Privacy & Data Processing Policy

1. Introduction

BlueJourney Inc., doing business as Numeo ("Numeo," "we," "our," or "us"), is committed to protecting the privacy, confidentiality, and security of the information entrusted to us by our customers, users, partners, and website visitors.

Numeo develops and operates an AI-powered transportation operating platform (the "Platform") that helps carriers, owner-operators, freight brokers, dispatchers, logistics providers, and transportation companies automate operational workflows, including dispatching, communications, document processing, accounting, fleet management, load tracking, and other transportation-related business processes.

Because the Platform processes business communications and operational information that may contain personal information, commercial information, and confidential business data, privacy and security are fundamental design principles throughout our product.

This Privacy & Data Processing Policy ("Policy") explains how we collect, use, disclose, process, store, protect, and transfer information when you access or use the Numeo Platform, including our:

• website;
• web application;
• browser extensions, including the Numeo Chrome Extension;
• mobile applications;
• APIs;
• AI agents and AI-powered assistants;
• email automation services;
• voice automation services;
• document processing features;
• integrations with third-party services; and
• any other products or services that reference this Policy (collectively, the "Services").

By accessing or using the Platform, you acknowledge that you have read and understood this Policy.

2. Our Privacy Principles

Privacy at Numeo is guided by the following principles.

Customer First Except as expressly provided in applicable agreements, Customers retain all rights, title, and interest in Customer Data. Numeo does not acquire ownership of Customer Data by virtue of providing the Platform. Numeo processes Customer Data only for the purposes authorized by our Customers and as necessary to provide the Platform.

Transparency We explain in clear language what information we collect, why we collect it, and how it is used.

Security by Design Security considerations are incorporated into the design, development, deployment, and operation of the Platform.

Data Minimization We seek to collect only the information reasonably necessary to operate, secure, maintain, and improve the Platform.

Responsible AI Artificial intelligence is used only to provide requested functionality. Information obtained through supported productivity platform integrations, including Google user data, is not used to develop, improve, or train generalized artificial intelligence or machine learning models.

3. Scope

This Policy applies to:

• visitors to our website;
• users of the Platform;
• customers purchasing subscriptions;
• administrators managing organizational accounts;
• prospective customers;
• individuals whose information is processed through customer accounts; and
• individuals communicating with Numeo.

This Policy applies regardless of whether the Platform is accessed through a browser, mobile device, API, browser extension, desktop application, or integrated third-party service.

This Policy does not apply to information processed by independent third-party products or services that maintain their own privacy policies, including payment providers, email providers, telematics providers, mapping providers, load boards, or other third-party platforms integrated with Numeo.

4. Definitions

For purposes of this Policy:

Account means a registered user account used to access the Platform.

AI Services means Numeo's artificial intelligence features, including document processing, email generation, workflow automation, classification, summarization, extraction, and related capabilities.

Customer means an individual or legal entity that registers for or purchases the Platform.

Customer Data means all information, documents, communications, files, records, prompts, operational data, and other content submitted to, uploaded to, transmitted through, or processed by the Platform on behalf of a Customer. Customer Data may contain Business Data, which in turn may contain Personal Information.

Business Data means non-personal commercial and operational information contained within Customer Data, including Operational Data and Confidential Business Information.

Confidential Business Information means commercially sensitive business information processed through the Platform, including freight rates, rate confirmations, broker and carrier communications, invoices, settlements, contracts, and similar records.

Personal Information means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with an identifiable individual, as defined under applicable law.

Operational Data means transportation-related information processed through the Platform, including load information, shipment details, dispatch records, driver assignments, equipment information, invoices, transportation documents, and workflow records.

Platform and Services mean all websites, applications, browser extensions, APIs, AI agents, voice services, integrations, and related technologies operated by Numeo.

The relationship between these categories can be summarized as: Customer Data contains Business Data (including Operational Data and Confidential Business Information), which may in turn contain Personal Information.

5. Information We Collect

The categories of information we collect depend on the parts of the Platform you use, the permissions you grant, your account configuration, and the integrations you enable.

5.1 Account Information

When you create or administer an account, we may collect information including:

• name;
• company name;
• business address;
• email address;
• telephone number;
• account credentials;
• authentication information;
• subscription details;
• billing information;
• payment history;
• organization settings;
• user roles and permissions; and
• customer support information.

We use this information to create and administer accounts, authenticate users, provide support, process payments, maintain security, and deliver the Platform.

5.2 Communication Data

When Customers connect supported communication platforms, Numeo may process business communications necessary to provide requested functionality.

Depending on permissions granted, this may include:

• email subject lines;
• message bodies;
• attachments;
• sender information;
• recipient information;
• CC and BCC recipients;
• timestamps;
• message identifiers;
• conversation history;
• delivery status;
• metadata associated with communications; and
• user actions performed within communication workflows.

Communication Data is used to provide features such as AI email drafting, dispatch workflow automation, communication summarization, document extraction, workflow routing, customer-requested automation, fraud detection, duplicate detection, customer-requested operational analytics on the Customer's own data, and customer support.

5.3 Operational Transportation Data

Because Numeo is designed for transportation businesses, Customers may submit operational information including:

• load information;
• shipment information;
• carrier information;
• broker information;
• dispatcher information;
• driver information;
• equipment information;
• trailer information;
• pickup and delivery locations;
• appointment times;
• freight descriptions;
• rate confirmations;
• bills of lading;
• proofs of delivery;
• invoices;
• settlements;
• fuel transactions;
• routing information;
• delivery status;
• tracking updates;
• operational notes;
• task management information; and
• workflow history.

Operational Data is processed solely to provide transportation management, workflow automation, document processing, accounting, reporting, and other customer-requested functionality.

5.4 Confidential Business Information

In the course of providing the Platform, Numeo processes commercially sensitive business information on behalf of Customers, which may include freight rates, rate confirmations, broker and carrier communications, invoices, settlements, and contracts. Numeo treats Confidential Business Information with the same care and security safeguards applied to other Customer Data and processes it only to provide the Platform and as instructed by the Customer.

5.5 AI Interaction Data

When Customers use AI-powered features, Numeo may process:

• prompts;
• instructions;
• workflow approvals;
• AI responses;
• user feedback;
• correction history;
• generated drafts;
• automation preferences;
• workflow configurations; and
• interaction logs.

This information enables AI Services requested by Customers and helps improve the reliability, safety, and performance of customer-specific workflows.

5.6 Voice Communications

Where voice capabilities are enabled, Numeo may process:

• call recordings;
• voicemail;
• call transcripts;
• speech-to-text output;
• AI-generated speech;
• call metadata;
• timestamps;
• call duration; and
• telephone numbers involved in communications.

Voice processing occurs only for the purpose of providing requested voice automation, call management, customer support, workflow automation, and related functionality.

5.7 Fleet, Vehicle, and Location Information

Customers may connect telematics or fleet management providers to enable operational features.

Depending on enabled integrations, Numeo may receive:

• GPS location information;
• vehicle identifiers;
• trailer identifiers;
• driver assignments;
• estimated arrival times;
• route progress;
• telematics events;
• trip history;
• operational status;
• maintenance information;
• weather-related information;
• geofence events; and
• fleet performance metrics.

Location information is processed solely to provide requested fleet management, dispatching, tracking, operational analytics, and workflow automation.

5.8 Device, Technical, and Usage Information

We automatically collect technical information necessary to operate, secure, and improve the Platform.

This information may include:

• IP address;
• browser type;
• operating system;
• device identifiers;
• log files;
• crash reports;
• performance metrics;
• authentication events;
• API usage;
• feature usage;
• session information;
• diagnostic information; and
• security events.

This information helps us maintain system security, diagnose issues, improve performance, detect abuse, and enhance the customer experience.

5.9 Cookies and Similar Technologies

We use cookies, pixels, local storage, and similar technologies to authenticate users, remember preferences, maintain sessions, improve usability, analyze platform performance, understand feature usage, protect against fraud and abuse, and measure the effectiveness of communications and marketing activities.

Customers may control certain cookie preferences through browser settings or other available controls, although disabling certain technologies may affect the functionality of the Platform.

6. How We Use Information

Numeo uses the information described in this Policy only for legitimate business purposes, including providing, securing, maintaining, improving, and supporting the Platform requested by our customers.

Depending on the features used, we may use information to:

• create and administer user accounts;
• authenticate users and manage access permissions;
• provide AI-powered dispatching, workflow automation, and transportation management services;
• process transportation documents;
• summarize and organize business communications;
• draft emails, messages, and operational communications at the direction of authorized users;
• automate dispatch, accounting, invoicing, settlement, and operational workflows;
• provide fleet tracking, ETA calculations, and operational visibility;
• generate reports, dashboards, and analytics;
• detect fraud, abuse, spam, suspicious activity, and unauthorized access;
• troubleshoot technical issues and provide customer support;
• improve platform reliability, performance, usability, and security;
• comply with legal obligations;
• enforce our agreements and policies; and
• communicate with customers regarding their accounts, subscriptions, updates, security notices, and product improvements.

We do not use Customer Data for purposes that are incompatible with the purposes for which it was collected.

7. Customer Responsibilities

The Platform is designed for business use, and Customers control what information they submit to Numeo and how the Platform is configured.

Customers are responsible for:

• ensuring they have all necessary rights, permissions, and legal bases to submit Personal Information and other Customer Data to the Platform;
• complying with applicable privacy, data protection, communications, and transportation laws governing their business operations;
• determining the lawful basis for collecting and processing Personal Information through their use of the Platform;
• configuring appropriate user roles, permissions, and approval workflows;
• providing any notices and obtaining any consents required for the data they submit; and
• responding to requests from individuals whose Personal Information they submit, except where Numeo has agreed otherwise.

Where Numeo processes Customer Data on behalf of a Customer, the Customer acts as the controller (or equivalent) of that data and Numeo acts as the processor or service provider.

8. Artificial Intelligence Processing

Artificial intelligence is a core component of the Numeo Platform.

Customers may choose to enable AI-powered capabilities that assist with transportation operations, communications, accounting, document processing, workflow automation, voice interactions, and other operational activities.

Depending on the features enabled, AI Services may:

• summarize communications;
• classify incoming emails;
• extract structured information from transportation documents;
• generate draft email responses;
• recommend operational actions;
• organize transportation workflows;
• identify duplicate or conflicting information;
• assist with scheduling;
• automate repetitive administrative tasks;
• generate reports and summaries;
• identify potential fraud indicators; and
• provide conversational assistance.

AI-generated outputs are probabilistic in nature and may contain inaccuracies, incomplete information, or recommendations that require human judgment. Customers remain responsible for reviewing AI-generated outputs before relying on them for operational, financial, contractual, or legal decisions. AI-generated outputs do not constitute professional legal, financial, regulatory, or operational advice.

Numeo continually improves the quality, safety, and reliability of its AI systems. Where Customer Data is used in connection with AI Services, such processing is performed only to provide the Platform requested by the Customer. Google user data is never used to develop, improve, or train generalized artificial intelligence or machine learning models.

Human Oversight

Many AI-powered workflows include configurable approval mechanisms that allow Customers to review, approve, reject, or modify AI-generated outputs before actions are taken. Customers remain responsible for configuring appropriate approval workflows based on their operational requirements.

AI Safety

Numeo implements technical and organizational measures intended to improve the safety and reliability of AI-generated outputs, including:

• prompt validation;
• workflow controls;
• permission-based automation;
• approval workflows;
• monitoring for unusual behavior;
• abuse prevention mechanisms;
• security reviews; and
• ongoing model evaluation.

9. Google Workspace, Microsoft 365, and Productivity Platform Integrations

Customers may choose to connect supported productivity platforms, including Google Workspace, Microsoft 365, Microsoft Outlook, Gmail, and other supported communication providers.

Subject to permissions granted by Customers, Numeo may process:

• email messages;
• attachments;
• sender and recipient information;
• timestamps;
• labels and folders;
• message metadata;
• calendar information where authorized;
• contact information where authorized; and
• related communication data.

This information is processed solely to provide requested functionality such as AI email drafting, dispatch workflow automation, document extraction, communication management, workflow organization, and customer-requested automation.

Incremental Access and Scopes

Numeo requests access to Google accounts incrementally, requesting only the permissions needed for the features a Customer actually enables. Permission to send email is requested when an account is first connected, so that broker outreach and follow-up messages can be sent from the connected account at the user's direction. Permission to read and manage email is requested separately, and only if a Customer enables AI tools such as AI Hub, in order to extract load and rate-confirmation details, match broker replies to loads, organize and label relevant messages, and draft and send responses at the user's direction. Customers may decline the additional permissions and continue using sending features, and may disconnect a connected Google account at any time from Numeo settings or the Google Account security page, which revokes Numeo's access.

AI Subprocessors

To provide AI-powered features, Numeo transmits the minimum necessary Google user data to enterprise artificial intelligence providers that process it on Numeo's behalf, solely to generate the outputs a Customer requests (for example, extracting load and rate details from broker emails and drafting replies). These providers currently include Microsoft Azure OpenAI Service, OpenAI, Google (Vertex AI and Gemini), and Anthropic. Each processes this data under enterprise API terms that prohibit using it to train or improve their models, and none is permitted to use Google user data for any purpose other than providing these features to Numeo. Numeo does not route Google user data to consumer AI services or to open-weight model providers.

Google API Services User Data and Limited Use

Numeo's use and transfer of information received from Google APIs — including Gmail and Google Workspace accounts — adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, Numeo:

• uses Google user data only to provide and improve the user-facing features described above;
• does not sell Google user data;
• does not use it for advertising of any kind, credit or lending decisions, or building databases;
• does not transfer it to third parties except to provide these features (for example, our cloud hosting provider), to comply with applicable law, or as part of a merger or acquisition;
• does not use it to develop, improve, or train generalized artificial intelligence or machine learning models; and
• does not allow humans to read it, except with the user's explicit consent, where necessary for security or to comply with applicable law, or in aggregated, anonymized form.

To request deletion of stored Google user data, email support@numeo.ai; Numeo deletes it within 30 days unless applicable law requires retention.

10. Third-Party Integrations

Customers may choose to connect third-party platforms and services to the Numeo Platform. Examples may include email providers, telematics providers, fleet management systems, transportation management systems, payment processors, mapping providers, voice providers, cloud storage providers, authentication providers, accounting software, document management platforms, load boards, and other customer-authorized integrations.

Numeo accesses information from these integrations only as authorized by the Customer and only to provide the requested functionality. Each third-party provider maintains its own privacy practices and terms governing its services.

11. How We Share Information

Numeo does not sell Personal Information. We also do not sell Customer Data. We disclose information only in the circumstances described below.

Service Providers and Subprocessors

We may share information with trusted service providers and subprocessors that perform services on our behalf, including cloud hosting, infrastructure providers, customer support providers, payment processors, security providers, analytics providers, communications providers, and document processing providers.

These providers are contractually required to protect information and may process Customer Data only for the purposes specified by Numeo. The subprocessors that process Google user data to provide AI-powered features are identified in Section 9. A current list of the other subprocessors used to process Customer Data is available on request by contacting Numeo.

Customer-Directed Sharing

The Platform is designed to facilitate business communications and operational workflows. Accordingly, information may be shared with recipients designated by Customers, including brokers, carriers, dispatchers, drivers, customers, logistics partners, factoring companies, financial institutions, transportation software providers, and other third parties authorized by the Customer. Numeo shares such information solely in accordance with Customer instructions.

Legal Requirements

We may disclose information when we reasonably believe disclosure is necessary to comply with applicable law, respond to lawful requests from governmental authorities, comply with court orders or legal process, protect the safety of individuals, investigate fraud or security incidents, enforce our agreements, or protect the rights, property, or security of Numeo, our customers, or others.

Corporate Transactions

If Numeo is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction, Customer Data may be transferred as part of that transaction, subject to applicable confidentiality obligations and legal requirements. Customers will be notified where required by applicable law.

Aggregated and De-Identified Information

We may create aggregated, anonymized, or de-identified information that cannot reasonably identify an individual or Customer. Such information may be used for analytics, product improvement, benchmarking, research, security analysis, and business reporting. This does not apply to Google user data: Numeo does not use Google user data, or any aggregated or de-identified information derived from it, for benchmarking, market research, or business reporting, and does not transfer it except as needed to provide the user-facing features requested by the Customer. Where required by applicable law, Numeo will maintain such information in de-identified form and will not attempt to re-identify individuals.

12. Data Security

Numeo maintains a comprehensive information security program designed to protect Customer Data throughout its lifecycle. We implement administrative, technical, and organizational safeguards designed to protect Personal Information and Customer Data against unauthorized access, disclosure, alteration, destruction, misuse, and accidental loss.

Our security program is designed using recognized industry security principles and is continuously reviewed as the Platform evolves. Security measures may include, as applicable:

• encryption of data in transit using industry-standard transport encryption;
• encryption of Customer Data at rest where appropriate;
• role-based access controls limiting access to authorized personnel;
• multi-factor authentication for administrative access where applicable;
• least-privilege access principles;
• audit logging of security-sensitive activities;
• continuous monitoring of production environments;
• vulnerability management and security patching;
• backup and disaster recovery procedures;
• employee security awareness training;
• secure software development practices;
• incident detection and response procedures; and
• periodic reviews of security controls.

Access to Customer Data is limited to personnel and authorized service providers who require such access to perform their responsibilities and who are subject to appropriate confidentiality obligations.

Although no security program can guarantee absolute protection, Numeo continually evaluates and enhances its safeguards to reduce security risks and protect Customer information.

Incident Response

Numeo maintains incident detection and response procedures designed to identify, investigate, contain, and remediate security incidents. If Numeo becomes aware of a security incident affecting Customer Data, we will take reasonable steps to investigate and mitigate the incident and will notify affected Customers and, where required, regulators or individuals, in accordance with applicable law and our contractual commitments.

13. Data Retention

Numeo retains Personal Information and Customer Data only for as long as necessary to provide the Platform, fulfill contractual obligations, comply with applicable legal requirements, resolve disputes, enforce agreements, and maintain legitimate business records. Retention periods depend on the nature of the information and the features being used.

Generally:

• Account information is retained while an account remains active and for a reasonable period thereafter.
• Customer operational data is retained according to Customer configuration, contractual commitments, or applicable legal requirements.
• Billing and financial records may be retained as required by applicable tax, accounting, and financial reporting laws.
• System logs and security records may be retained for security monitoring, incident investigation, compliance, and fraud prevention.
• Backup copies may remain in secure archival systems for limited periods before being automatically overwritten or deleted.

Customers may request deletion of Customer Data, subject to contractual obligations, legal requirements, backup retention schedules, and legitimate security purposes. Upon expiration of applicable retention periods, Customer Data is securely deleted, anonymized, or otherwise rendered inaccessible in accordance with Numeo's internal data management procedures.

14. International Data Transfers and Data Residency

Numeo may process and store information in the United States and other jurisdictions where Numeo, its affiliates, or authorized service providers operate. As a result, Personal Information may be transferred to, and processed in, countries whose data protection laws differ from those of the country in which the information was originally collected.

Numeo does not guarantee that Customer Data will be stored or processed in any particular jurisdiction unless expressly agreed in writing. Where required by applicable law, Numeo implements appropriate safeguards for international transfers, which may include:

• contractual data protection commitments;
• Standard Contractual Clauses approved by applicable regulators;
• technical safeguards designed to protect transferred information;
• organizational security controls; and
• other legally recognized transfer mechanisms.

By using the Platform where permitted by applicable law, Customers acknowledge that information may be transferred internationally for the purposes described in this Policy.

15. Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your Personal Information. Subject to applicable law, these rights may include the ability to:

• access Personal Information maintained about you;
• correct inaccurate or incomplete information;
• request deletion of Personal Information;
• restrict or object to certain processing activities;
• withdraw consent where processing is based on consent;
• receive a copy of Personal Information in a portable format where technically feasible;
• object to certain direct marketing communications; and
• submit complaints to applicable data protection authorities.

Numeo will respond to verified requests within the timeframes required by applicable law. In certain circumstances, we may decline requests where permitted by law, including where fulfilling the request would adversely affect the rights of others, compromise security, prevent fraud, or conflict with legal obligations.

16. California Privacy Rights

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including the right to:

• know what categories of Personal Information we collect;
• know the purposes for which Personal Information is used;
• request access to Personal Information;
• request deletion of Personal Information, subject to applicable exceptions;
• request correction of inaccurate Personal Information;
• opt out of certain uses of Personal Information where required by law; and
• exercise these rights without unlawful discrimination.

Numeo does not sell Personal Information as that term is defined under applicable California privacy laws. Where applicable, we also do not share Personal Information for cross-context behavioral advertising without providing legally required rights and notices.

17. GDPR Privacy Rights

Where the General Data Protection Regulation ("GDPR") applies, Numeo processes Personal Information under one or more of the following legal bases:

• performance of a contract;
• compliance with legal obligations;
• legitimate business interests;
• protection of vital interests;
• public interest where applicable; or
• consent where required.

Individuals located in the European Economic Area, the United Kingdom, and other jurisdictions with similar privacy laws may exercise rights provided under applicable law, including rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent where applicable.

Where Numeo processes Personal Information on behalf of Customers acting as data controllers, Customers remain responsible for responding to requests relating to Customer Data unless otherwise agreed.

18. Enterprise Customers and Data Processing

Many Numeo customers use the Platform in connection with their business operations. In these situations, Numeo generally acts as a data processor or service provider, processing Customer Data on behalf of the Customer in accordance with contractual instructions.

Customers remain responsible for determining the lawful basis for collecting Personal Information through their use of the Platform and for complying with applicable privacy laws governing their business operations.

Upon request, Numeo may make available a Data Processing Agreement ("DPA") governing the processing of Customer Data where required by applicable law or contractual obligations.

19. Children's Privacy

The Platform is intended for business users and is not directed to children. Numeo does not knowingly collect Personal Information directly from children under the age required by applicable law to provide independent consent. If we become aware that Personal Information has been collected from a child in violation of applicable law, we will take reasonable steps to delete such information as required.

20. Cookies, Analytics, and Similar Technologies

Numeo uses cookies, local storage, web beacons, pixels, and similar technologies to provide, maintain, secure, and improve the Platform. These technologies may be used to:

• authenticate users and maintain secure sessions;
• remember user preferences and settings;
• improve platform performance and reliability;
• understand how features are used;
• troubleshoot technical issues;
• protect against fraud and unauthorized access;
• analyze traffic and usage patterns;
• personalize user experiences where appropriate; and
• measure the effectiveness of product communications and marketing campaigns.

Where required by applicable law, Numeo will obtain consent before placing non-essential cookies or similar technologies on a user's device. Users may manage cookie preferences through browser settings or other controls made available by Numeo. Disabling certain cookies may affect the availability or functionality of portions of the Platform.

21. Marketing Communications

Numeo may send administrative and service-related communications that are necessary for operating the Platform, including account notifications, billing communications, security alerts, system maintenance notices, product updates, feature announcements, policy updates, and customer support communications.

Where permitted by law, Numeo may also send newsletters, educational materials, webinars, product announcements, promotional offers, or other marketing communications. Recipients may unsubscribe from marketing communications at any time by using the unsubscribe instructions included in the communication or by contacting Numeo.

Even if a user opts out of marketing communications, Numeo may continue sending important service-related or legally required communications.

22. Transparency and Accountability

Trust is fundamental to Numeo's relationship with its customers. We are committed to operating the Platform in a manner that promotes transparency, accountability, and responsible stewardship of Customer Data.

Our privacy program is guided by the following commitments:

• We design privacy and security into our products from the outset.
• We strive to collect only the information reasonably necessary to provide requested functionality.
• We limit access to Customer Data to authorized personnel with legitimate business needs.
• We continuously evaluate and improve our security and privacy practices.
• We seek to provide Customers with meaningful visibility into how their information is processed.
• We work to comply with applicable privacy and data protection laws in the jurisdictions where we operate.

As the Platform evolves, we will continue enhancing our privacy, security, and AI governance practices to support the needs of customers operating in increasingly complex regulatory environments.

23. Changes to This Policy

Numeo may update this Policy from time to time to reflect changes to the Platform, new products or features, changes in applicable laws or regulations, improvements to our privacy practices, security enhancements, or other operational or business developments.

When we make material changes, we will update the "Effective Date" at the beginning of this Policy. Where required by applicable law, we will provide additional notice through the Platform, by email, or through other appropriate communication channels.

Continued use of the Platform following the effective date of an updated Policy constitutes acknowledgment of the revised Policy, except where applicable law requires additional consent.

24. Related Documents

This Policy should be read together with Numeo's other governance and trust documents, which may include:

• Terms of Service
• Cookie Policy
• Data Processing Agreement (DPA)
• Responsible AI Statement
• Security Overview
• Subprocessors

These documents are available through the Numeo Trust Center or by contacting Numeo.

25. Contact Information

Questions, requests, or concerns regarding this Policy or Numeo's privacy practices may be directed to:

BlueJourney Inc. d/b/a Numeo Privacy Team

Email: hello@numeo.ai

Website: https://numeo.ai

If Numeo designates a Data Protection Officer or similar privacy representative in the future, updated contact information will be published through the Platform. Individuals seeking to exercise privacy rights should provide sufficient information to allow Numeo to verify the request and respond in accordance with applicable law.

26. Effective Date

This Policy is effective as of the date indicated at the beginning of this document and supersedes all prior versions relating to the same subject matter.

27. Final Statement

Privacy and security are foundational components of the Numeo Platform. As an AI-powered transportation operating platform, Numeo is entrusted with business communications, operational information, transportation documents, workflow data, and other information that enables our customers to operate their businesses efficiently.

We recognize the importance of that trust. Our goal is not only to comply with applicable privacy laws, but also to provide customers with clear information regarding how their data is collected, used, protected, and processed while delivering the Platform they request.

We remain committed to continually improving our privacy, security, and AI governance practices as technology, customer expectations, and legal requirements evolve.