PRIVACY POLICY

1. ABOUT THIS POLICY & WHO WE ARE

IntelliHaul Group LLC (“IntelliHaul,” “we,” “us,” or “our”) is a California-based commercial logistics and autonomous trucking company headquartered in Ontario, California. We provide B2B fleet leasing, intelligent dispatch, autonomous freight, and robotic material-handling services. This Privacy Policy describes how we collect, use, disclose, and protect personal information in the course of operating our business and Platform.

This Policy applies to: (i) visitors to our website; (ii) prospective customers who inquire about our services; (iii) commercial customers, fleet operators, and shippers who use the Platform; (iv) vendors and service partners; and (v) drivers and operators of IntelliHaul vehicles. We are the “business” under the California Privacy Rights Act (CPRA) with respect to the personal information we collect.

2. PERSONAL INFORMATION WE COLLECT

We collect personal information that identifies, relates to, describes, is reasonably capable of being associated with, or could be linked—directly or indirectly—to an individual or household (“Personal Information”). The categories we collect depend on your relationship with us:

We do not intentionally collect sensitive personal information beyond what is necessary to provide our Services. We do not collect personal information from individuals we know to be under the age of 18.

3. HOW WE COLLECT YOUR PERSONAL INFORMATION

3.1  Direct Interactions

We collect information you provide directly when you: create a Fleet Manager account; submit a business application; execute a lease agreement; contact our support or sales teams; submit a “Move With Us” or “Stay Updated” web form; report a safety incident; or correspond with us by email, phone, or through the Platform.

3.2  Automated Technologies

As you interact with our website or Platform, or as our vehicles operate in the field, we automatically collect data through:

• Vehicle Telemetry Systems: Autonomous units transmit real-time Telematics Data including location, speed, battery state, sensor feeds, and mechanical health.
• Driver App: The IntelliHaul driver mobile application collects GPS location, trip data, delivery confirmations, and biometric authentication data (where applicable).
• Website Cookies & Tracking: Cookies, web beacons, pixel tags, and similar technologies collect browsing behavior and session data on our website. See our Cookie Policy for details.
• In-Vehicle Cameras: Dash-cam and inward-facing cabin cameras record footage during vehicle operation, used solely for safety monitoring and incident investigation.

3.3  Third-Party Sources

We may receive Personal Information from:

• Background Check Agencies: MVR reports, DOT medical certificate verification, and criminal background screening providers for driver qualification.
• DMV & Regulatory Databases: California DMV, FMCSA SAFER system, and CPUC license verification databases.
• Credit & Identity Verification Services: Commercial credit bureaus and identity verification platforms used during the business onboarding process.
• Analytics Providers: Third-party web analytics services that provide aggregated traffic and usage data about our website visitors.

4. HOW WE USE YOUR PERSONAL INFORMATION

We use the Personal Information we collect for the following business purposes:

• Logistics Operations: To coordinate freight movements, dispatch Autonomous Units, manage robotic loading workflows, optimize routes, and provide real-time fleet visibility to Fleet Managers.
• Safety & AI Model Training: To monitor vehicle health, refine autonomous driving algorithms, improve route safety scoring, and ensure compliance with CHP, DOT, and FMCSA standards. Telematics and sensor data used for AI training is de-identified and aggregated.
• Driver Authentication & Safety Monitoring: Biometric faceprint data is used exclusively to verify driver identity prior to enabling autonomous-assist or electric-drive modes. Cabin camera footage is used solely for safety review following incidents or reported anomalies.
• Account Management & Billing: To process payments, manage Fleet Manager accounts, issue invoices, and provide customer support.
• Automated Decision-Making (ADMT): Our systems evaluate business applications—using corporate history, identity verification, and credit data—to assess lease eligibility and fraud risk. Human review is available for any adverse automated decision. See Section 11 for more detail.
• Legal & Regulatory Compliance: To fulfill reporting obligations to the California DMV (AV permit reporting), CPUC, FMCSA, and law enforcement as required by law.
• Platform Improvement: To analyze usage patterns, detect and prevent fraud or abuse, and continuously improve Platform features and reliability.
• Marketing Communications: With your consent (where required), to send service updates, feature announcements, and relevant industry information. You may opt out at any time.

5. HOW WE DISCLOSE PERSONAL INFORMATION

IntelliHaul does not sell your Personal Information for monetary consideration. We may disclose Personal Information in the following circumstances:

5.1  Service Providers

We share Personal Information with vendors and service providers who assist us in operating our business, including: cloud infrastructure providers (hosting and data storage); IT security and cybersecurity firms; payroll and HR platforms (for employee data); telematics data processors; emergency roadside assistance partners; EV charging network operators; and background check agencies. All service providers are contractually required to use your data only as directed by IntelliHaul and to maintain appropriate security measures.

5.2  Corporate Administrators

When Customer businesses lease IntelliHaul vehicles, driver performance data, dispatch efficiency metrics, and vehicle usage reports are shared with the authorized Fleet Manager of that Customer organization. Drivers employed by Customer entities should be aware that their operational data is accessible to their employer’s Fleet Manager.

5.3  Regulatory Authorities

We disclose Personal Information as required by applicable law or valid legal process, including to: the California DMV (for AV testing permit reporting and accident investigations); the FMCSA and DOT (for safety and compliance); the CPUC; and law enforcement agencies responding to legal demands (subpoenas, court orders, law enforcement requests). We will notify affected individuals of such disclosures to the extent permitted by law.

5.4  Business Transfers

In connection with a merger, acquisition, corporate restructuring, financing, or sale of IntelliHaul or its assets, Personal Information may be disclosed to the acquiring party or its advisors, subject to appropriate confidentiality obligations. We will notify affected Users via the Platform or email if a business transfer results in a material change to this Policy.

5.5  Sharing for Cross-Context Behavioral Advertising

IntelliHaul does not “sell” Personal Information for money. In the future, we may engage third-party advertising partners and share cookie-derived network activity and browsing data with them to serve targeted advertisements as you browse the internet. If and when we do so, such sharing may constitute a “sale” or “sharing” under the CPRA, and we will update this Policy accordingly. California residents will have the right to opt out of any such sharing. See Section 8 for instructions.

6. DATA RETENTION

We retain Personal Information only for as long as reasonably necessary to fulfill the purpose for which it was collected, and to comply with applicable legal, regulatory, tax, and reporting obligations. Retention periods vary by data type:

• Account & Contract Records: Retained for the duration of the business relationship plus seven (7) years, to satisfy California commercial records and tax requirements.
• DOT & FMCSA Safety Records: Retained for the minimum periods required by federal regulation (e.g., 49 CFR § 391.51 for driver qualification files), typically three (3) years.
• Telematics & Route Data: Retained for up to three (3) years for operational analysis and potential dispute resolution, after which it is anonymized or deleted.
• Cabin Camera Footage: Retained for thirty (30) days unless flagged for safety investigation, in which case it is retained for the duration of the investigation plus one (1) year.
• Biometric Data: Permanently deleted no later than one (1) year from the date the operator account is closed or terminated, or earlier if required by law. Biometric data is never sold, leased, or disclosed to third parties except as required by law.
• Website Analytics & Cookies: Session data is retained per your browser cookie settings. Analytics data is aggregated and retained for up to two (2) years.

7. SECURITY

The security of your Personal Information is paramount to IntelliHaul’s operations. We implement and maintain physical, technical, and administrative safeguards proportionate to the sensitivity of the data we process, including:

• Enterprise-grade TLS encryption for all data in transit between vehicles, the driver app, and our servers;
• AES-256 encryption at rest for all Personal Information stored in our cloud infrastructure;
• Role-based access controls (RBAC) limiting employee access to Personal Information to those with a legitimate business need;
• Mandatory Multi-Factor Authentication (MFA) for all Fleet Manager accounts and internal administrative access;
• Regular third-party penetration testing and vulnerability assessments of Platform infrastructure;
• Employee privacy and security training as part of onboarding and on an annual basis.

No security system is impenetrable. In the event of a data breach affecting your rights and freedoms under applicable law, IntelliHaul will notify affected individuals and relevant regulatory authorities within the timeframes required by law (72 hours under applicable standards, or as required by California law).

8. CALIFORNIA PRIVACY RIGHTS (CCPA / CPRA)

Because IntelliHaul is headquartered in and operates extensively within California, we are fully subject to the California Privacy Rights Act (CPRA). California residents have the following rights with respect to their Personal Information:

8.1  Right to Know

You may request disclosure of: (i) the specific pieces of Personal Information we have collected about you; (ii) the categories of Personal Information collected; (iii) the categories of sources from which we collected it; (iv) our business purpose for collecting it; and (v) the categories of third parties with whom we have disclosed it.

8.2  Right to Delete

You may request deletion of your Personal Information, subject to legal retention exceptions (e.g., DOT/FMCSA safety records, open contract obligations, and active litigation holds).

8.3  Right to Correct

You may request correction of inaccurate Personal Information we hold about you. We will use commercially reasonable efforts to correct or update the information within 45 days.

8.4  Right to Opt-Out of Sale/Sharing

You may opt out of the “sale” or “sharing” of your Personal Information for cross-context behavioral advertising by: (i) submitting a written request to privacy@intellihaul.com; or (ii) enabling the Global Privacy Control (GPC) signal in your browser (see Section 9). Note: IntelliHaul does not currently engage in cross-context behavioral advertising. If this practice begins in the future, this Policy will be updated and a “Do Not Sell or Share My Personal Information” link will be added to our website.

8.5  Right to Limit Use of Sensitive Personal Information

You may direct IntelliHaul to limit the use of Sensitive Personal Information—such as precise geolocation, biometric data, and driver’s license numbers—to only those uses necessary to perform the Services you have requested. Note that limiting use of certain Sensitive PI (e.g., geolocation during an active freight run) may affect our ability to deliver the Services.

8.6  Right to Non-Discrimination

We will not discriminate against you for exercising any of the rights described in this Section. However, certain services may require the collection and processing of specific categories of Personal Information, and limitation requests may affect the scope of Services available to you.

8.7  Exercising Your Rights

To submit a verifiable consumer request, please contact us by email at privacy@intellihaul.com or by mail at the address in Section 14. We will endeavor to respond within forty-five (45) days of receipt of a verifiable request. We may extend this period by an additional forty-five (45) days where reasonably necessary, with written notice. You may authorize an agent to act on your behalf by providing written, signed authorization and verifying your identity with us directly.

9. GLOBAL PRIVACY CONTROL (GPC)

IntelliHaul’s website is configured to recognize the Global Privacy Control (GPC) opt-out preference signal as required by the CPRA. If your browser or device transmits a GPC signal when you visit our website, we will automatically treat that signal as a valid opt-out from the “sharing” of your Personal Information for cross-context behavioral advertising—without requiring you to take any additional action.

GPC is available through compatible browsers (e.g., Brave, DuckDuckGo Privacy Browser) and browser extensions. More information is available at globalprivacycontrol.org.

10. COOKIES & TRACKING TECHNOLOGIES

We use cookies, web beacons, pixel tags, and similar tracking technologies on our website and Platform. These technologies help us authenticate users, remember preferences, analyze traffic patterns, and serve relevant content. For full details on the types of cookies we use, how to manage your cookie preferences, and your opt-out options, please refer to our Cookie Policy, available at intellihaul.com/cookie-policy.

11. AUTOMATED DECISION-MAKING (ADMT)

IntelliHaul uses automated systems and artificial intelligence to support certain operational decisions, including:

• Lease Eligibility Assessment: When a business applies for an EV fleet lease, our automated systems evaluate corporate identity, credit metrics, and fleet capacity to assess eligibility. Our AI models weigh verifiable corporate standing, credit health, and platform capacity as primary factors.
• Route Optimization: Our Insight Dashboard’s dispatch engine uses real-time traffic, road conditions, battery range, and cargo data to generate optimized routing recommendations.
• Driver Safety Scoring: Telematics data (speed events, hard braking, lane departure) is used to generate driver safety scores used internally for fleet management purposes.

We do not rely solely on automated processing to make final decisions that significantly affect your legal rights without human oversight. If our systems flag a business application for denial or restrictive terms, you have the right to: (i) request a plain-language explanation of the automated decision; (ii) contest the automated decision; and (iii) request manual review by a qualified IntelliHaul representative. To exercise these rights, contact privacy@intellihaul.com.

12. CHILDREN’S PRIVACY

The IntelliHaul Platform and Services are intended exclusively for commercial, business-to-business use and are not directed to individuals under the age of 18. We do not knowingly collect Personal Information from individuals under 18. If we become aware that we have inadvertently collected Personal Information from a minor, we will take prompt steps to delete such information. If you believe we have collected information from a minor, please contact us at privacy@intellihaul.com.

13. CHANGES TO THIS POLICY

IntelliHaul reserves the right to amend this Privacy Policy at our discretion and at any time. When we make material changes, we will:

• Post the updated Policy on our website with a revised Effective Date;
• Send written notice to the primary email address associated with your account where the changes are material.

We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any changes constitutes your acceptance of the updated Policy.

14. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or IntelliHaul’s data practices, please contact us:

© 2026 IntelliHaul Group LLC. All Rights Reserved.

This document is for informational purposes. For legal advice, consult qualified counsel.