TMS Spot Privacy Policy

Version 2026-10-04. Effective October 4, 2026.

This Privacy Policy explains how LogixSpot LLC, a Florida limited liability company ("LogixSpot," "we," "us"), collects, uses and shares personal information in connection with TMS Spot, including tmsspot.com, the TMS Spot web app and broker app, the customer and carrier portals, the driver tracking link, and our AI features (the "Service"). Capitalized terms not defined here have the meanings in the Terms of Service.

TMS Spot is a free, experimental beta for businesses. Please read Section 8 about security.

1. Two roles we play

• For our own account holders and website visitors, we decide how personal information is used. This Policy describes those practices.
• For Customer Data, which is the information a freight brokerage (our "Customer") puts into its TMS Spot workspace about its own employees, shippers, carriers, drivers and contacts, we act as the Customer's service provider. We process that information on the Customer's behalf and under its instructions. The Customer is responsible for its own privacy notices and for getting any consent it needs. If you are a shipper, carrier, driver or contact of one of our Customers and have a question about your information, please contact that Customer. We will help them respond.

2. Information we collect

Information you give us

• Account information: name, work email address, password (stored only as a one-way hash), company name, role, and an optional MC or DOT number.
• Workspace content (Customer Data): loads, quotes, rates, customers, carriers, contacts, documents (such as rate confirmations, bills of lading and invoices), emails and PDFs you paste or upload, chat messages, notes, and anything else you enter.
• Communications with us: messages you send to hello@tmsspot.com or through the Service, and feedback.
• Billing information, if you turn on a paid feature. Payment card details are handled by our payment processor, not stored by us.

Information collected automatically

• Acceptance records: when you accept our Terms and this Policy, we record your user ID, the version you accepted, the date and time, your IP address and your browser's user agent. We keep these records as proof of the agreement.
• Log and device data: IP address, browser and device type, operating system, pages and API endpoints requested, timestamps, referring pages, error logs, and security events such as sign-in attempts and two-step codes sent. During signup we store a keyed hash of your IP address to limit abuse.
• Product analytics: we use PostHog to understand how the app is used. When you are signed in to the app, PostHog receives events such as page views, page leaves, clicks and feature use, along with your user ID, name, email address, role and organization name, so that we can see how features are used and fix problems. PostHog uses cookies and browser local storage to recognize your browser.
• Cookies and similar technologies: see Section 6.

Information about drivers (collected for our Customers)

• When a Customer sends a driver a tracking link, we process the driver's mobile phone number and the text messages sent and received (including STOP and HELP replies).
• If the driver opens the link and agrees to tracking, we collect the phone's precise location (geolocation) while the link is active, along with status updates and photos the driver chooses to upload (for example, a proof of delivery). The driver sees what is shared and can stop at any time. Tracking ends when the load is delivered or the link expires, and it pauses when the phone locks.

Information from other sources

• Public carrier data from the FMCSA and other public or licensed sources, such as carrier names, MC and DOT numbers, authority and safety information. This is mostly business information but can include names of owner-operators.
• Integrations you connect, such as email, messaging or other business systems, under your instructions.

3. How we use information

We use personal information to:

• provide, operate, maintain and support the Service, including the Co-pilot and other AI features;
• create and secure accounts, verify email addresses, send sign-in and two-step codes, and prevent fraud, spam and abuse;
• send the emails and text messages you ask the Service to send;
• send you service and administrative messages, such as account notices, security alerts and updates to our terms;
• understand how the Service is used, fix bugs and improve features;
• keep records of your acceptance of our terms, enforce our agreements, and comply with law and legal process; and
• with your permission or where allowed by law, send you product news. You can opt out of marketing email at any time using the unsubscribe link.

AI processing. When you use an AI feature, the content you submit and related Customer Data are sent to our AI provider to produce the result. We do not use Customer Data to train our own or third-party general-purpose AI models, and we use provider settings that do not allow the provider to train on that content where such a setting is available to us.

4. How we share information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share personal information only as follows:

• Service providers (subprocessors) that help us run the Service under contracts that limit their use of the data, currently including: DigitalOcean (cloud hosting and databases), Google (Gemini AI models, and maps where enabled), Resend (email delivery), PostHog (product analytics), and messaging providers such as Twilio (text messages). We may add or replace providers over time and will update this list.
• Within your workspace and its portals: information you put in a workspace is visible to other Authorized Users in that workspace according to their roles. Information you choose to publish to the customer or carrier portal, or send to a driver, is visible to those portal users or that driver.
• Integrations you connect: we exchange data with third-party services you connect, under your instructions.
• Legal and safety: to comply with law, regulation, subpoena, court order or other legal process; to protect the rights, property or safety of LogixSpot, our users or others; and to investigate fraud, security incidents or violations of our terms.
• Business transfers: in connection with a merger, acquisition, financing, reorganization or sale of all or part of our business, subject to this Policy.
• With your consent or at your direction.

Text messaging data. We do not share or sell mobile phone numbers, text messaging opt-in data or consent records with third parties or affiliates for their marketing or promotional purposes. Mobile information is shared only with the service providers that deliver messages and as required by law.

5. How long we keep information

We keep personal information for as long as your account is active and as needed to provide the Service. After a workspace is closed we generally delete or de-identify Customer Data within 90 days, except that residual copies may remain in backups for a limited time. Driver location history is kept with the load record in the Customer's workspace and is deleted when the Customer deletes it or the workspace is deleted. We keep acceptance records, security logs and records needed for legal, tax, accounting or dispute purposes for as long as needed for those purposes. A Customer can delete records in its workspace at any time.

6. Cookies and similar technologies

We use a small number of cookies and browser storage items:

• Essential cookies that keep you signed in and secure, including a session cookie, a cookie that remembers a trusted device for two-step sign-in, a short-lived cookie used during two-step sign-in, and a cookie that remembers which office view you selected. The Service does not work without these.
• Analytics cookies and local storage set by PostHog in the app to measure use of the Service.

The marketing website at tmsspot.com does not currently use analytics or advertising cookies. We do not use advertising cookies or sell data to advertisers. You can block or delete cookies in your browser settings, but essential cookies are needed to sign in. Our Service does not respond to "Do Not Track" signals. You can ask us to stop product analytics for your account by emailing hello@tmsspot.com.

7. Your choices and rights

• Access, correction and deletion. You can view and update most account information in the Service. To ask for a copy of your personal information, a correction, or deletion, email hello@tmsspot.com. We will verify your request and respond within the time the law requires. If your information is Customer Data, we may refer your request to the Customer that controls it.
• Marketing. You can opt out of marketing email at any time. We will still send service messages.
• Text messages. Reply STOP to any text from the Service to stop texts from that sender. Reply HELP for help. See the SMS Terms.
• Location. Drivers can stop sharing location at any time by closing the tracking link, turning off location permission, or replying STOP.
• State privacy rights. Depending on where you live, you may have additional rights under state law, such as the right to know, delete, correct or opt out of certain processing. We will honor those rights where the law applies to us. You will not be discriminated against for using them.

8. Security

We use reasonable administrative, technical and physical measures designed to protect personal information, including encrypted connections (HTTPS), hashed passwords, encryption of stored integration credentials, role-based access and optional two-step sign-in. No system is completely secure, and TMS Spot is an experimental beta. We cannot guarantee the security of any information. If we learn of a breach of security affecting your personal information, we will notify you and, where required, regulators, as required by law, including section 501.171, Florida Statutes.

9. Children

The Service is for businesses and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

10. Location of processing

We are based in the United States, and the Service is hosted in the United States. The Service is intended for use in the United States.

11. Changes to this Policy

We may update this Policy. The version date at the top shows when it was last changed. If we make a material change, we will notify you by email or in the Service and may ask you to accept the updated Policy when you next sign in.

12. Contact us

LogixSpot LLC operates TMS Spot. Questions or requests about privacy:

• Email: hello@tmsspot.com, with "Privacy" in the subject line
• Mail: LogixSpot LLC, Attn: Privacy, 7901 4th Street North, Suite 300, Saint Petersburg, FL 33702

Draft notice: This document is a draft prepared for review. It is not legal advice and was not prepared or reviewed by a licensed attorney. Have a Florida-licensed attorney review it before relying on it.