelligence) to independently cross-check the accuracy of AI-extracted fields. Under Microsoft’s product terms, documents submitted for analysis are not used to train Microsoft’s models and are deleted within 24 hours. See Section 6.2 (Service Providers).

3.4 Fleet and Vehicle Data

The Service does not currently collect vehicle identification numbers, license plates, ELD or telematics data, Hours of Service (HOS) status, or vehicle maintenance records. If fleet or vehicle data collection is introduced in the future, this Policy will be updated first.

3.5 Location and Route Data

The Service does not collect real-time GPS or device geolocation data, and does not request device location permissions. Route compliance features work from the origin and destination addresses you type in:

• Origin and destination addresses you enter for route compliance analysis;
• The computed route geometry and the hazmat compliance findings for that route (tunnel bans, restricted zones, state permit requirements).

Addresses you enter are sent to third-party geocoding and routing providers to compute the route (see Section 6.2). Route compliance results are stored as part of the associated Compliance Record.

3.6 Automatically Collected Technical Data

When you access the Service, we automatically collect:

• IP address (used for access security and session management; retained only as long as necessary for these purposes);
• Device type, operating system version, browser type and version;
• Log data including timestamps, pages or screens visited, features accessed, and error events;
• Session identifiers and authentication tokens; and
• Crash reports and performance diagnostics.
• Electronic acceptance records: the date, time, IP address, and account identifier associated with each instance of your acceptance of our Terms of Service, EULA, Order Forms, or other agreements, maintained as evidence of contract formation in accordance with the Electronic Records and Signatures section of our Terms of Service.

3.7 Information from Third Parties

We may receive data about you from:

• Driver-app platform partners (such as Eleos) — where your carrier enables a document integration, we receive shipping documents and associated driver identifiers from that platform; and
• Payment processor — transaction confirmation and fraud signals (no full card data).

We do not currently receive data from ELD/telematics providers, load boards, or mobile app stores. If such integrations launch in the future, this Policy will be updated first.

3.8 Cookies and Tracking Technologies

We use the following types of cookies and tracking technologies:

• Essential / Session Cookies (First-Party): Required for core Service functionality, including login session management, authentication tokens, and security features. These cannot be disabled without affecting Service access.
• Preference Cookies (First-Party): Remember your settings and preferences (e.g., dashboard layout, notification preferences). Persist across sessions.
• Analytics (First- and Third-Party): Our public marketing and informational pages (not the logged-in application) use Microsoft Clarity, which collects page interaction data such as clicks, scrolls, and session recordings to help us understand how visitors use the site. We also maintain first-party aggregate page-view counts. See Microsoft’s privacy statement for Clarity’s practices.
• Advertising Measurement (Third-Party): Our public marketing and informational pages (not the logged-in application) use the Meta (Facebook) Pixel to measure the effectiveness of our advertising — for example, to attribute a signup to an ad campaign. The Meta Pixel sets third-party cookies and shares page-visit events with Meta Platforms, Inc., which may combine them with other data it holds; see Meta’s privacy policy for its practices. You can limit this via browser tracking protection, ad blockers, or Meta’s ad preference settings.
• Attribution Cookie (First-Party): If you arrive via a link with a source tag, we set a cookie (hg_src, 90-day lifetime) recording that source so we can attribute signups to marketing channels. It contains no personal data.
• Security Cookies (First-Party): Used for fraud prevention, bot detection, and session integrity.

Other than the Meta Pixel on our public marketing pages as described above, we do not use advertising or cross-site tracking cookies, and no advertising or analytics trackers run inside the logged-in application. We do not currently respond to browser Do Not Track (DNT) signals.

Cookie Preferences: You can manage non-essential cookies through your browser settings. Note that blocking essential cookies will prevent Service login and functionality.

3.9 Feedback Data

When you voluntarily submit Feedback — as defined in the Feedback section of our Terms of Service — through in-platform feedback tools, the Forum, email to support@haulguard.ai, conversations with HaulGuard AI personnel, survey responses, beta program participation, or any other channel, we collect:

• The content of your feedback submission, including suggestions, bug reports, feature requests, and usability observations;
• The date, time, and channel through which the Feedback was submitted;
• Your account identifier and associated contact information; and
• Any attachments, screenshots, or supporting materials included with your submission.

Important: By submitting Feedback, you grant HaulGuard AI a perpetual, irrevocable, royalty-free worldwide license to use, modify, and commercialize that Feedback without restriction or compensation, as described in the Feedback section of our Terms of Service. Feedback is not treated as confidential. Do not submit Feedback that contains proprietary information, trade secrets, or personally identifiable information of third parties. See Section 8 (Data Retention) for applicable retention periods.

3.10 Forum and Community Data

If HaulGuard AI makes a subscriber forum or community platform (the “Forum”) available, we collect the following information from your Forum activity:

• Posts, replies, and other content you submit to the Forum;
• Profile information you choose to display in the Forum;
• Reaction, vote, and engagement data; and
• Reports of Forum content submitted by other users.

Forum posts may be visible to other registered subscribers. Exercise caution in what personal or business information you include in Forum posts. HaulGuard AI reserves the right to remove Forum content that violates our Terms of Service or applicable law.

4. How We Use Your Information

We use collected information for the following purposes, grouped by function:

4.1 Service Provision and Core Operations

• Creating and managing your account and subscriptions;
• Recording CDL credentials and endorsements as presented at scan time (HaulGuard AI does not verify credentials against state DMV or CDLIS records);
• Generating Compliance Records, AI placard determinations, and Evidence Packets;
• Maintaining the cryptographically-verifiable Audit Ledger;
• Providing multi-stop per-leg placard and segregation planning and route compliance analysis; and
• Processing subscription payments through our payment processor.

4.2 Safety and Compliance

• Supporting hazmat route compliance checks (tunnel bans, restricted zones, permit requirements);
• Sending CDL expiration reminder emails as the expiration date approaches (approximately 30-day, 14-day, and final-week windows); and
• Supporting DOT roadside inspection documentation.

4.3 AI Model Improvement and Platform Development

We may use de-identified and aggregated data derived from Service usage — including anonymized load patterns, route data, and compliance outcomes — to improve the accuracy and reliability of our AI models, regulatory database, and placard determination algorithms.

4.4 Communications

• Transactional: Account confirmations, billing notices, subscription renewal reminders, and policy change notifications — these cannot be opted out while your account is active;
• Operational: Service status updates, maintenance windows, feature releases, and compliance alerts; and
• Marketing: Product updates, new module announcements, and industry insights — you may opt out at any time (see Section 11).

4.5 Security and Fraud Prevention

• Detecting and investigating unauthorized access, fraud, or misuse;
• Maintaining and improving platform security; and
• Responding to security incidents and data breaches.

4.6 Legal and Regulatory Compliance

• Complying with applicable law, including DOT, FMCSA, and PHMSA recordkeeping requirements;
• Responding to lawful government requests, court orders, or subpoenas;
• Enforcing our Terms of Service, EULA, and dispute resolution provisions (including arbitration proceedings under our Terms of Service); and
• Enforcing our Terms of Service and EULA.

4.7 Feedback and Forum Data

We use Feedback you submit and Forum content you post to: (a) improve Service features and identify bugs; (b) assess user needs and prioritize product development; (c) develop, modify, adapt, and commercialize new or existing features, consistent with the perpetual license granted in the Feedback section of our Terms of Service; and (d) moderate and maintain the Forum. Feedback is not treated as confidential and may be used without attribution or compensation.

5. Legal Bases for Processing

We process personal data on the following legal bases:

• Contract Performance: Processing necessary to provide the Service you have subscribed to, including Compliance Record generation, credential management, and billing;
• Legal Obligation: Processing required by applicable law, including FMCSA driver qualification recordkeeping (49 CFR Part 391), PHMSA hazmat documentation (49 CFR Parts 171-172), and applicable state regulations;
• Legitimate Interests: Security, fraud prevention, platform improvement using de-identified data, and ensuring the integrity of the Audit Ledger — where such interests are not overridden by your rights; and
• Consent: Where we rely on your consent — including for optional marketing communications and optional push/SMS notifications — you may withdraw consent at any time without affecting prior processing. Note: Use of identifiable personal data for AI model training is not a consent-based activity; it is prohibited outright under the User Content section of our Terms of Service.

6. How We Share Your Information

HaulGuard AI does not sell your personal information to third parties. Period.

We may share information in the following limited circumstances:

6.1 Within Your Fleet Account

When you use the Service through a fleet or company account, the account administrator may have access to:

• Driver credential expiration alerts; and
• Compliance Records and attestation records for loads scanned under the fleet account.

The Service does not provide fleet administrators with driver location or Hours of Service data (the Service does not collect either).

Individual drivers can see their own data at all times. Fleet account access controls are managed by the fleet account administrator.

Important — Motor Carrier Responsibility: HaulGuard AI shares fleet data with the fleet operator as a documentation and decision-support tool only. As established in our Terms of Service, the motor carrier — not HaulGuard AI — remains the DOT-registered entity responsible for all regulatory compliance, driver qualifications, cargo securement, placarding, and routing. The motor carrier is the Offeror of hazardous materials shipments within the meaning of 49 CFR Part 171 and bears all associated legal responsibilities. Fleet operators are responsible for implementing internal verification procedures to confirm the accuracy of all data accessed through their fleet account before any hazmat shipment departs.

6.2 Service Providers

We share data with trusted third-party vendors that help us operate the Service, under contractual data protection obligations:

• AI inference provider (Anthropic — receives the document and CDL images you upload, and associated extracted text, to perform AI extraction and placard determination; under Anthropic’s commercial API terms, API data is not used to train its models);
• OCR cross-check provider (Microsoft Azure AI Document Intelligence — receives shipping-document images only, not CDL images, to independently verify the accuracy of AI-extracted fields; under Microsoft’s product terms, submitted documents are not used to train its models and are deleted within 24 hours);
• Payment processor (Stripe — subscription billing and fraud prevention; receives tokenized payment data only);
• Cloud infrastructure and hosting providers (encrypted data storage and processing);
• Website analytics provider (Microsoft Clarity — receives page interaction data from our public marketing pages only, not from the logged-in application, and not load records or credential data);
• Geocoding and routing API providers (receive the origin and destination addresses you enter, to compute maps and route compliance checks — no device GPS data, which we do not collect);
• Customer support software providers; and
• Email delivery and notification service providers (receive email address and notification content).

All service providers are required by contract to: (a) use data only for the purposes we specify; (b) implement appropriate security safeguards; and (c) not further disclose data to unauthorized parties.

6.3 Legal and Regulatory Disclosure

We may disclose personal data when required by law, including:

• In response to a valid court order, subpoena, or government demand;
• To DOT, FMCSA, PHMSA, or other regulatory authorities in connection with a lawful investigation or enforcement action;
• To comply with mandatory reporting obligations following a hazmat incident; and
• To protect the safety of individuals when we have a good-faith belief that disclosure is necessary to prevent harm.

Where legally permitted, we will notify affected users before disclosing their data in response to government requests.

6.4 Business Transfers

In connection with a merger, acquisition, asset sale, financing, or corporate reorganization involving HaulGuard AI, your information may be transferred to the acquiring entity. We will notify you by email and/or in-platform notice at least thirty (30) days before any such transfer becomes effective, and you will have the ability to close your account if you do not consent.

6.5 With Your Explicit Consent

Where you authorize specific third-party integrations (if and when offered), we share relevant data with those services only to the extent necessary to fulfill the integration, and only after you enable the integration.

7. De-Identification and Anonymization

HaulGuard AI may create de-identified or aggregated data sets derived from Service usage for product development, industry research, and AI model improvement purposes. De-identified data: (a) does not contain information that can reasonably identify you or any specific driver, load, or shipment; (b) is processed using industry-standard anonymization techniques; and (c) is not subject to re-identification. HaulGuard AI will not attempt to re-identify de-identified data.

8. Data Retention

We retain personal information for the periods described below. Retention periods are based on applicable law, our legitimate business needs, and regulatory recordkeeping requirements. Upon account closure, you have thirty (30) days to export your data before deletion.

Data Category	Retention Period	Legal Basis	Notes
Account & contact info	Duration of account + 3 years	Contract / legal obligation	Deleted on request post-account closure
CDL credentials & endorsements	Duration of account + 1 year min.	FMCSA recordkeeping (49 CFR 391)	May be retained longer per FMCSA
Load manifests & hazmat docs	2 years minimum	49 CFR 172.201 / PHMSA	Carriers may have longer requirements
Compliance Records & Audit Ledger	3 years minimum	FMCSA / PHMSA regulatory; Terms of Service	Immutable ledger; cryptographic chain preserved
Route compliance analyses (entered addresses, computed routes)	Retained with the associated Compliance Record (3 years minimum)	FMCSA / PHMSA regulatory; Terms of Service	No GPS data is collected
Payment info (tokenized)	Duration of subscription + 7 years	Legal obligation / tax compliance	Full card numbers never stored
Log data & session info	90 days	Security / fraud prevention	Aggregated analytics retained longer
Support communications	3 years	Legitimate interest / contract	Used to resolve disputes
Electronic acceptance records	7 years	Legal obligation / contract formation (E-SIGN Act; Terms of Service)	Evidence of agreement formation; date, time, IP address, account ID
Feedback submissions	Indefinitely	Perpetual license (Terms of Service)	Subject to irrevocable perpetual license grant; may be incorporated into product improvements
Forum posts & community data	Duration of account + 1 year	Legitimate interest / contract	De-identified or deleted after account closure + 1 year; public posts may persist in aggregated form

After the applicable retention period, data is securely deleted or irreversibly anonymized. The Audit Ledger, by design, maintains a cryptographic chain that may preserve certain hashed records even after personal data deletion; however, these records are not personally identifiable after the underlying data is removed.

9. Data Security

HaulGuard AI implements layered administrative, technical, and physical safeguards to protect your information:

• Encryption in transit: All data transmitted between your device and the Service is encrypted using TLS 1.2 or higher;
• Encryption at rest: Sensitive data — including CDL numbers, credential data, and load manifests — is encrypted at rest using AES-256 or equivalent;
• Audit Ledger integrity: Compliance Records and Audit Ledger entries are cryptographically chained, making unauthorized modification detectable;
• Access controls: Role-based access controls (RBAC) ensure that only authorized personnel and fleet administrators can access specific data;
• Security assessments: We conduct regular internal security reviews and periodic third-party security assessments;
• Incident response: We maintain a documented incident response plan; and
• Employee training: HaulGuard AI personnel with access to personal data are required to complete data security training.

No security system is completely impenetrable. In the event of a data breach that triggers notification obligations under applicable law (including applicable state data breach notification laws and, where applicable, FMCSA regulations), we will notify affected users and regulators within the legally required timeframe.

10. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you, in a portable format;
• Correction: Request correction or update of inaccurate or incomplete information;
• Deletion (“Right to be Forgotten”): Request deletion of your personal information, subject to our legal retention obligations (including FMCSA and PHMSA recordkeeping requirements, which may require us to retain certain data);
• Data Portability: Request your data in a structured, machine-readable format (JSON or CSV);
• Restriction: Request that we limit processing of your data in certain circumstances;
• Objection: Object to processing based on legitimate interests;
• Opt-Out of Marketing: Unsubscribe from promotional emails using the unsubscribe link in any marketing email, or by contacting support@haulguard.ai; and
• Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at support@haulguard.ai with subject line “Privacy Rights Request.” We will verify your identity and respond within thirty (30) days (or sixty (60) days for complex requests with written notice of the extension). We will not discriminate against you for exercising your privacy rights.

11. Communications Preferences

11.1 Email

Transactional emails (billing, account security, document expiration alerts) are essential to the Service and cannot be opted out while your account is active. Marketing and product update emails include a one-click unsubscribe link in every message. You may also update your email preferences in your account settings.

11.2 Push Notifications

The Service does not currently send push notifications. If push notifications are introduced, they will be permission-based and manageable in your device’s operating system settings, and this Policy will be updated.

11.3 SMS / Text Messages

HaulGuard AI does not currently send SMS alerts. If optional SMS alerts for critical compliance events (e.g., approaching CDL expiration) are introduced, they will require your express opt-in consent. Standard messaging rates from your carrier may apply. To opt out of SMS notifications, reply STOP to any SMS message from HaulGuard AI, or update your preferences in your account settings.

12. California Privacy Rights (CCPA / CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purposes for collecting it, and the categories of third parties with whom we share it;
• Right to Delete: You may request deletion of personal information we have collected, subject to legal exceptions;
• Right to Correct: You may request correction of inaccurate personal information;
• Right to Opt-Out of Sale or Sharing: HaulGuard AI does not sell personal information. Our public marketing pages use the Meta Pixel for advertising measurement (see Section 3.8), which may constitute “sharing” as defined by the CPRA. You may submit a “Do Not Sell or Share My Personal Information” request at support@haulguard.ai, and you can limit pixel data collection through browser tracking protection or Meta’s ad preference settings. No sale or sharing occurs from data inside the logged-in application;
• Right to Limit Use of Sensitive Personal Information: CDL numbers and government-issued identification numbers are sensitive personal information under CPRA. HaulGuard AI uses this data solely to provide the Service. You may request limitation of this use at support@haulguard.ai; and
• Right to Non-Discrimination: We will not discriminate against you for exercising CCPA/CPRA rights.

To submit a California privacy rights request: email support@haulguard.ai with subject line “California Privacy Request” or call +1 (623) 462-3405.

13. Other U.S. State Privacy Rights

Residents of the following states may have additional privacy rights under applicable state law:

13.1 Virginia (VCDPA)

Virginia residents may have rights to access, correct, delete, and port their personal data, to opt out of profiling for decisions that produce legal or significant effects, and to opt out of targeted advertising (we do not serve targeted advertising within the Service; see Section 3.8 regarding advertising measurement on our public marketing pages). Contact us to exercise these rights.

13.2 Colorado (CPA)

Colorado residents have rights to access, correct, delete, and port personal data, and to opt out of targeted advertising and profiling (we do not serve targeted advertising within the Service or profile users; see Section 3.8 regarding advertising measurement on our public marketing pages). Contact us to exercise these rights.

13.3 Connecticut (CTDPA)

Connecticut residents have rights to access, correct, delete, and port personal data, and to opt out of targeted advertising (we do not serve targeted advertising within the Service; see Section 3.8 regarding advertising measurement on our public marketing pages). Contact us to exercise these rights.

13.4 Texas (TDPSA)

Texas residents have rights to access, correct, delete, and port personal data, and to opt out of targeted advertising and profiling (we do not serve targeted advertising within the Service or profile users; see Section 3.8 regarding advertising measurement on our public marketing pages). Contact us to exercise these rights.

13.5 Other States

As additional state privacy laws take effect, HaulGuard AI will update this Policy. For all states, our primary commitment is: we do not sell personal data, we do not serve targeted advertising within the Service (see Section 3.8 regarding advertising measurement on our public marketing pages), and we honor verifiable consumer rights requests within applicable legal timeframes.

To exercise rights under any applicable state law, contact us at support@haulguard.ai.

14. Data Processing Addendum (DPA) for Fleet Customers

Fleet operators and commercial customers who process personal data (including driver CDL records and scan history) through the Service may act as data controllers with respect to their drivers’ personal data, with HaulGuard AI acting as a data processor on their behalf.

Consistent with our Terms of Service, upon request HaulGuard AI will enter into a Data Processing Addendum (DPA) that supplements these Terms with specific obligations governing all of the following:

• Data processing instructions and purpose limitation;
• Subprocessor management and disclosure;
• Data subject rights assistance (access, correction, deletion, portability);
• Security incident notification timelines and procedures;
• Data transfer mechanisms for any cross-border processing; and
• Audit rights and compliance certifications.

To request a DPA, email support@haulguard.ai with subject line “DPA Request.”

15. Children’s Privacy

The Service is directed exclusively at commercial transportation professionals and is not intended for individuals under 18 years of age. HaulGuard AI does not knowingly collect personal information from minors. If we learn that we have inadvertently collected information from a minor, we will delete it promptly. If you believe we may have information about a minor, contact support@haulguard.ai immediately.

16. International Users

The Service is designed for and directed at users located within the United States. If you access the Service from outside the United States, you acknowledge that: (a) your information will be transferred to and processed in the United States; (b) U.S. data protection laws may differ from those in your jurisdiction; and (c) by using the Service, you consent to this transfer and processing. HaulGuard AI does not actively market the Service outside the United States.

17. Links to Third-Party Services

The Service may contain links to or integrations with third-party websites and services (including mapping and routing providers and, where enabled by your carrier, driver-app platforms such as Eleos). HaulGuard AI is not responsible for the privacy practices, data collection, or security of any third-party service. We encourage you to review each third party’s privacy policy before enabling integrations.

18. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our data practices, the Service, or applicable law. We will:

• Post the updated Policy on our website at haulguard.ai/privacy;
• Update the “Effective Date” at the top of the Policy;
• Notify you by email to your registered address and/or by in-platform notice at least thirty (30) days before material changes take effect; and
• For significant changes to how we use your personal data, request your affirmative acknowledgment where required by law.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Policy.

19. Dispute Resolution for Privacy Matters

Any dispute, claim, or controversy arising out of or relating to this Privacy Policy, including disputes regarding our data collection, use, retention, or disclosure practices, is subject to the Governing Law and Dispute Resolution provisions set forth in our Terms of Service, which are incorporated herein by reference.

This means that privacy-related disputes are governed by Arizona law, are subject to mandatory informal dispute resolution before formal proceedings may begin, and will be resolved through binding individual arbitration administered by the American Arbitration Association (AAA) unless an exception applies. Class action and collective proceedings are waived. Emergency injunctive relief may be sought in courts located in Maricopa County, Arizona.

To initiate informal resolution of a privacy dispute, contact us at support@haulguard.ai with subject line “Formal Dispute Notice — Privacy” and include the information required by the Informal Dispute Resolution section of our Terms of Service.

20. Contact Us

If you have questions, concerns, or privacy rights requests regarding this Privacy Policy or our data practices, please contact HaulGuard AI’s privacy team:

HaulGuard AI LLC — Privacy
5830 W Thunderbird Rd, Ste B8-142
Glendale, AZ 85306
Email: support@haulguard.ai (subject: “Privacy Inquiry”)
Phone: +1 (623) 462-3405
Website: haulguard.ai

We will respond to all privacy inquiries within thirty (30) days.