Privacy Policy

Scope

This Privacy Policy explains what information Highlander Technology, Inc., a Delaware corporation with its principal place of business in Atlanta, Georgia ("Highlander Technology," "we," "us," or "our"), collects through the DeliveryInstructions.ai platform (the "Service"), how we use it, and how we share it.

It applies to everyone who uses the Service, including:

• facility operators and companies who create accounts and build facility delivery instruction profiles;
• carriers, brokers, and other logistics providers who hold a partner account;
• people who receive an invitation to set up a facility profile;
• people who view a facility profile through a shared link; and
• visitors to the website.

Capitalized terms not defined here have the meaning given in the Terms of Service, which also governs how facility information is used and shared.

Information we collect

Account information. When you register, we collect your name, email address, job title, phone number, and the name of your company. For a partner account we also collect information about the operating companies under that account, which may include legal name, doing-business-as name, USDOT number, MC number, and SCAC codes.

Facility profile content. When an operator builds a facility profile, we collect the information they submit about the facility — the structured answers, location pins, and related content that make up the profile. This is business information about a location. How it is used and shared is also governed by the Terms of Service.

Partner customer records. When a carrier, broker, or other partner records its customer list — by typing it in or by uploading a spreadsheet — we collect the customer company name, the facility address, the billing address, the contact name and contact details, and the partner's own customer or vendor number for that customer. These records are held for that partner and are not shown to any other partner.

Invitation information. When an account sends an invitation, we collect the recipient's name and email address, the facility the invitation relates to, the identity of the sending account and sender, and the status of that invitation over time — including when it was sent, opened, forwarded to a different recipient, accepted, completed, expired, or revoked.

Viewer contact information. When a person accesses a shared facility profile through the viewer, we collect an email address before the profile is displayed, and we record which facility was viewed and, where applicable, which facility's shared link referred them.

Access logs. When a facility profile is fetched through a shared link, we record information about the request, including the IP address, browser user-agent, referring page, timestamp, and the facility identifier requested.

Communications and feedback. When you contact support, submit feedback through the Service, or reply to a message from us, we collect the content of that communication and the address you sent it from.

Site usage information. We may use cookies, analytics, and similar technologies to understand how the website and Service are used and to operate and improve them. See the Cookies and similar technologies section.

Payment information. The core facility profile is free, and a partner account is free. When paid products or integrations are offered, payment information will be collected and processed through a third-party payment processor; we do not store full payment card numbers ourselves. This Privacy Policy will be updated to reflect payment processing when those products launch.

Sensitive personal information. We do not collect sensitive personal information as that term is defined under United States state privacy laws — we do not collect government identifiers, financial account numbers, precise geolocation of an individual, racial or ethnic origin, religious beliefs, health information, biometric information, or the contents of your private communications with others.

Where information about other people comes from

Some of the personal information we hold is given to us by one of our customers rather than by the person it describes.

When a carrier, broker, or company records its customer list or sends an invitation, it provides us with the name, email address, and business contact details of a person at the receiving facility. Under the Terms of Service, that customer represents that it has a genuine business relationship with the person, obtained those details lawfully in the course of that relationship, and is entitled to provide them to us.

If you received an invitation from us and want to know who sent it, or you want your details removed, contact us at support@deliveryinstructions.ai and we will tell you which account provided them and act on your request.

How we use information

We use the information we collect to:

• operate, provide, maintain, and secure the Service;
• create and manage accounts, facility profiles, partner customer records, and the links between partners and facilities;
• send invitations on behalf of the accounts that direct them, and report the status of those invitations back to the sender;
• deliver facility instruction data to carriers, brokers, drivers, and other parties as described in the Terms of Service and in the How we share information section below;
• notify an account of events relevant to it, such as an invited facility completing its profile;
• understand how the Service is used, and develop and improve it;
• communicate with operators, partners, and people who have viewed facility profiles, including for support and for sales and marketing outreach about the Service and related products;
• monitor for, investigate, and prevent prohibited use, scraping, invitation abuse, and security threats, and to protect the deliverability and reputation of our sending domain; and
• comply with legal obligations and enforce our agreements.

We may produce aggregated and de-identified data from the information we collect and use it for any purpose connected to operating and growing the Service. We do not use personal information to build profiles of individuals reflecting personal preferences, characteristics, or behavior beyond what is described above.

How we share information

Within the delivery and logistics ecosystem. Facility profile content is made available to the carriers, brokers, drivers, shippers, logistics providers, and their systems and authorized agents who use the Service in connection with deliveries, as described in the Terms of Service. This is the core function of the Service.

With the account that invited you. If you were invited to set up a facility profile, the account that invited you can see the status of its own invitation to you — including whether it was sent, opened, accepted, and whether the profile has been completed — and the contact details it provided for you. It does not see your password or your activity elsewhere in the Service.

Between a facility and the partners linked to it. The company that owns a facility can see which carriers and brokers are linked to that facility and can end any of those links. A partner can see the facilities it has invited and the status of each. A partner is never shown which other partners are linked to a facility, and a facility is not shown a partner's internal customer or vendor numbers or billing addresses.

Service providers. We share information with third-party vendors who perform services on our behalf — such as hosting, database and infrastructure, email delivery, mapping and satellite imagery, analytics, payment processing, and customer support — and who are permitted to use the information only to provide those services to us.

Legal and protective reasons. We may disclose information where we believe it is required by law, or necessary to enforce our agreements, protect the rights, safety, or property of Highlander Technology or others, or investigate prohibited use or abuse.

Business transfers. If Highlander Technology is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

We do not sell personal information. Highlander Technology does not sell personal information and does not share personal information for cross-context behavioral advertising. Licensing aggregated, compiled, or de-identified data to integration partners — data that does not identify an individual — is not a sale of personal information. We have not sold or shared personal information in the twelve months before the effective date of this Policy.

Cookies and similar technologies

We use two kinds of cookies and similar technologies.

Strictly necessary and functional. These make the Service work — for example, operating the website, keeping a signed-in user signed in, and maintaining a session. These technologies are necessary to provide the Service and are used whenever you use it.

Analytics and similar. We may use analytics and similar technologies to understand how the website and Service are used. As of the effective date of this Policy, the Service does not use third-party advertising or tracking cookies, and does not display a cookie-consent banner. If the Service begins using analytics or similar technologies that set tracking cookies, we will provide notice and consent mechanisms as required by applicable law at that time.

Do Not Track. Because the Service does not track individuals across third-party websites over time, we do not respond to Do Not Track browser signals. Where required by law, we honor an opt-out preference signal for the sale or sharing of personal information; as stated above, we do not sell or share personal information.

Where information is processed

The Service is operated from the United States and is intended for business users in the United States. Information we collect is processed and stored in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those of your country.

Data retention

We retain information for as long as it is needed for the purposes described in this Policy.

• Account information and facility profile content are retained for as long as the account is active. On a request for account deletion, we deactivate the facility profile and its shared link and delete or de-identify the facility information held in the account within a reasonable period — except that data already incorporated into aggregated or derived datasets, or already delivered to recipients through the Service, is retained, as described in the Terms of Service.
• Partner customer records are retained for as long as the partner account is active, and are deleted or de-identified within a reasonable period after it closes.
• Invitation records are retained after an invitation is completed, expired, or revoked, as the record of how a facility came to be on the Service.
• Viewer contact information and access logs are retained for as long as needed to operate and secure the Service, to understand how facility profiles are used, and to investigate abuse.

We may retain information for longer where required to comply with legal obligations, resolve disputes, or enforce our agreements.

Security

We use reasonable administrative, technical, and physical safeguards to protect the information we collect, including encryption in transit, access controls that limit each account to the records it is entitled to see, and logging of access to shared facility profiles. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your choices and rights

Access and correction. Account holders can review and update their account information through their account settings. If you cannot change something yourself, contact us and we will correct it.

Deletion. You can request deletion of your account and profile by contacting us at support@deliveryinstructions.ai.

Marketing email. You can opt out of sales and marketing email at any time by using the unsubscribe link in the message or by contacting us. You cannot opt out of messages necessary to operate your account — verification codes, invitation notices, security notices, and notices about changes to our terms — while you hold an account.

Invitations you did not ask for. If you received an invitation and do not want to be contacted again, contact us at support@deliveryinstructions.ai and we will remove your details and tell the sending account.

Your privacy rights under United States state law

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• to know what personal information we have collected about you, the categories of sources, the purposes for collecting it, and the categories of third parties we disclose it to;
• to obtain a copy of that personal information, in a portable form where required;
• to correct inaccurate personal information;
• to delete personal information;
• to opt out of the sale or sharing of personal information, and of profiling that produces legal or similarly significant effects — we do not sell or share personal information and we do not carry out that kind of profiling; and
• not to be discriminated against for exercising any of these rights.

Categories of personal information we collect. Over the twelve months before the effective date of this Policy, we have collected the following categories: identifiers (name, email address, phone number, IP address, and account identifiers); commercial information (partner customer records, invitation history, and account history); professional or employment-related information (job title and employer); and internet or other electronic network activity information (access logs, browser user-agent, referring page, and pages viewed). We collect this information directly from you, from the account that invited you or recorded you as its customer, automatically from your device when you use the Service, and from our service providers. We collect it for the purposes described in the How we use information section, and disclose it for a business purpose to the categories of recipients described in the How we share information section. We do not collect sensitive personal information.

How to submit a request. Send a request to support@deliveryinstructions.ai. We will verify your identity as required by applicable law — usually by confirming that you control the email address on the account or the address the request concerns — and respond within the time the law allows. An authorized agent may submit a request on your behalf with written permission that we can verify.

Appeals. If we decline your request, you may appeal by replying to our response or writing to support@deliveryinstructions.ai with the word "appeal" in the subject line. We will review the appeal and respond in writing within the time the law allows, and we will tell you how to contact your state attorney general if you disagree with the outcome.

Children

The Service is intended for businesses and is not directed to individuals under 18, and it is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it.

Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will update the version identifier and effective date shown at the top of this Policy. If the changes are material, we may take additional steps to notify users.

Contact

Questions about this Privacy Policy, and requests under the sections above, can be sent to support@deliveryinstructions.ai.