Privacy Policy

BlackBridge Logistics LLC (“BBL,” “we,” “us,” or “our”) is committed to protecting the privacy and security of the information we collect from our customers, prospective customers, and users of our services and online platforms. This Privacy Policy describes how we collect, use, disclose, and protect your information in connection with our transportation brokerage services and customer onboarding portal.

1. Information We Collect

a. Business Identification Data

Legal business name, DBA (doing business as) name, entity type, state of incorporation, Employer Identification Number (EIN), DUNS number, website URL, phone number, physical address, and billing address.

b. Contact Information

Names, email addresses, and phone numbers of designated personnel including operations contacts, accounts payable contacts, billing dispute contacts, procurement contacts, and after-hours contacts.

c. Financial Data

Bank account information (routing and account numbers, collected via Plaid or manual entry), credit card information (tokenized via Stripe — we do not store full card numbers), credit reports obtained from commercial credit reporting agencies (including Dun & Bradstreet), trade and bank references, estimated monthly spend, and requested credit terms.

d. Beneficial Ownership Information

Names, titles, ownership percentages, phone numbers, and email addresses of individuals holding 25% or more ownership interest, as well as the designated controller or chief financial officer.

e. UCC Filing Information

Debtor legal name, jurisdiction, organizational ID number, and mailing address for purposes of filing UCC-1 financing statements.

f. Transaction and Service Data

Shipment details, rate confirmations, invoices, payment history, claims, and communications related to transportation services arranged by BBL.

g. Technical Data

IP address, browser type, device information, and usage data collected automatically when you access our onboarding portal or other online platforms.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Evaluating creditworthiness and processing credit applications
• Providing transportation brokerage and logistics services
• Invoicing, payment processing, and accounts receivable management
• Filing UCC financing statements to perfect security interests
• Communicating with you about your account, shipments, and services
• Complying with regulatory requirements, including FMCSA, FinCEN, and state and federal tax reporting obligations
• Preventing fraud and managing business risk
• Improving our services and customer experience

3. How We Share Your Information

We do not sell your personal or business information to third parties. We may share your information with the following categories of recipients:

• Credit Reporting Agencies: Dun & Bradstreet, Experian, Equifax, TransUnion, and similar agencies, as authorized in your credit application, for the purpose of evaluating creditworthiness.
• Trade and Bank References: As identified in your application and authorized by you, to verify financial information and payment history.
• Carriers and Service Providers: Motor carriers, freight forwarders, and logistics partners as necessary to arrange and perform transportation services on your behalf.
• Financial Institutions and Payment Processors: Including Stripe (credit card processing) and Plaid (bank account verification), for payment facilitation. These providers are subject to their own privacy policies and PCI DSS compliance obligations.
• CRM and Business Systems: Including HubSpot, for managing customer relationships and communications.
• Government Agencies: As required by law, regulation, or legal process, including FMCSA filings, tax reporting, and responses to subpoenas or court orders.
• Professional Advisors: Our attorneys, accountants, and auditors, under obligations of confidentiality.
• Affiliates and Successors: BBL affiliates, and in connection with any merger, acquisition, or sale of assets, subject to the acquiring entity honoring this Privacy Policy.

4. Data Security

We implement industry-standard security measures to protect your information, including:

• AES-256-GCM encryption for sensitive financial data (EINs, bank account numbers, credit report data) at rest
• TLS encryption for all data in transit
• Tokenization of credit card data through Stripe (card numbers never touch our servers)
• Secure, access-controlled database infrastructure
• Invite-code-based access controls for the onboarding portal

While we take reasonable measures to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your information for the duration of our business relationship and for a period of seven (7) years following the termination of our agreement, or as required by applicable law, whichever is longer. This retention period is necessary to comply with tax, regulatory, and legal obligations, and to support any claims or disputes that may arise.

Draft applications that are not submitted may be retained for up to ninety (90) days before being purged. Credit report data obtained from third-party agencies is retained in accordance with our contractual obligations with those agencies.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your information:

• Access: Request a copy of the personal and business information we hold about you.
• Correction: Request correction of inaccurate information.
• Deletion: Request deletion of your information, subject to our legal retention obligations (including UCC filings, tax records, and regulatory requirements).
• Portability: Request your information in a structured, machine-readable format.
• Withdrawal of Consent: Where processing is based on consent (such as electronic communications), you may withdraw consent at any time by contacting us in writing.

To exercise any of these rights, contact us at privacy@blackbridgelogistics.com or by certified mail to the address below. We will respond within thirty (30) days.

7. Fair Credit Reporting Act (FCRA)

In connection with your credit application, we may obtain consumer and commercial credit reports for the permissible purpose of evaluating creditworthiness pursuant to 15 U.S.C. § 1681b(a)(3)(A). If we take adverse action based in whole or in part on information contained in a credit report (such as denying credit or offering less favorable terms), we will provide you with an adverse action notice that includes: the name, address, and phone number of the credit reporting agency that furnished the report; a statement that the agency did not make the adverse decision; and your right to obtain a free copy of the report and to dispute its accuracy.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information we collect and how it is used, the right to delete your personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your California privacy rights, contact us at the email address above.

9. New York SHIELD Act

In compliance with the New York Stop Hacks and Improve Electronic Data Security (SHIELD) Act, we implement reasonable administrative, technical, and physical safeguards to protect the private information of New York residents. In the event of a data breach involving private information, we will notify affected individuals and the New York Attorney General in accordance with the SHIELD Act's requirements.

10. Third-Party Services

Our onboarding portal integrates with the following third-party services, each of which maintains its own privacy policy:

• Stripe (payment processing) — stripe.com/privacy
• Plaid (bank account verification) — plaid.com/legal
• DocuSign (electronic signatures) — docusign.com/privacy
• Dun & Bradstreet (credit reporting) — dnb.com/privacy
• HubSpot (customer relationship management) — hubspot.com/privacy

We encourage you to review these providers' privacy policies. We are not responsible for the privacy practices of third-party services.

11. Cookies and Tracking

Our onboarding portal uses strictly necessary cookies to maintain your session and save your application progress. We do not use advertising cookies, tracking pixels, or third-party analytics cookies on the onboarding portal. No information collected through the onboarding portal is used for advertising purposes.

12. Children's Privacy

Our services are intended for businesses and their authorized representatives. We do not knowingly collect personal information from individuals under the age of 18. If we learn that we have collected information from a minor, we will promptly delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date. For customers with active accounts, we will also provide notice via email to the primary contact on file. Your continued use of our services after any changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about our data practices, contact us at: