Privacy Policy

OVERVIEW AND SCOPE

SemiCab Holdings LLC and SMCB Solutions Private Limited (collectively, “SemiCab”, “we”, “us” or “our”), are committed to protecting your privacy. This Privacy Policy outlines how we collect, use,.

disclose and secure information through our Platform, which operates across multiple jurisdictions including the United States of America (US) and India. This Privacy Policy describes our practices in connection with information that we collect through:

Websites operated by us, including the one from which you are accessing this Privacy Policy (“Websites”)

Our software and applications made available by us for use on or through the computers and mobile devices (“Apps” or “Platform”).

Our official social media pages: Facebook, LinkedIn, Twitter, Instagram, YouTube (“Social Media Pages”)

HTML-formatted email messages and electronic communications sent to you.

Our WiFi networks, including guest WiFi networks that you may choose to access if you visit our offices; and

Offline business interactions that you have with us.

Collectively, these channels including the Websites, Apps, Platform, Social Media Pages, emails and offline business interactions are referred to as the “Services”.

We provide registered entities or individuals utilizing the Services to arrange for the transportation of their goods or commodities (“Shippers”) access to a marketplace of independent motor carriers or transportation providers utilizing the Services to accept and transport freight (“Carriers”).

NOTE: The Services are not directed to individuals under the age of 18. We do not knowingly collect Personal Data or Information from individuals under the age of 18. Where a user is identified as a minor, we will require verifiable parental or guardian consent before processing their data, in compliance with applicable law

CATEGORIES OF PERSONAL DATA/INFORMATION WE COLLECT

“Personal Data” or “Personal Information” means any information that identifies, relates to, describes, or can reasonably be linked to an identifiable individual. We collect the following categories of data:

Identifiers: Full name, email address, postal address (including billing, shipping and company addresses), and telephone number.

Account Credentials: Usernames, passwords, and security verification data.

Professional/Employment Details: Company or employer name and shipper or carrier affiliation.

Regulatory & Compliance Documentation: Driver’s licenses, commercial driving records, tax identification numbers and operating authority documentation.

Uploaded Content: Information, signatures, or files uploaded to our Platform, such as Bills of Lading (BOL), Proof of Delivery (POD) documents, and cargo condition photographs.

Financial Data: Bank account details, payment card information (handled through PCI-DSS compliant processors), and invoicing records

We need to collect Personal Data in order to provide the requested Services to you. If you do not provide the information requested, we may not be able to provide the Services. If you disclose any Personal Data relating to other people to us or to or to our service providers in connection with the Services, you represent that you have the authority and consent to do so and permit us to use the data in accordance with this Privacy Policy.

HOW WE USE YOUR PERSONAL DATA

We and our service providers process Personal Data in accordance with global privacy frameworks. Our primary processing purposes include:

Fulfilling Service Functionality: Arranging access to your registered account or processing bills for transactions and verifying onboarding credentials; responding to your queries and fulfilling your requests. This includes sharing basic and contact information with financial service and payment providers to enable transaction processing, as well as modifying the format of your provided data to ensure it is technically compatible with the Service.

Real-Time Logistics Operations: Tracking shipments from origin to destination, generating accurate ETAs, processing operational geolocation data and sending automated operational notifications to Platform users.

Administrative & Legal Communications: Delivering critical system updates, Platform security alerts, modifications to our legal terms, or regulatory disclosures. This includes contacting you directly via email or telephone to handle routine administrative matters, service your account, or notify you about structural changes to our service offerings.

Security and Fraud Prevention: Monitoring the Platform to detect, investigate, and prevent cyberattacks, identity theft, unauthorized load access or fraudulent transactions. This incorporates our legitimate efforts to keep our site and services safe and secure, as well as disclosing information to the extent required to protect the rights, property, or safety of SemiCab, our subscribers, or others.

Analytics and Platform Enhancement: De-identifying, aggregating, or anonymizing Personal Data and logging basic device metadata (such as IP addresses, operating systems, and browser software) to prepare trend reports on logistics network efficiency and profiles or aggregate traffic reports,. This information is utilized to perform routine system maintenance, administer our site under our terms, troubleshoot system code, and engineer new Pplatform features via dedicated data analysis, testing, research, statistical, and survey modeling..

Automated Decision-Making and Profiling: We use proprietary predictive algorithms to facilitate freight matching, dynamic pricing, and route optimisation. These processes involve automated decision-making that may produce outputs which affect your experience of the Services. Please refer to Section 9.2 (US) and Section 9.1 (India) for your rights in connection with automated processing

Marketing, Advertisements, and Recommendations: Using your basic contact information to respond to inquiries, delivering future mailings regarding new products or services, measuring the effectiveness of our advertising campaigns and making tailored suggestions or recommendations about goods or services that may interest you, entirely subject to your explicit consent and opt-out preferences.

Dispute Resolution and Contract Enforcement: Accessing and utilizing collected data to actively resolve platform disputes, troubleshoot user problems, and legally enforce the master SemiCab agreement or our terms and conditions of use.

Interactive Participation: Processing information to allow you to seamlessly participate in interactive features of our digital services whenever you choose to engage with them.

HOW WE SHARE AND DISCLOSE INFORMATION

To facilitate our Services and for the purposes described in this Policy, we disclose information to specific parties. All third-party service providers who process Personal Data on our behalf are bound by data processing agreements (“DPAs”) that restrict their use of such data to the purposes for which it was shared and require them to implement appropriate technical and organisational security measures. We do not sell your Personal Data, nor do we share it for cross-context behavioural advertising purposes.

Categories of recipients include:

Affiliates, subsidiaries, agents and business partners, including between SemiCab's US and Indian entities, for the operational and administrative purposes described in this Policy.

Third-party service providers engaged to facilitate services on our behalf — including web hosting, user authentication, data analytics, order fulfilment, fraud prevention, IT infrastructure, customer service, and email delivery — who are bound by DPAs limiting their use to instructed purposes.

Other platform users, including relevant Shippers and Carriers, to the extent necessary for the provision of freight matching and logistics Services.

Legal, regulatory, and government authorities, to comply with applicable laws, judicial proceedings, statutory audits, law enforcement demands, and regulatory requirements.

Successor entities, in the event of any reorganisation, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business or assets.

OTHER INFORMATION

(a) “Other Information” is any information that does not reveal your specific identity or does not directly relate to an identifiable individual. We and our service providers may collect Other Information including:

Physical Location: Real-time GPS coordinates of your mobile device or transport vehicle, collected during active shipment periods only (from load acceptance to confirmed delivery), to facilitate real-time ETA calculations, milestone tracking, and cargo security. This data is shared with the counterparty Shipper and/or Carrier as necessary to perform the Services, and with telematics integration partners bound by DPAs. You may limit collection by disabling location services on your device, although this will impair functionality.

Device and Network Metadata: IP address (from which approximate location may be derived), browser type, hardware model, operating system version, MAC address, and detailed app usage logs.

Cookies and Tracking Technologies: Keystrokes, page scrolls, time spent on the Services, and interaction metrics gathered via first-party cookies, pixel tags, and third-party analytics integrations.

(b) Uses and Disclosures of Other Information

We may use and disclose Other Information for any purpose, except where we are required to do otherwise under applicable law. If we are required to treat Other Information as Personal Data under applicable law, we may use and disclose it for the purposes for which we use and disclose Personal Data as detailed in this Privacy Policy. In some instances, we may combine Other Information with Personal Data. If we do, we will treat the combined information as Personal Data as long as it is combined.

(c) Third-Party Services and Links:

This Privacy Policy does not address, and we are not responsible for, the privacy, data collection, or security practices of any third parties, including any third party operating any website or service to which the Services link. The inclusion of a link on the Services does not imply endorsement of the linked site or service by us or by our affiliates.

INTERNATIONAL DATA TRANSFERS

Your Personal Data may be transferred to, stored, and processed in jurisdictions outside of your home country, primarily the United States and India. We implement strict technical and contractual safeguards to ensure transferred data receives an equivalent standard of protection regardless of location.

(a) Transfers from India

Transfers of personal data from India are governed by Section 16 of the Digital Personal Data Protection Act, 2023. We will only transfer Personal Data outside India to jurisdictions that are permitted under the approved list notified by the Central Government under the DPDP Act. Where the destination country has not yet been approved, we will implement equivalent contractual safeguards (such as standard contractual clauses or binding data processing agreements) before any transfer. We will update this section as the approved country list is notified by the Government of India.

(b) Transfers from the United States

Transfers of data involving US-resident individuals to India or other jurisdictions will be conducted pursuant to applicable US state privacy law requirements, including appropriate data transfer mechanisms and contractual protections binding the recipient entity.

By using the Services from any other region of the world, you expressly consent to the transfer and processing of your data in the United States and India as necessary to provide the Services, subject to the protections described in this Privacy Policy.

DATA SECURITY AND RETENTION

(a) Security Measures

We deploy rigorous organizational, technical and administrative measures designed to protect Personal Data. This includes using secure HTTPS communications, SSL encryption layers during data transit, network-level firewalls, and strict role-based access permissions for internal data systems. However, no digital system can be guaranteed to be 100% secure; please notify us immediately if you suspect an account compromise. In the event of a security breach that compromises your Personal Data, we will notify you and the relevant regulatory authorities as required by applicable law.

In the event of a personal data breach that affects your Personal Data, we will:

Notify the relevant regulatory authority (including the Data Protection Board of India and applicable US state regulators) within the timeline prescribed under applicable law;

Notify affected individuals as required by applicable law, with information about the nature of the breach, data affected, likely consequences, and steps taken to address it; and

Maintain a breach register and take remedial action to prevent recurrence.

(b) Retention Periods

We retain Personal Data only for as long as necessary to satisfy the specific operational purposes for which it was collected, or to comply with applicable statutory record-keeping, financial auditing, or legal defence obligations. For processing subject to Indian jurisdiction, we are legally mandated to retain Personal Data, associated traffic data and system logs for a minimum period of one (1) year under the Digital Personal Data Protection Rules, 2025. Geolocation coordinates and historical Platform data are systematically anonymized following these applicable statutory retention windows. Once anonymized, this data ceases to be Personal Data and is stored for Platform analytics and routing optimization. or purged following the successful closure and billing verification of a shipment transaction, unless a formal legal dispute or insurance claim requires extended preservation.

YOUR CHOICES AND CONTROLS

Marketing Emails: If you no longer want to receive marketing related emails from us, you may opt out by clicking the “unsubscribe” link included at the bottom of each marketing email. Please note that we may still send you important administrative and operational messages (such as billing notices or transit alerts), from which you cannot opt out.

SMS / Text Messages: If you no longer wish to receive SMS/text messages regarding load statuses or platform updates, you may opt out at any time by replying “STOP” to [number from which the messages are sent]

Location Services: You may disable real-time location tracking by withdrawing location permissions in your device settings. Note that this will impair certain Platform features including live shipment tracking.

Account Information: You may review, correct, or update your registered account information at any time by logging into the Platform and accessing your profile settings.

JURISDICTION SPECIFIC RIGHTS

9.1 India: For individuals residing in India whose Personal Data is processed by SMCB Solutions Private Limited:

Consent and Purpose Limitation: We process your digital Personal Data strictly based on clear, specific, and revocable consent, or for designated legitimate uses specified under the Digital Personal Data Protection Act, 2023 (“DPDP Act”). Your consent may be withdrawn at any time by contacting the Grievance Officer below; withdrawal will not affect the lawfulness of processing carried out prior to withdrawal.

(b) Your Rights: Your rights as a Data Principal under the DPDP Act include:

Right to Access: Obtain a summary of your Personal Data being processed by us and the purposes for which it is processed.

Right to Correction and Erasure: Request the correction of inaccurate or incomplete data, and the erasure of your Personal Data once the purpose for which it was collected has been fulfilled, subject to legal retention obligations.

Right to Grievance Redressal: Have your grievance addressed within the timelines prescribed under applicable law. If unresolved, you have the right to approach the Data Protection Board of India.

Right to Nominate: Nominate another individual (a "nominee") who may exercise your rights under the DPDP Act in the event of your death or incapacity. You may designate a nominee by submitting a written request to the Grievance Officer.

(c) Right to Withdraw Consent: Withdraw your consent for processing at any time. Withdrawal will result in discontinuation of Services that depend on the relevant processing.

(e) Grievance Redressal: If you have any complaints or wish to escalate an unresolved data processing concern, you may contact our designated grievance officer:

Attn: ____________________________

Address: First Floor IndiQube South Summit situated at S End Rd Vijayarangam Layout Jayanagar, Bangalore South, Bangalore Urban, Karnataka-560004, India

Email: ____________________________

Working Hours: Monday to Friday, 9:00 AM to 6:00 PM IST

9.2 United States

Depending on your U.S. state of residence, applicable state privacy laws may grant you specific rights regarding your Personal Data.

(a) Your rights include:

Right to Access / Know: Request confirmation of whether we are processing your Personal Data and request disclosure of the specific categories and pieces of data we have collected.

Right to Correction: Request the correction of inaccurate Personal Data we maintain about you.

Right to Deletion: Request the deletion of your Personal Data, subject to certain legal, regulatory, and operational exceptions.

Right to Limit Use of Sensitive Data: Request that we limit the use and disclosure of your Sensitive Personal Data to the core operational services required to fulfil your freight transactions.

Right to Data Portability: Obtain a copy of your Personal Data in a portable, readily usable format that allows you to transmit the data to another entity.

To submit an access, correction, or deletion request, please contact us at _____________________. You may also designate an authorized agent to make a request on your behalf, subject to verification of the agent's authority and confirmation of your identity. We will verify and respond to your request consistent with applicable state law.

UPDATES TO THIS PRIVACY POLICY

We reserve the right to unilaterally update or modify this Privacy Policy at any time. The “Last Updated” legend at the top of this page indicates when this Privacy Policy was last revised. Any changes will become effective immediately upon our posting of the revised Privacy Policy on the Services.

CONTACT US

If you have any questions, complaints or require access to this policy in an alternative format, please contact our data protection team:

Global Email: ___________________

US Desk: ___________________

India Desk: info@semicab.com

‍