This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Controller and Contact Information

Fierce Trade LLC is the "controller" of Personal Data described in this Privacy Policy. For privacy-related inquiries, contact us at:

• Email: [email protected]
• Postal Address: 30 N Gould St. Ste R, Sheridan, WY 82801

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for You to access our Service or parts of our Service.

• Company (referred to as either "the Company", "We", "Us" or "Our" in this Policy) refers to Fierce Trade LLC, 30 N Gould St. Ste R Sheridan, WY 82801.

• Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing details of Your browsing history on that website among its many uses.

• Country refers to the United States. Governing law for privacy disclosures aligns with our Terms of Service (State of Wyoming).

• Device means any device that can access the Service such as a computer, mobile device, or digital tablet.

• Personal Data is any information that relates to an identified or identifiable individual.

• Service refers to LoadFetcher, including the website, browser extension(s), mobile applications, APIs, and any integrations (e.g., Telegram), accessible via https://loadfetcher.com and related subdomains.

• Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.

• Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit, telemetry, logs, and identifiers).

• You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Sources of Data

We obtain Personal Data from the following sources:

• (i) Directly from you (account creation, support requests, payment information)
• (ii) Automatically from your devices and our Services (telemetry, logs, device identifiers)
• (iii) From connected services you authorize (e.g., Telegram, or an email account you connect — see Connected Email Accounts and Google User Data below)
• (iv) From publicly available load boards or third-party platforms where permitted

Browser Extension Data Collection

Important: Our browser extension reads only the minimum content required to operate stated features on supported freight load board websites as described in the extension's details and permissions. It does not collect your browsing history outside of supported sites.

The extension operates on websites specified in its manifest permissions, which are disclosed when you install the extension. You can disable the extension or revoke site access at any time through your browser's extension settings.

The extension itself does not perform behavioral or usage analytics, advertising or cross-site tracking, or keystroke logging. Any analytics described elsewhere in this Policy relates to the loadfetcher.com website.

Load and Trip Data

To provide its core features on supported freight load boards (such as Amazon Relay), the extension reads and processes operational freight data from the load board and from your carrier account, and sends the relevant portions to our servers to power analytics, refresh, mapping, and notification features. This may include:

• Load and shipment details: load identifiers, rates and price-per-mile, distance, equipment and trailer type, stop counts, and loading type
• Route locations: pickup and delivery cities, states, facility codes, and geographic coordinates of the loads (these describe the freight and its route, not your personal device location)
• Schedule information: pickup and delivery dates and times, arrival windows, and estimated times of arrival (ETA)
• Trip and driver information (for trips you are executing): trip/tour identifiers, assigned driver names, check-in and check-out status, and driver position used to compute ETA and trip-status notifications
• Carrier information: your company name and, where applicable, carrier identifiers used to associate this data with your account

This data is used only to provide the features you request within the extension. Trip and driver details are transmitted for notifications only when you have enabled and configured them (for example, by connecting a Telegram group).

This collection is optional. You can turn it off at any time using the Local Mode setting described below, which stops this data from being sent to us while the extension keeps working locally in your browser. You can also disable any individual feature, or the extension entirely, at any time.

For the load, trip, and driver data you submit or access through the extension, you (the carrier) are the controller of that data and LoadFetcher acts as a processor / service provider — we process it only on your behalf and to provide the features you request.

Local Mode: Opting Out of Data Collection

The extension includes an opt-in setting called Local Mode (available in Settings and in the Refresher settings panel). Local Mode is off by default. When you turn it on, the extension stops sending the load, trip, driver, and carrier data described above to our servers, along with related features such as load analytics, facility ratings and reviews, route maps and location search, notifications (including Telegram alerts), the shared notification sound library, and device management — these features are disabled while Local Mode is on because they depend on that data reaching our servers.

While Local Mode is on, the extension still contacts our servers for three purposes tied to your account: signing you in, confirming your subscription, and ending your session when you log out. These requests identify you by your account credentials only; your company name is not sent and is instead reported to us as "REDACTED." Because Local Mode also stops the extension from refreshing your session automatically, you may need to sign in again more often while it is on.

You can turn Local Mode on or off at any time from within the extension. Features not listed above, such as Refresher, Quick Book, and Post Truck, continue to operate locally in your browser while Local Mode is on.

Connected Email Accounts and Google User Data

You can connect your own email account to LoadFetcher so that You can email freight brokers about loads from the LoadFetcher extension (for example, from the DAT One load board). You may connect a Google (Gmail) account, a Microsoft (Outlook) account or another mailbox through SMTP. Connecting an email account is optional.

What we access

• Google: permission to send email on Your behalf (the Gmail API scope gmail.send) and Your Google account email address (userinfo.email). We do not request access to read, search, label or delete the messages in Your mailbox.
• Microsoft: permission to send email on Your behalf (Mail.Send), Your basic profile (User.Read) and continued access while connected (offline_access).
• SMTP: the server, port, username and password You enter, used only to send Your emails.

How we use it

We use this access only to send the emails You write or explicitly trigger in LoadFetcher (such as an inquiry about a load and Your follow-ups to it), from the account You choose, and to show which account is connected. We do not read, scan or index Your inbox, and we do not send email without an action by You or a sending rule You set up.

How we store and protect it

• Access tokens, refresh tokens and SMTP passwords are stored encrypted (AES-256) and are used only by our servers to send Your emails.
• For each email You send through LoadFetcher we keep the sending account, recipients, subject, message and the load it was about, so You can see Your sent history and follow up. These records are deleted automatically after 30 days.

Sharing and limits

• We do not sell Google user data or use it for advertising.
• We do not transfer it to others except as needed to send Your emails (to Google or Microsoft, and to our hosting providers acting on our behalf), to comply with law, or as part of a merger or acquisition with notice to You.
• Our staff do not read it unless You ask us to (for example, in a support request), it is needed for security or abuse investigations, or the law requires it.
• We do not use Google user data to develop, improve or train generalized artificial intelligence or machine learning models.

LoadFetcher's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting and deletion

You can disconnect an email account at any time in LoadFetcher under Settings → Email → Remove. For Google accounts this also revokes LoadFetcher's access with Google. You can also remove access from Your Google account at myaccount.google.com/permissions. When You disconnect an account we delete its stored tokens or password; You may ask us to delete Your sent email records sooner by contacting us.

Categories of Personal Data Collected

In the last 12 months, we have collected the following categories of Personal Data:

• Identifiers: name, email address, device ID, IP address, account credentials
• Commercial Information: subscription plan, payment information, invoices
• Internet Activity: logs, telemetry, usage patterns, pages visited, features used
• Geolocation: coarse IP-based location. In our mobile app, precise device location is collected only when you choose "Use my location" to search, and is used to run that search
• Communication Content: support messages, in-product messages, integration content (only if you connect Telegram)

Sensitive Data: We do not intentionally collect sensitive personal data. If provided incidentally (e.g., precise location in an attachment), we limit use to the specific service you requested.

Cookies, Tracking Technologies, and Opt-Out Signals

We use Cookies and similar tracking technologies to track activity on Our Service and store certain information. We use:

• Strictly Necessary Cookies: Required for authentication, security, and fraud prevention
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand aggregated usage patterns (with consent where required)

Opt-Out Signals: We do not sell or share Personal Data and do not serve targeted advertising, so opt-out preference signals such as Global Privacy Control (GPC) and Colorado's Universal Opt-Out Mechanism (UOOM) do not currently change how we process your data. If our practices change, we will implement and honor these signals as required by law.

You can control cookies through your browser settings. Note that disabling necessary cookies may affect your ability to use certain features of the Service.

Selling, Sharing, and Targeted Advertising

We do not sell Personal Data. We do not "share" Personal Data for cross-context behavioral advertising as defined under California and other state privacy laws.

If our practices change in the future and we begin selling or sharing Personal Data, we will:

• Provide a prominent "Do Not Sell or Share My Personal Information" link
• Automatically honor browser opt-out signals (GPC, UOOM)
• Update this Privacy Policy and provide notice

Purposes for Using Personal Data

We use Personal Data for the following purposes:

• To provide and maintain the Service
• To manage Your Account and registration
• To process payments and billing
• To provide customer support
• To secure the Service and prevent fraud
• To debug and improve Service functionality
• To conduct analytics and understand usage patterns
• To comply with legal obligations (tax, compliance, lawful requests)
• To send optional marketing communications (with consent where required)

Legal Bases for Processing (EU/UK/Switzerland)

If you are located in the European Union, United Kingdom, or Switzerland, we process your Personal Data based on the following legal grounds:

• Performance of Contract: To provide your account and Service features
• Legitimate Interests: For security, fraud prevention, analytics, and service improvements (with appropriate safeguards)
• Consent: For marketing communications and non-essential cookies (where required)
• Legal Obligation: For tax compliance, lawful requests, and regulatory requirements

Data Retention

We retain Personal Data only as long as necessary for the purposes described in this Privacy Policy. Typical retention periods by category:

• Account identifiers & billing records: Life of account + 3 years (for legal and tax purposes)
• Logs & telemetry: 12-24 months
• Load & trip data (extension features): Retained only as long as needed to provide the features you use and to identify notifications already sent — no more than 14 days — after which it is deleted
• Emails sent from a connected email account: 30 days, then deleted automatically
• Connected email account credentials (tokens or SMTP password): until You disconnect the account or delete Your LoadFetcher account
• Support tickets: 24 months
• Payment transaction records: 7 years (legal requirement)

After these periods, we securely delete or anonymize Personal Data unless we are required to retain it longer by law.

Sharing Your Personal Data

We may share Your personal information in the following situations:

• With Service Providers: We use vetted vendors to host and process data (e.g., cloud infrastructure, payment processing, email delivery, analytics, error monitoring). We require data protection terms and security controls from all vendors.
• For business transfers: In connection with a merger, acquisition, or sale of assets, your Personal Data may be transferred to the acquiring entity.
• With Affiliates: We may share information with Our affiliates, who will honor this Privacy Policy.
• For legal compliance: When required by law, court order, or government request.
• With Your consent: We may disclose Your personal information for any other purpose with Your consent.

Subprocessors and Third-Party Vendors

We use third-party processors for cloud hosting/CDN, email delivery, error monitoring, analytics, payment processing, and customer support. We require data protection terms and security controls from all vendors. These include:

• Cloud hosting / infrastructure (including DigitalOcean) — to operate our servers and process load and trip data
• HERE Technologies — mapping and geocoding provider used to convert location coordinates into place names and to provide location-search and route/ETA features
• Telegram — to deliver trip and load notifications to a group you connect, if you enable that feature
• Payment processing, email delivery, analytics, and error monitoring providers — to bill, communicate with, and maintain the reliability of the Service

A current list of subprocessors is maintained upon request to [email protected]. We publish material changes to our subprocessors at least 15 days before they take effect where required by contract or law.

International Data Transfers

Your information, including Personal Data, may be transferred to and processed in countries other than your own. These countries may have data protection laws that differ from those in your jurisdiction.

Where required by law (e.g., transfers from the EU, UK, or Switzerland), we use approved transfer mechanisms such as Standard Contractual Clauses (SCCs) and apply appropriate technical and organizational safeguards to protect your data.

Security of Your Personal Data

We use industry-standard security safeguards to protect your Personal Data, including:

• Encryption in transit (TLS/SSL) and at rest for core data stores
• Access controls and authentication mechanisms
• Regular security monitoring and logging
• Security training for personnel with data access

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your Personal Data, we cannot guarantee absolute security.

In the event of a data breach that affects your Personal Data, we will notify you and/or regulators as required by applicable law, including state breach notification laws and GDPR requirements.

Your Privacy Rights and Opt-Outs

Depending on where you live, you may have the following rights regarding your Personal Data:

• Access/Right to Know: Request access to the Personal Data we have about you
• Correction: Request correction of inaccurate Personal Data
• Deletion: Request deletion of your Personal Data (subject to legal retention requirements)
• Portability: Receive a copy of your Personal Data in a portable format
• Opt-Out of Sale/Sharing: Opt out of any sale or sharing of Personal Data (though we do not currently sell or share)
• Opt-Out of Targeted Advertising: Opt out of targeted advertising
• Limit Use of Sensitive Data: Request limits on use of sensitive personal information
• Non-Discrimination: Exercise your rights without discrimination

State-Specific Privacy Rights

As of August 24, 2026, residents of the following U.S. states have specific privacy rights under state law:

California (CCPA/CPRA), Colorado (CPA), Connecticut (CTDPA), Delaware (DPDPA), Iowa (ICDPA), Montana (MCDPA), New Jersey (NJDPA), New Hampshire (NHDPL), Oregon (OCPA), Texas (TDPSA), Utah (UCPA), Virginia (VCDPA)

Opt-Out Preference Signals

We do not sell or share Personal Data or serve targeted advertising, so the following browser-based opt-out signals do not currently change how we process your data:

• Global Privacy Control (GPC) - California and other states
• Universal Opt-Out Mechanism (UOOM) - Colorado and other states

If our practices change and we begin selling or sharing Personal Data or serving targeted advertising, we will implement and honor these signals as required by law.

How to Exercise Your Rights

To exercise your privacy rights, please submit a request to: [email protected]

We will verify your identity before processing your request. We will respond within the timeframe required by applicable law (typically 30-45 days).

Right to Appeal

If we deny your privacy request, you have the right to appeal. You can appeal by replying to our decision email; instructions will be included in our response.

If your appeal is unresolved, you may contact your state Attorney General to file a complaint.

Children's Privacy

Our Service is not directed to children under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13.

We also do not knowingly "sell" or "share" Personal Data of consumers under 16 years of age without affirmative authorization.

If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us at [email protected]. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers.

Links to Other Websites and Third-Party Platforms

Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site.

We strongly advise You to review the Privacy Policy of every site You visit. Interactions with third-party platforms (e.g., freight load boards, Telegram) are governed by their own privacy policies. Their independent data practices are not controlled by us.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date at the top
• Displaying a prominent notice on Our Service (for material changes)

For material changes (e.g., starting to sell or share data, new purposes for processing), we will provide prominent notice and, where required by law, obtain consent or renewed acknowledgment.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.