Privacy Policy

CargoRidge Inc. ("CargoRidge", "we", "us", or "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered ocean freight platform and services. By using CargoRidge's services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our services. This Privacy Policy complies with applicable data protection laws, including the General Data Protection Regulation (GDPR) for European users, the California Consumer Privacy Act (CCPA), and the Personal Information Protection and Electronic Documents Act (PIPEDA) for Canadian users.

Account Information: • Name, email address, phone number • Company name and business information • Billing and payment information • Account credentials Shipment Data: • Cargo details (type, weight, volume, dimensions, HS codes) • Container types and quantities • Origin and destination ports, shipping routes • Documentation (bills of lading, customs forms, commercial invoices) • Shipper and consignee details Tracking Data: • Real-time vessel positions and ETAs • Shipment milestone events • Delivery confirmations Usage Analytics: • Pages visited and features used • Quote requests and search queries • Booking history and preferences • IP address, browser type, device information • Performance and error data

Service Delivery: • Process quotes, bookings, and shipments • Coordinate with ocean carriers (CMA CGM, MSC, Maersk) • Provide real-time tracking and shipment visibility • Generate shipping documentation and customs filings • Process payments and invoices Analytics and Improvement: • Analyze usage patterns to improve the platform • Train and improve our AI assistant (Copilot) — your data is not shared with third-party AI providers • Generate aggregate market insights and analytics • Optimize carrier rate shopping algorithms Communication: • Send booking confirmations, tracking updates, and shipment alerts • Respond to support inquiries • Send service notifications and platform updates • Marketing communications (only with your explicit consent) Legal and Security: • Comply with legal obligations and customs regulations • Prevent fraud, abuse, and unauthorized access • Enforce our Terms of Service

We share your information only as necessary to deliver our services: Ocean Carriers: • CMA CGM, MSC, Maersk, and other carriers receive shipment details required to process bookings and provide tracking Customs Authorities: • We submit required customs documentation (AES, ACI, ENS filings) to applicable government authorities on your behalf Payment Processors: • Payment information is processed by PCI-DSS compliant payment processors; we do not store full credit card numbers Cloud Infrastructure: • Data is hosted on Amazon Web Services (AWS) under strict data processing agreements We do NOT: • Sell your personal information to third parties • Share information for third-party marketing without your consent • Provide data to data brokers or advertisers

Infrastructure: • All data is stored on AWS (Amazon Web Services) in secure, SOC 2 compliant data centers • Primary database: Aurora PostgreSQL with AES-256 encryption at rest • Event data: DynamoDB with server-side encryption • Document storage: S3 with server-side encryption (SSE-S3) Encryption: • All data in transit is encrypted using TLS 1.2 or higher • All data at rest is encrypted using AWS KMS (Key Management Service) • Secrets and credentials are stored in AWS Secrets Manager Access Controls: • Multi-tenant data isolation ensures your data is never accessible to other organizations • Role-based access control (RBAC) within your organization • JWT-based authentication via AWS Cognito • Web Application Firewall (WAF) protects against common web attacks Monitoring: • 24/7 infrastructure monitoring and alerting • Automated threat detection • Regular security assessments

We retain your information for as long as necessary to provide services and comply with legal obligations: • Account information: Duration of account plus 7 years • Shipment records: 7 years (to comply with shipping and customs regulations) • Payment records: 7 years (for tax and accounting purposes) • Communications and support tickets: 3 years • Usage analytics data: 2 years • Server logs: 90 days After retention periods expire, we securely delete or anonymize your information. You may request deletion of your account and personal information at any time, subject to legal retention requirements. Contact privacy@cargoridge.com to make a deletion request.

Depending on your location, you have the following rights regarding your personal data: Access and Portability: • Request a copy of all personal information we hold about you • Export your data in a machine-readable format (JSON, CSV) Correction: • Correct inaccurate or incomplete personal information • Update your account details at any time through your profile settings Deletion (Right to be Forgotten): • Request deletion of your personal information • Close your account and have your data removed Restriction and Objection: • Restrict processing of your information in certain circumstances • Object to processing based on legitimate interests • Opt out of marketing communications at any time GDPR Rights (EU/EEA residents): • All rights above, plus the right to lodge a complaint with your supervisory authority • Legal bases for processing: contract performance, legitimate interests, consent, and legal obligations CCPA Rights (California residents): • Right to know what personal information is collected • Right to delete personal information • Right to opt-out of sale (we do not sell your data) • Right to non-discrimination To exercise any of these rights, contact us at privacy@cargoridge.com. We will respond within 30 days.

We use cookies and similar technologies to enhance your experience: • Essential Cookies: Required for platform functionality (authentication, session management) • Analytics Cookies: Help us understand usage patterns (with IP anonymization) • Preference Cookies: Remember your settings, language, and theme preferences You can control cookies through your browser settings or our cookie preference center. Blocking essential cookies may limit platform functionality. For detailed information, see our Cookie Policy.

CargoRidge operates globally, and your information may be transferred to and processed in: • Canada (our headquarters) • United States (AWS cloud infrastructure) • European Union (service delivery) • Countries where our carrier partners operate We ensure appropriate safeguards for international transfers: • Standard Contractual Clauses (SCCs) for EU/EEA data transfers • Adequacy decisions where applicable • Data Processing Agreements with all vendors and partners By using our services, you consent to these international transfers with the safeguards described above.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new features. When we make material changes: • We will update the "Last Updated" date at the top of this page • We will notify you via email for significant changes • We may display a notice on the platform Your continued use of our services after changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: Privacy Inquiries: Email: privacy@cargoridge.com Mail: CargoRidge Inc., Privacy Officer, 123 Waterfront Drive, Suite 500, Vancouver, BC V6B 1A1, Canada Data Protection Officer (DPO): Email: privacy@cargoridge.com General Legal Inquiries: Email: legal@cargoridge.com We will respond to your inquiry within 30 days.