Privacy Policy

Effective Date: April 28, 2026 Last Updated: April 28, 2026 PreShiftIQ™ ("PreShiftIQ," "we," "us," or "our") respects your privacy. This Privacy Policy describes the personal information we collect through preshiftiq.com (the "Site") and through our advisory and assessment engagements, how we use that information, with whom we share it, and the rights available to you. If you do not agree with this Privacy Policy, please do not use the Site or submit information to us.

1. Who We Are PreShiftIQ™ is an independent transportation technology advisory firm. We help shippers, logistics service providers, carriers, and private equity firms evaluate, select, and govern transportation technology vendors. Our services include vendor audits, buyer assessments, fiduciary matching, and related advisory work. Contact: info@preshiftiq.com · Web: preshiftiq.com

2. Information We Collect We collect information that allows us to identify and communicate with you, deliver our services, and operate the Site securely. Specifically:

2.1 Information You Provide Contact form submissions: name, business email, company, role, phone (optional), message contents, and any attachments you choose to share. Email correspondence: messages you send to us at info@preshiftiq.com or dave@preshiftiq.com, including signatures, subject lines, and any documents attached. Engagement information: information you provide during vendor audits, buyer assessments, or advisory engagements, including organizational details, technology stack information, contractual context, and the responses your team provides to PreShiftIQ™ assessment workbooks and questionnaires. Subscriptions and event registrations: if you sign up for updates, register for an event, or download a resource, we collect the information needed to fulfill that request.

2.2 Information Collected Automatically Technical and device data: IP address, browser type and version, operating system, device type, screen size, and language settings. Usage data: pages viewed, links clicked, referring URLs, session duration, and approximate location derived from IP address (typically city or region level). Cookies and similar technologies: as described in our Cookie Policy. Server and security logs: request timestamps, error logs, and security events maintained by our hosting and infrastructure providers for the purpose of operating, securing, and improving the Site.

2.3 Information From Third Parties In the course of vendor audits and assessments, we may collect information about technology vendors and their offerings from publicly available sources, customer references, and information voluntarily provided by the vendors themselves. We may also receive contact information from professional networks, conference organizers, or referrers when you express interest in our services.

3. How We Use Your Information We use the information we collect to: Respond to inquiries, provide information about our services, and communicate with you. Deliver advisory services, vendor audits, buyer assessments, and related deliverables. Maintain, secure, and improve the Site and our internal systems. Send service-related communications, including updates to engagements, scheduling, and policy notices. Send marketing or thought-leadership communications where you have opted in or where we have a legitimate basis to do so. You can unsubscribe at any time. Comply with legal, regulatory, accounting, and contractual obligations. Protect our rights, our clients' rights, and the integrity of our services, including detecting and preventing fraud or misuse.

4. Legal Bases for Processing Where the EU General Data Protection Regulation, the UK GDPR, or similar law applies, we process personal information on the following bases: Performance of a contract — to deliver services you or your organization have engaged us to provide. Legitimate interests — to operate the Site, communicate with prospective clients, secure our systems, and develop our services in ways that do not override your rights. Consent — for non-essential cookies, marketing communications, and other activities where consent is required. Legal obligation — to comply with applicable law, including tax, accounting, and regulatory requirements.

5. How We Share Information We do not sell personal information. We share it only with parties who help us run our business or as required by law: Service providers. Hosting (Squarespace), email (Google Workspace), cloud storage and productivity (Google Workspace), document collaboration, communications, payment processing, and analytics. Each provider is permitted to use your information only to provide services to us. Professional advisors. Auditors, accountants, attorneys, and insurers, where appropriate. Engagement participants. During an audit or assessment, information may be shared between the buyer and the vendor parties to the engagement, but only as authorized by the engagement's scope and any applicable confidentiality terms. Legal and safety. Government authorities, courts, or other parties when we believe disclosure is required by law, necessary to enforce our rights, or necessary to protect the safety of any person. Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to standard confidentiality protections.

6. International Transfers PreShiftIQ™ is based in the United States. If you access the Site or engage with us from outside the United States, your information will be transferred to, stored, and processed in the United States and in the locations of our service providers. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

7. Data Retention We retain personal information for as long as needed to fulfill the purposes for which it was collected, including to provide services, maintain accurate business records, comply with legal obligations, resolve disputes, and enforce agreements. Engagement records, audit work product, and related communications are typically retained for the duration of the engagement plus a reasonable archival period consistent with professional and legal standards.

8. Security We use administrative, technical, and physical safeguards designed to protect personal information against loss, misuse, and unauthorized access, alteration, or disclosure. No method of transmission or storage is fully secure, however, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify affected parties and authorities as required by applicable law.

9. Your Rights Depending on where you are located, you may have rights with respect to your personal information, including: Access — the right to know what personal information we hold about you. Correction — the right to request that inaccurate or incomplete information be updated. Deletion — the right to request deletion of your personal information, subject to legal and contractual exceptions. Portability — the right to receive a copy of your information in a portable format. Objection or restriction — the right to object to or restrict certain processing. Withdraw consent — where processing is based on consent, the right to withdraw consent at any time. Non-discrimination — the right not to be discriminated against for exercising these rights. To exercise any of these rights, contact us at info@preshiftiq.com. We may need to verify your identity before fulfilling certain requests. We will respond within the timeframes required by applicable law.

10. California Residents If you are a California resident, you may have additional rights under the California Consumer Privacy Act (as amended by the CPRA), including the right to know, delete, correct, and limit certain uses of personal information, and the right not to be discriminated against for exercising these rights. PreShiftIQ™ does not sell personal information and does not share personal information for cross-context behavioral advertising.

11. Children's Privacy The Site and our services are intended for business users and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

12. Third-Party Links The Site may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to read the privacy policies of any third party before sharing information.

13. Changes to This Policy We may update this Privacy Policy from time to time. The "Last Updated" date at the top indicates when it was most recently revised. Material changes will be communicated through the Site or by other appropriate means. Continued use of the Site after changes take effect constitutes acceptance of the updated policy. '

14. Contact Questions, requests, or complaints about this Privacy Policy or our handling of personal information can be directed to: PreShiftIQ™ Email: info@preshiftiq.com Web: preshiftiq.com