Privacy Policy Effective Date: June 8, 2025 Don Bear USA ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at donbearusa.com and our associated client, driver, and admin portals (collectively, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. 1. Who We Are Don Bear USA is a freight and logistics company operating in the United States. Our Service connects clients who need freight shipped with drivers who fulfill those shipments. We are governed by the laws of the State of Florida. 2. Information We Collect 2.1 Account Information Full name and email address provided during registration via Clerk User role (client, driver, or admin) 2.2 Usage Data Pages visited, actions taken, and timestamps Device information including browser, operating system, and IP address 2.3 Shipment Data Tracking numbers, origin and destination addresses, and delivery status Real-time GPS location data and geolocation check-ins submitted by drivers during active assignments 2.4 Uploaded Files Documents and files attached to shipments, stored securely on Amazon S3 2.5 Legal Acceptance Records Timestamp, IP address, and user agent recorded at the time you accept our legal agreements 3. How We Use Your Information To provide and operate the shipment tracking and management platform To authenticate users and manage role-based access controls To track driver location and provide real-time shipment status to clients To send transactional emails including shipment updates and driver invitations via Amazon SES To store and retrieve documents associated with shipments via Amazon S3 To display maps and route information via Mapbox and OpenStreetMap To maintain audit records of legal agreement acceptance for compliance purposes To improve platform performance and diagnose technical issues To comply with applicable laws and legal obligations 4. Legal Basis for Processing Contract performance — to fulfill our obligations to you as a client or driver Legitimate interests — for fraud prevention, security, and service improvement Legal compliance — to meet applicable federal and state legal requirements Consent — where you have explicitly opted in, such as location tracking 5. How We Share Your Information 5.1 Third-Party Service Providers Clerk — authentication and user account management Amazon Web Services (AWS S3) — secure document and file storage Amazon Web Services (AWS SES) — transactional email delivery Mapbox — address geocoding and map rendering OpenStreetMap — open-source map tile data All third-party providers are contractually obligated to protect your data and are not authorized to use it for any purpose beyond what is necessary to provide their services to us. 5.2 Legal Requirements We may disclose your information if required to do so by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Don Bear USA, our users, or the public. 5.3 No Sale of Personal Data We do not sell, rent, or trade your personal information to third parties for any purpose. 6. Data Retention Account data — retained for the duration of your active account or as required by law Shipment records and uploaded documents — minimum 3 years for business and compliance purposes GPS location history — 12 months, then deleted or anonymized Legal acceptance records — retained indefinitely as compliance evidence Email logs — up to 90 days 7. Data Security We implement industry-standard security measures including HTTPS encryption, secure AWS infrastructure, role-based access controls, and credential management via Clerk. No system is completely secure and we cannot guarantee absolute security. 8. Your Privacy Rights Depending on your jurisdiction, you may have the right to: Access the personal data we hold about you Request correction of inaccurate or incomplete data Request deletion of your personal data, subject to legal retention obligations Object to or restrict certain processing activities Withdraw consent for location tracking at any time To exercise any of these rights, contact us at donbear@gmail.com. We will respond within 30 days. 9. Children's Privacy The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us at donbear@gmail.com and we will promptly delete such information. 10. Third-Party Links The Service may contain links to third-party websites or services. We have no control over their content or privacy practices and encourage you to review their policies independently. 11. Changes to This Privacy Policy We may update this Privacy Policy at any time. Material changes will be communicated by updating the effective date above. Continued use of the Service constitutes acceptance of the revised policy. 12. Contact Us Don Bear USA Email: donbear@gmail.com Website: donbearusa.com This document was last updated on June 8, 2026.