Araynge Privacy Policy

Tea Technologies, Inc., a Delaware corporation ("Tea Technologies," "we," "us," or "our"), operates Araynge. This Privacy Policy explains what information we collect through the Araynge mobile applications, the website at araynge.app and its related domains, the Araynge Broker Check browser extension (Section 16), and the features we provide through them (together, the "Service"), how we use and share it, and the choices and rights you have.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

This policy does not cover the practices of other members, or of third parties whose services you reach through the Service.

Account information. Your name, email address, phone number, password, role (such as driver, carrier, broker, shipper, vendor, or commuter), and any profile details and photo you add.

Business information. Company name, USDOT number, MC number, authority type, equipment types, addresses, and similar business details you provide or confirm.

Content you submit. Messages, posts, reviews, road reports and the photos or videos attached to them, load and capacity postings, job listings, trip and route details, circle and crew activity, logbook and inspection entries, and support requests.

Payment information. When you subscribe, our payment processor collects your payment card and billing details directly. We receive a record of the transaction, the plan, the status, and a limited identifier such as the card brand and last four digits. We do not store your full card number. If you subscribe through an app store, that store handles the payment and shares only limited transaction information with us.

Location. Described in Section 5.

Device and usage information. Device model, operating system and version, app version, language, time zone, IP address, crash logs, diagnostic data, and how you use the Service, such as screens viewed, features used, and searches run.

Push tokens. If you enable notifications, the push token assigned to your device by Apple or Google so we can deliver notifications.

Cookies and local storage. On the website and inside the app's web views, described in our Cookie and Local Storage Policy.

Camera, photos, and microphone. Only when you use a feature that needs them, such as attaching a photo to a road report. We do not access your camera, photo library, or microphone in the background.

Public government records. We compile and display information published by federal and state agencies, including carrier and broker registration, authority, insurance filing, inspection, and crash data published by the Federal Motor Carrier Safety Administration and the U.S. Department of Transportation. This information is public, originates with the agency, and may be outdated or inaccurate. If a record about you or your company is wrong, correct it with the agency that publishes it; we can also mark the record as disputed in the Service.

Service providers. Our identity verification provider, payment processor, mapping, routing, and weather providers, and our hosting and analytics providers return information to us as described in this policy.

Location is the heart of Araynge, and we handle it carefully.

What we collect. When you turn on visibility, we collect your device's location and store a rounded, approximate point. We do not store a continuous precise trail of your movements for the map. If you choose to share precise location with specific members or a circle, or if you use routing or trip features that need it, we process the more precise location those features require.

Foreground and background. You choose the permission you grant. If you allow location only while using the app, we collect location only when the app is open. If you allow location in the background, we collect approximate location while the app is closed, and only while your visibility is turned on, so your presence stays current for the people you have chosen to share it with. Your device shows an indicator while background location is in use.

Why we do it. To place you on the map at the level of precision you chose, to match you with nearby members, loads and capacity, to show nearby road reports, truck stops, parking, and weather, to plan truck-appropriate routes and stops, and to detect abuse.

Who sees it. Other members see the level of detail you chose, which is approximate by default. Members of a circle see what that circle shares. Your precise location is never shown to the public.

Your control. You can turn visibility off, change who can see you, go invisible, or revoke location permission entirely at any time in the Service or in your device settings. Turning off location will disable the map and features that depend on it.

Retention. Presence points are kept only as long as needed to run the map and are deleted or aggregated on a rolling basis, as described in Section 9. Trip and route records you save are kept until you delete them.

Some features and badges require identity verification. We use a third-party identity verification provider to perform it.

What happens. You may be asked to photograph a government-issued identification document and to take a selfie or short video. The provider extracts data from the document and compares the image of your face with the photograph on the document to confirm you are the same person. That comparison may involve a scan of facial geometry, which some state laws define as biometric information.

Your consent. Before any biometric comparison, we present a separate consent screen that explains what is collected, why, how long it is kept, and how it is destroyed, and we obtain your written consent. You do not have to consent. If you decline, you may continue to use the features that do not require verification.

What we keep. We receive and store the verification result, the date, the type of document verified, and a reference identifier. We do not receive or store your facial geometry template, and we do not use facial recognition to identify you in photos, on the map, or anywhere else in the Service.

Retention and destruction. Our verification provider retains identity documents and biometric identifiers only as long as needed to complete verification and to meet legal obligations, and destroys them no later than the earlier of the date the purpose is satisfied or three (3) years after your last interaction with us, consistent with Illinois, Texas, and Washington biometric law. We do not sell, lease, trade, or otherwise profit from biometric information.

Driver's license data. Where a state restricts the use of driver's license information, we use it only for the identity verification purposes described here.

We use the information described above to:

• create and maintain your account and profile, and authenticate you;
• operate the map, presence, circles, messaging, reports, directories, listings, routing, weather, logbook, and every other feature you use;
• verify identity and business credentials and issue or revoke badges;
• process subscriptions, payments, renewals, and refunds;
• send transactional messages, push notifications, and service announcements, and respond to your support requests;
• personalize what you see, such as nearby members, loads, capacity, and reports;
• monitor, investigate, and prevent fraud, abuse, harassment, impersonation, and violations of our Terms, and protect the safety of members and the public;
• maintain security, debug, and improve the Service, including through aggregated and de-identified analytics;
• market our own products and services to you, subject to your choices in Section 11; and
• comply with law and enforce our agreements.

We do not use your personal information to train third-party artificial intelligence models, and we do not sell it.

With other members, as you choose. Your profile, role, badge status, approximate location while you are visible, posts, reviews, listings, circle activity, and messages you send are shared with the members you direct or with other members of the Service, according to the settings you select. Anything you share publicly may be seen, copied, or saved by others.

Road reports. Reports may be displayed without your name. We retain the submitting member's identity internally and may disclose it where the law requires or where we believe disclosure is necessary to protect someone's safety or to investigate abuse.

Service providers. With vendors who process information on our behalf under written contracts limiting their use of it, including cloud hosting, database, identity verification, payment processing, mapping and routing, weather, push notification, email, customer support, and analytics providers.

Within Tea Technologies. Across our own products, including THE TEA, CarrierVerifi, DriverVerifi, LoadVerifi, and HazmatVerifi, where you hold access to those products, to operate your account and provide the features you have subscribed to. Access to intelligence and carrier data is gated by product entitlement; members who join only the map do not receive access to those products' data.

Legal and safety. With law enforcement, regulators, courts, or other parties when we believe in good faith that disclosure is required by law, subpoena, or legal process, or is reasonably necessary to investigate suspected fraud or a violation of our Terms, to protect the rights, property, or safety of Tea Technologies, our members, or the public, or to establish or defend legal claims.

Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of assets, or during diligence for one, subject to this policy or a successor policy with notice to you.

Aggregated and de-identified information. We may create and share aggregated or de-identified information, such as traffic patterns, parking availability, or industry trends, that cannot reasonably be used to identify you. We will not attempt to re-identify it.

We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not provide member data to data brokers or advertising networks. We do not display third-party advertising that is targeted using your personal information. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not shared with any third parties.

We keep personal information only as long as we need it for the purposes described in this policy, and then delete or de-identify it. In general:

• account and profile information is kept while your account is active;
• presence and location points are kept on a short rolling basis and then deleted or aggregated;
• messages and posts are kept until you or the sender deletes them, or your account is deleted;
• road reports may be retained in de-identified form for safety analysis after they expire;
• logbook and inspection records are kept for the period you select, so you can meet your own recordkeeping obligations;
• payment and transaction records are kept as long as tax, accounting, and audit law requires, generally seven (7) years; and
• identity verification results are kept as described in Section 6.

We may retain limited information longer where necessary to resolve disputes, enforce our agreements, prevent a banned member from returning, or comply with law.

You may delete your account at any time from Settings inside the app, or from the account deletion page on araynge.app, or by emailing us at the address in Section 15.

When you delete your account, we delete or de-identify your profile, presence history, listings, logbook entries, and messages you sent, within thirty (30) days, except that (a) content others have already received or copied, such as a message in someone else's inbox, may remain with them; (b) de-identified road reports may remain; (c) records we must keep for tax, accounting, legal, safety, or fraud-prevention reasons are retained for the periods described above; and (d) residual copies may persist in encrypted backups for up to ninety (90) days before they are overwritten.

Location. Turn visibility off, change who can see you, or revoke location permission in the Service or in your device settings.

Notifications. Turn push notifications on or off in the Service or in your device settings. Unsubscribe from marketing email using the link in any marketing message. We will still send transactional and service messages about your account.

Verification. Decline identity verification, or withdraw your biometric consent, by writing to us. Withdrawing consent may remove badges and features that depend on verification.

Profile visibility. Adjust what your profile shows and who may contact you.

Do Not Track. The Service does not respond to browser Do Not Track signals. We honor recognized opt-out preference signals such as Global Privacy Control where the law requires it.

Depending on where you live, you may have the right to know what personal information we hold about you and to receive a copy of it; to correct inaccurate information; to delete it; to opt out of sale, sharing for cross-context behavioral advertising, or profiling with legal effects (we do not engage in these); to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights.

Residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws may exercise these rights by emailing robcarpenter@theteaintel.com with the subject line "Privacy Request," or by writing to the address in Section 15. We will verify your request through your account email or other reasonable means, respond within the period the applicable law requires, generally forty-five (45) days with one permitted extension, and will not charge you unless a request is excessive or repetitive. An authorized agent may submit a request with written proof of authority. If we deny a request, you may appeal by replying to our response; we will respond to the appeal within the time the law allows, and Virginia residents may contact the Office of the Attorney General of Virginia if the appeal is denied.

Categories. In the twelve months before the effective date of this policy, we collected the categories of personal information described in Sections 2 through 6, for the purposes in Section 7, from the sources in Sections 2 through 4, and disclosed them for business purposes to the recipients in Section 8. Precise geolocation and biometric information are treated as sensitive personal information and are used only to provide the features you request and for security, never to infer characteristics about you.

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest, row-level access controls, least-privilege access for our personnel, and logging. No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the authorities as the law requires. Protect your account by using a strong, unique password and keeping your devices secure.

The Service is not directed to children, and you must be at least eighteen (18) years old to use it. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it. A parent or guardian who believes a child has provided us information may contact us at the address in Section 15.

Where information is processed. We operate in the United States, and your information is processed and stored here. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

Changes to this policy. We may update this policy. If a change is material, we will notify you by email or through the Service at least thirty (30) days before it takes effect. The effective date at the top shows when it was last revised.

Contact us.

Tea Technologies, Inc.

Attn: Privacy — Araynge

P.O. Box 102

Seaford, Virginia 23696

robcarpenter@theteaintel.com

Araynge Broker Check is an optional extension for Google Chrome and other Chromium browsers. It shows Araynge's information about a freight broker, such as its authority, bond history, related court cases, and days-to-pay reported by carriers, next to the load board you are using. This section describes what the extension handles. The rest of this policy applies to it as well.

What the extension reads on load boards. On the DAT, Truckstop, and 123Loadboard websites, the extension reads the text of the page you have open, inside your browser, to find MC and DOT numbers. Only those numbers leave your browser, to look up the matching records. The extension does not read, copy, or store load listings, rates, contact details, or anything else on those pages, does not change those pages, and does not run on any other website.

What you choose to check. On any website, if you highlight text and choose "Check with Araynge," the highlighted text is used, in your browser, to find an MC or DOT number, and only that number is looked up.

Sign-in. You sign in with your Araynge email address and password. They are sent to our authentication provider to sign you in, and the resulting session is stored in the extension's storage on your device until you sign out or remove the extension. The extension does not see or store your load board passwords.

Booked loads you record. If you save a load you booked, we store what you enter: the broker's MC and DOT numbers and name, the origin and destination, the rate, the load number, the load board it came from, and the dates you booked it, delivered it, and were paid. These records are private to your account and are not shown to other members. When a load is marked delivered and paid, the number of days between those dates is combined with other members' reports into totals for that broker, such as the median days to pay and how many members reported. Those totals are shown only once at least three different members have reported paid loads for that broker, and never with your name, your rates, or your loads.

Reminders. The extension checks once a day whether any of your booked loads still needs a delivered or paid date and, if so, shows a browser notification no more than once every three days. If you allow notifications from Araynge, we may also send you a push notification about them as described in Section 3.

What the extension does not do. It does not collect your browsing history, track you across websites, show advertising, or sell or share your information for advertising. Information the extension handles is used only to provide its features as described here, and it is processed and retained as described in the rest of this policy.

Your choices. You can sign out of the extension at any time. You can delete any booked load from the extension or from the Me tab in Araynge. Removing the extension from your browser deletes the information it stores on your device. Deleting your Araynge account, as described in Section 10, deletes your booked loads.

When we text you. Araynge sends text messages only if you turn on SMS in your profile's notification channels and agree to the text message terms shown there. We then text the mobile number on your profile with alerts about loads you qualify for, quotes on your loads and acceptances. We never send marketing texts. Message frequency varies with your activity. Message and data rates may apply.

Your record. When you turn texts on, we keep a record of your agreement: your account, the number, the exact wording you agreed to, the time and your IP address. We use it only to show that you agreed. Text messaging opt-in data and consent are never shared with third parties, and no mobile information is shared with third parties or affiliates for marketing or promotional purposes. Texts are delivered through our messaging provider, Twilio, only to send them.

Stopping. Reply STOP to any Araynge text, or turn SMS off in your profile, and we stop texting you. Reply HELP for help, or contact us as described in Section 15.