Privacy Policy

Stingray Expedite, LLC · Nautilus™ Platform

Developer and platform operator: Stingray Expedite, LLC

Effective date: June 15, 2026 · Last updated: July 8, 2026

Stingray Expedite, LLC ("Stingray," "we," "us," or "our") is a woman-founded, Latina-led, Puerto Rican-owned technology and consulting company. We are the developer of mobile applications and the creator and operator of Nautilus™, a Business Operating System (BOS) that serves as the backend platform powering those applications and our client organizations' operations.

This Privacy Policy explains how we handle information in connection with:

• our website at stingrayexp.com; and
• the Nautilus™ platform and the mobile applications we build and operate for client organizations (for example, the OTEC Carriers app we develop for OnTime Expedite Carriers, and applications we may develop for other clients).

Stingray is a software and technology company. We do not arrange, broker, dispatch, or transport freight, and we do not act as a motor carrier or freight broker.

Roles (who controls the data). For information collected through our website, Stingray is responsible. For information processed within an application or a client's Nautilus™ environment, the client organization controls that information for its operation, and Stingray processes and has access to it, through the Nautilus™ platform, as the developer and platform operator that delivers and supports the software. A client organization whose users access an application built on Nautilus™ may also publish its own privacy policy for its operation and workforce.

By using our website, or an application we develop, you agree to this Privacy Policy. Our applications are intended for adults (18+) using them in a business capacity, and are not directed to children (see Section 11).

---

1. Scope

This Policy applies to visitors and users of stingrayexp.com, to the Nautilus™ platform, and to the applications Stingray develops and operates on Nautilus™. It does not cover third-party websites we link to, or a client organization's own separately published privacy policy.

2. Information we collect

a. Through our website

• Information you provide. When you submit a form (demo request, contact message, or newsletter sign-up), we collect the details you enter — such as your name, company or organization name, industry or type of business, fleet size, email address, phone number, and any message.
• Information collected automatically. Our website (hosted on Squarespace) automatically collects limited technical and usage data — such as IP address, browser and device type, pages visited, and referring links — through cookies and similar technologies.

b. Through Nautilus™ and the applications we develop (on behalf of client organizations)

To deliver the features a client organization licenses and enables, the Nautilus™ platform and the applications it powers may collect and process the following, which Stingray, as developer and platform operator, accesses to run and support the software:

• Identity and contact information: names, emails, phone numbers, preferred language, city/state/ZIP, and roles.
• Business information: company name, LLC name, EIN, company address, and account type.
• Financial information: bank name, bank account number, routing number, and W-9 status, used only to process contractor settlements through the client's payment/factoring provider.
• Precise location (GPS): collected from a user's device while the application is in use and the user's status is "Active," to support real-time tracking, load coordination, and location-based features that the client has enabled (see Section 4).
• Vehicle and compliance information and documents: vehicle details and photos; certificates of insurance, licenses, MVRs, drug-test results, registrations, and work-authorization documents, with issue/expiration dates.
• Photos and files: proof-of-delivery photos, cargo securement photos, bills of lading, and uploaded compliance documents.
• Communications: in-app messages, with sender, timestamps, and delivery status.
• Device and usage data: device identifiers, app version, log data, and diagnostics.

The specific data processed depends on which modules and features each client organization has licensed and enabled. These capabilities are part of the service the client pays for and chooses to turn on.

3. How information is used

We use information to:

• respond to inquiries and schedule demos or consultations (website);
• build, deliver, operate, secure, monitor, and improve our website, the Nautilus™ platform, and the applications we develop;
• provide the features a client organization enables — including tracking, compliance, HR, operations, finance, and reporting;
• process contractor settlements and payments through the client's payment/factoring provider;
• maintain an auditable operational record for the client;
• send news and updates only if you have opted in, with an option to unsubscribe; and
• comply with legal, tax, insurance, regulatory, and safety obligations.

4. Location information (GPS)

Where a client organization enables location-based features, an application collects a user's precise GPS location while the app is in use and the user's status is "Active," to display real-time position to authorized staff and to surface nearby available work. The user controls location collection through the app's status toggle and device permissions; turning off location or setting status to inactive stops real-time collection. We do not use location data for advertising.

5. How we share information

We do not sell personal information, and we do not use it for third-party advertising or cross-app tracking. We share information only as needed:

• Client organizations. A client organization and its authorized users access the data in their own environment to run their operation. Stingray does not use that data for its own purposes beyond building, operating, and supporting the software.
• Payment/factoring providers. Banking and settlement details are shared only with the provider that processes a client's contractor settlements.
• Brokers and shippers (limited). For a given load handled by a carrier client, limited load-related information (such as status updates and estimated arrival times) may be shared with that load's broker or shipper. We do not share banking information or personal identity documents with brokers or shippers.
• Service providers (subprocessors). Trusted providers that host and operate our website, platform, and applications — for example, cloud database and file storage, mapping and geocoding, authentication, email, application infrastructure, and payment/factoring — process data on our behalf under confidentiality and security obligations.
• Legal and safety. Where required by law or legal process, or to protect the rights, safety, or property of Stingray, our clients, our users, or the public.
• Business transfers. As part of a merger, acquisition, or sale of assets, subject to this Policy.

6. Third-party service providers

Our website, platform, and applications rely on trusted service providers, including: cloud database and file storage; mapping and geocoding services; authentication services; application infrastructure; and payment/factoring services. Each provider's handling of data is governed by its own terms and privacy practices in addition to our agreements with them.

7. Data retention

We keep information for as long as needed to provide our services and, for platform and application data, for as long as the client organization's account requires. Afterward, we retain information only as needed to meet legal, tax, insurance, and safety obligations, and then delete or de-identify it.

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, or delete the personal information we hold about you, and to opt out of marketing emails. For information processed within a client organization's environment, we will coordinate with or refer your request to that organization where appropriate, since they control that data. To exercise your rights, contact us using the details in Section 12.

9. Account and data deletion

You can request deletion of your account and associated personal information by emailing info@stingrayexp.com with the subject "Account Deletion Request," or by using the account-deletion option in the relevant application where available. Upon a verified request, we will delete or de-identify your personal information, except information we or the client organization are legally required to retain (see Section 7). We will confirm when your request is complete.

10. Data security

We use administrative, technical, and physical safeguards designed to protect information, including role-based access that limits data to authorized users, activity logging, automated tracking of compliance documents and expirations, and encryption in transit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children's privacy

Our website, platform, and applications are intended for adults (18+) in a business capacity. They are not directed to children, and we do not knowingly collect personal information from anyone under 18. If we learn we have, we will delete it.

12. Geographic scope & contact

Nautilus™ and our applications are operated within the United States, and information is processed and stored in the United States.

For questions about this Privacy Policy, to exercise your rights, or to request account deletion, contact:

Stingray Expedite, LLC
Port St. Lucie, FL 34983 · USDOT 4446858
Email: info@stingrayexp.com

13. Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, post notice on our site or within the relevant application. Your continued use after changes take effect constitutes acceptance of the updated Policy.