PRIVACY POLICY

1.1 Identity and Contact Information

Name, work email address, phone number, job title or role, and organization affiliation, collected when your organization invites you to Lumost or when you contact us directly.

1.2 Company and Organization Records

Company name, business address, DOT/MC number and other carrier identification, entity type, and other business details provided during onboarding, vetting, or account setup.

1.3 Shipment and Load Records

Order and load details, including pickup and delivery locations, commodity and special instructions, dispatch and status information, rates and bids (where applicable to your role), and the history of actions taken on a load.

1.4 Location Data

For drivers, Lumost collects location data on a continuous basis, including while the app is running in the background or the device is locked, for the duration that a load is assigned to them. This allows shippers and carriers to see the real-time location of freight in transit, supports carrier compliance and safety monitoring, and helps verify accurate pickup and delivery timing.

Continuous background location tracking requires the driver's explicit, informed permission, granted through their device's operating system. Before that permission is requested, the app will show a clear, prominent explanation of what is being collected, why, and for how long, separate from the system permission prompt itself. A driver may decline or later revoke this permission through their device settings, though doing so will limit or disable real-time shipment-tracking features for the loads assigned to them.

Location data is retained for 1 year and is accessible to the shipper and carrier associated with a given load, and to authorized Lumost personnel, for the purposes described above. Shippers, brokerage staff, and internal users do not have their own location tracked by the Services.

1.5 Documents, Photos, and Signatures

Bills of lading, proof of delivery, certificates of insurance, load confirmations, and other documents you upload or capture through the Services, including photos taken with a device camera and signatures captured on a device.

1.6 Authentication Credentials

Your email address and password (or other sign-in credentials we may support in the future) used to access your account. Passwords are stored using industry-standard hashing and are never stored in plain text.

1.7 Payment and Financial Information

Depending on your role and your organization's configuration, this may include invoice and settlement records, payment status, and billing details. We collect bank account information (such as routing and account numbers) from users on either side of a transaction: from shippers, in order to withdraw (via ACH debit) the funds owed for freight charges, and from carriers and other payees, in order to deposit (via ACH credit) the funds owed to them. We use this information only to process these payments and to maintain the associated financial and audit records, and we restrict access to it to the systems and personnel that require it for that purpose.

As an alternative to ACH, some payments may be issued or received by paper check, in which case we collect the mailing address and other details needed to send or process that check.

1.8 Carrier Compliance and Vetting Information

For carriers, Lumost collects and monitors information relevant to safety and compliance, including DOT/MC numbers, safety ratings (BASIC scores), operating authority status, and insurance filing status. Some of this information is obtained not directly from you but from federal and third-party regulatory data sources (including FMCSA-derived datasets and commercial carrier-vetting services) in order to verify and monitor carrier eligibility on an ongoing basis.

1.9 Usage and Device Data

Information about how you interact with the Services, including IP address, browser or device type, operating system, app version, pages or screens visited, and general analytics and crash/error data used to keep the Services stable and secure.

1.10 Cookies and Similar Technologies

The web application uses cookies and similar technologies to keep you signed in, remember preferences, and analyze site performance. See "Your Choices and Rights" below for how to control these.

We use the information described above to:

• Provide, operate, and maintain the Services, including creating and tracking orders and loads, processing carrier onboarding, and enabling communication between shippers, carriers, and drivers
• Verify carrier eligibility and monitor ongoing compliance (safety ratings, authority status, and insurance)
• Process payments and maintain accurate financial and audit records
• Send transactional communications, including load assignment and status notifications, account notices, and support responses
• Authenticate users and protect account security
• Analyze and improve the performance, reliability, and usability of the Services
• Communicate with you about updates, service offerings, or promotions (where permitted, and always with an opt-out)
• Comply with legal, regulatory, and contractual obligations, including those related to motor carrier safety and financial recordkeeping

We do not use your information to make automated decisions that have a legal or similarly significant effect on you without human review.

We do not sell or rent your personal information. We share information only in the following circumstances:

Service providers and processors

We share information with vendors who perform services on our behalf, under contractual confidentiality and data protection obligations, including:

• Cloud hosting and database infrastructure
• Payment processing
• Carrier safety, insurance, and authority verification services
• Communications providers (SMS, voice, and email)
• Customer relationship management and support tooling
• Analytics and crash reporting

Within your organization

Information related to shipments, carriers, and users is visible to other authorized users within your organization according to their assigned role and permissions, and — where applicable — to the shipper, carrier, or brokerage counterparties on a given load.

Legal requirements

We may disclose information where required by law, regulation, legal process, or governmental request, or to protect the rights, safety, or property of Lumost, our users, or others.

Business transfers

If Lumost is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to this policy or a successor policy.

No mobile marketing sharing

No mobile information is shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in and consent data is excluded from all categories of sharing described above and is never shared with third parties.

We retain information for as long as needed to provide the Services, comply with legal and regulatory obligations (including motor carrier safety and financial recordkeeping requirements), resolve disputes, and enforce our agreements. Retention periods vary by data type — for example, compliance and audit records may be retained longer than routine usage data. When information is no longer needed for these purposes, we delete or anonymize it.

• Access and correction. You may request access to, or correction of, your personal information by contacting us at support@lumost.com.
• Account deletion. You may request deletion of your account and associated personal information by visiting lumost.com/delete-account or contacting us at support@lumost.com. Certain records (for example, compliance, safety, or financial records we are required to retain) may be preserved as required by law even after account deletion.
• Marketing opt-out. You may opt out of marketing emails using the unsubscribe link included in those emails. This does not affect transactional messages related to your account or active shipments.
• Cookies. You can adjust your browser settings to decline cookies, though this may affect website functionality.
• SMS/text messages. You may opt out of SMS communications by following the instructions provided in those messages.

Lumost does not currently offer public self-signup. All users — shippers, carriers, and drivers — are invited by an organization already using Lumost. If you did not expect an invitation and believe you received one in error, please contact us.

We implement reasonable administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, access controls based on role and permissions, and hashed credential storage. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Bank account information used for ACH payments is encrypted at rest and access-restricted to the systems and personnel required to process payments.

Our website and Services may contain links to third-party sites (for example, a mapping application when navigating to a delivery location). We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies separately.

Our Services are directed at businesses and are not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

We may update this Privacy Policy periodically to reflect changes in our practices or for legal, regulatory, or operational reasons. The latest version, with its effective date, will be posted here. If we make material changes, we will provide additional notice where required.

If you have questions about this Privacy Policy or how we handle your information, contact us at:

By using the Lumost website, web application, or mobile applications, you agree to the terms of this Privacy Policy.