Privacy Policy

1 Introduction

We, NimbleLogik Pvt Ltd ("Company", "we", "us", "our") (which acts as the Data Fiduciary) are the owners of the platform comprising of a website — https://freightfox.ai (including all its earlier and subsequent versions and sub-domains) and associated websites and mobile applications including but not limited to FreightFox Manufacturer app, FreightFox Driver app & web based application — console.freightfox.ai, together referred to as the "Platform".

The Platform is a digital ecosystem for product manufacturers to efficiently manage their freight procurement and management processes, for the logistics service providers to engage with manufacturers directly, and for the drivers to effectively transmit various information regarding the transportation of manufacturer's material during the material pickup, transit and delivery — these offerings are referred to as "Services".

If you are using the Services or accessing the Platform on behalf of a third party, you represent that you have the authority to use and avail services or access the Platform and to bind such third-party to the terms and conditions of this Privacy Policy. If you do not have such an authority or do not agree to the terms of this Privacy Policy, you should refrain from using the Services until an express authority is obtained.

This Privacy Policy is governed by and is compliant with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011 and also complies with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), which is designed to protect the Personal Information; and other applicable rules and regulations related to privacy.

2 Definitions

• "User(s)", "you", "your" shall mean and include any individual, business organizations or commercial establishments and their permitted users that avail the Services through the Platform, as well as visitors to our website.
• "User Content" shall mean and include data and materials, such as images, photographs, videos, text, any product details and any other information uploaded by the Users on the Platform.
• "Data Principal" means the individual to whom the personal data relates, as defined under the DPDP Act.
• "Data Fiduciary" means NimbleLogik Pvt Ltd, which alone or in conjunction with others determines the purpose and means of processing personal data.
• "Consent Manager" means a person registered with the Data Protection Board of India ("DPB") who acts on behalf of the Data Principal to manage consent.
• "Child" means a Data Principal who has not completed eighteen years of age.
• "Digital Personal Data" has the meaning assigned to it under the DPDP Act and includes personal data collected online or digitised subsequently.

3 Personal Information Collected

This Privacy Policy applies to Personal Information collected and controlled by the Company, through the Platform about the Users, for providing the Services. User is required to register with the Platform by using the sign-up option available to create an account ("User Account"). During the registration process, for using the Services and for connecting with us through our website, User shall be required to share certain Personal Information.

For purposes of this Privacy Policy, "Personal Information" means information that may be used to personally identify the User, including but not limited to:

• Name, e-mail ID, Mobile No., Work Phone No.
• Location data, Organization Name
• Organization's GSTIN / CIN
• Data created during use — location, platform usage, device data, uploaded content (images, videos, text)

For the FreightFox Driver applications, we collect precise or approximate location data from a user's mobile device if enabled by the user to do so. FreightFox collects this data when the app is running in the foreground (app open and on-screen) or background (app open but not on-screen) of their mobile device. This is to ensure that FreightFox can provide a current and accurate view of all in-transit shipments to the Manufacturers.

We may also collect, store and use your Personal Information when you: (1) access or provide your Personal Information on our website or social networking handles operated by us on Facebook, Twitter, and/or LinkedIn; (2) share our blogs through Facebook, Twitter, and/or LinkedIn; and (3) comment/provide feedback/testimonials on our website or such social networking handles.

3A Processing of Personal Data of a Child

4 Non-Personal Information

We also collect certain non-personal information on the way you use our website, through tools such as Google Analytics, Amplitude (https://amplitude.com), etc. This is done primarily to enhance user experience.

Our website uses Google Analytics, a web analytics service provided by Google Inc. Google Analytics uses cookies — text files stored on your computer — to enable analysis of your use of the website. The information generated by cookies about your use of this website is usually transferred to a Google server in the US. In case of IP anonymization activation, your IP address will be truncated within Member States of the EU or the European Economic Area. You can refuse cookies by adjusting your browser settings, or prevent data from being sent to Google by installing the browser plug-in available at tools.google.com/dlpage/gaoptout/.

We use cookies and similar tracking technologies (beacons, tags, and scripts) to track user traffic patterns and hold certain registration information. We use cookies to:

• Improve the user experience on the website
• Understand the usage based on the geographical area
• Understand the usage based on the demographics
• Understand and get usage patterns of the users

The cookies will collect the following information: clicks and scroll on the website; visitor's operating system, browser information, CPU, GPU; and information of service provider.

5 Accuracy of Information

User undertakes that s/he shall be solely responsible for the accuracy, correctness, or truthfulness of the Personal Information and User Content shared with us whether of its own or any third party. The Company shall make reasonable efforts to ensure the accuracy, completeness, and consistency of the Personal Information when used for making a decision that affects the Data Principal.

In the event the User is sharing any Personal Information on behalf of a third person, the User represents and warrants that they have the necessary authority to share such Personal Information with the Company and has obtained written consent from such third party.

6 Use of Personal Information

We shall use the Personal Information in the following cases:

• To provide User with the Services and assist in any additional support
• To provide information about new offerings and periodic newsletters
• To share the User's rating with other Users on the Platform
• For creation or development of business intelligence or data analytics
• To more effectively provide and improve the Services
• To maintain and manage User Account
• To assist User with technical difficulties on the Platform
• To manage our relationship with User and other Users on the Platform
• For internal record keeping and meeting contractual logistics obligations
• To comply with our legal or statutory obligations

7 Anonymized Data

We may also use your Personal Information collected to create aggregate anonymized data. We shall ensure that such anonymized data will not be directly identifiable to you or to the Personal Information shared with us. We may use this anonymized data for any purpose including but not limited to conduct research, analytical purposes, and to improve our Services.

By using the Services and/or visiting our website, you provide us the right to use your Personal Information to create anonymized data and use it for our business purposes.

8 Disclosures

In course of providing Services to you or access to the Platform we may share your Personal Information with certain parties. Based on the free, specific, informed, and unambiguous consent provided by you (the Data Principal), we may disclose or share your Personal Information in the following cases. Note that, in the event of any data transfer to another Data Fiduciary, the Data Principal shall be notified of the identity of that Data Fiduciary.

We may provide access to User's Personal information to any of our authorized administrators for an internal business purpose, who shall be under confidentiality obligations towards the same.

We may provide Personal Information we collect to our affiliates in order to respond to User's requests for information or the Services.

We may share User's Personal Information to the service providers working with us in connection with the operation of the Services or the Platform, so long as such service providers are subject to confidentiality restrictions consistent with this Privacy Policy.

Where permitted by law, we may share User's Personal Information with joint marketers with whom we have a marketing arrangement. We would require all such joint marketers to have written contracts with us that specify appropriate use of User's Personal Information, require them to safeguard it, and prohibit unauthorized or unlawful use.

We may transfer User's Personal Information if we are acquired by or we acquire or merge with another company or transfer a part of our business (including through equities), including the Platform, to a third party. Any third party or resultant entity that receives User's Personal Information pursuant to a merger, demerger, amalgamation, reconstruction, change in control or business transfer shall have the right to continue to use such information. In the event of such a sale or transfer, we may notify the Users.

We may be required to disclose User's Personal Information due to legal or regulatory requirements — including court orders, warrants, or discovery requests, compliance with judicial proceedings, responding to claims that Personal Information violates third-party rights, or to protect the rights, property, or personal safety of the Company or the general public. User agrees and acknowledges that we may not inform User prior to or after disclosures made according to this section.

Notwithstanding anything mentioned hereinabove, the Company shall not be responsible for the actions or omissions of the parties with whom the Personal Information is shared, nor shall the Company be liable for any additional information User may choose to provide directly to any third party.

9 Data Retention

We will retain User's Personal Information as long as it is required to be retained for the purpose of provision of the Services. We may also retain and use User's Personal Information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

10 Security

• User's Personal Information including User Content is stored on a secure and protected cloud infrastructure of reputed cloud service providers. Although we provide appropriate firewalls and protections, we cannot warrant the security of any Personal Information transmitted as our systems are not hack proof. Data pilferage due to unauthorized hacking, virus attacks, or technical issues is possible, and we take no liability or responsibility for it. Users are required to be careful to avoid "phishing" scams.
• User is responsible for all the actions that take place under the User Account. If User chooses to share User Account details, password, or any Personal Information with third parties, the User is solely responsible for the same. It is User's responsibility to keep User's password confidential and secure.
• We are not responsible for any breach of security or for any actions of any Third Parties that receive your Personal Information. The Services are also linked to many other sites and we are not responsible for their privacy policies or practices.
• Notwithstanding anything contained in this Privacy Policy, we shall not be held responsible for any loss, damage or misuse of your Personal Information attributable to a Force Majeure Event.

11 Accessing & Modifying Personal Information

In case User needs to access, review, and/or make changes to the Personal Information including User Content, User has to contact FreightFox support and following the changes, s/he has to validate the same through the process available on the Platform and intimate the Company accordingly. User may not be provided access to the Platform in the event s/he does not follow the process set out on the Platform.

User shall keep User's Personal Information updated to help us improve our Services. If User updates, modifies or corrects Personal Information, we may continue to keep copies of the prior Personal Information for uses provided for in this Privacy Policy. We shall not verify any such modifications or corrections made by the User. User shall be solely liable for such modifications or corrections.

12 Links to Other Websites

Our Platform may contain links to other websites/applications of your interest. Please note that we do not have any control over such other websites/applications, and you will be accessing these websites/applications at your own risk.

Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such websites/applications and those are not governed by this Privacy Policy. You should exercise caution and look at the privacy policy applicable to such websites/applications.

13 Limitation of Liability

User expressly understands and agrees that the Company shall not be liable for any direct, indirect, incidental, special, consequential, punitive or exemplary damages, including but not limited to, damages for loss of profits, goodwill, use, data, information, details or other intangible losses (even if the Company has been advised of the possibility of such damages), arising out of this Privacy Policy.

The foregoing limitation of liability shall apply notwithstanding the failure of essential purpose of any limited remedy herein.

14 Indemnification

User agrees to indemnify us, our subsidiaries, affiliates, officers, agents and employees (each, an "Indemnified Party") and hold the Indemnified Party harmless from and against any claims and demand, including reasonable attorneys' fees, made by any third party due to or arising out of or relating to:

• Accuracy and correctness of Personal Information and User Content that User submits or shares through the Platform
• User's and its permitted user's violation of this Privacy Policy
• User's violation of rights of another User

15 Governing Laws & Disputes

This Privacy Policy shall be construed and governed by the laws of India without regard to principles of conflict of laws.

Any dispute arising between you and us shall be submitted to arbitration to be conducted in Pune, India in English language, in accordance with the rules of the Arbitration and Conciliation Act of 1996, by a sole arbitrator appointed by us — the award made in pursuance thereof shall be binding on both parties.

Subject to the arbitration provisions, you agree that the courts in Pune, India shall have exclusive jurisdiction over such disputes.

16 Changes to This Policy

Please revisit this page periodically to stay aware of any changes to this Privacy Policy, which we may update from time to time. If we modify this Privacy Policy, we will make it available through the Platform and indicate the date of the latest revision.

In the event that the modifications materially alter your rights or obligations hereunder, we will make reasonable efforts to notify you of the change via email or through our Platform.

17 Contact Us

If you have any questions, concerns, or grievances regarding this Privacy Policy, you can email our designated Grievance Officer at:

connect@freightfox.ai

Grievances will be addressed within a period not exceeding one month from the date of receipt.