TT CONTRACTS

PRIVACY POLICY

Effective date: October 13, 2026
Last updated: October 13, 2026
Product website: https://www.truckerstalentesign.com
Operator: Truckers Talent Incorporated
Privacy contact: [email protected] (subject: TT Contracts Privacy Request)
Postal contact: 990 Biscayne Blvd, Suite 501, Miami, FL 33132

Important: This Privacy Policy is a disclosure about personal-information practices. It does not waive privacy rights granted by law, substitute for transaction-specific consent, or release TT Contracts from statutory obligations.

TT Contracts is an electronic agreement workspace operated under the Truckers Talent Incorporated business identified above ("TT Contracts," "Company," "we," "us," or "our"). This Privacy Policy explains how personal information is collected, used, disclosed, retained, secured, and otherwise processed when people visit TT Contracts websites, create individual or business accounts, prepare or manage agreements, send invitations, view or sign documents, receive service communications, or contact support (collectively, the "Services"). It applies to account holders, organization administrators and team members, document senders, invited recipients and signers (including people without accounts), and visitors. Use of TT Contracts is also subject, where validly accepted, to the separate TT Contracts Terms of Use. Our privacy notice is informational: a person's privacy-law rights do not depend on agreeing to this notice.

PART I. SCOPE AND DATA RESPONSIBILITIES

1. Scope; Relationship to Other Services

1.1 TT Contracts-specific notice. This notice covers TT Contracts rather than all businesses or websites appearing in the broader Truckers Talent network. Other products, including Truckers Talent's recruiting marketplace, CDL Recruiters LLC, CDL TMS, and independently operated businesses, may have their own controllers, privacy notices, and business purposes. A link between websites or common branding does not, by itself, authorize unrestricted transfer of private agreements or personal information across those services.

1.2 Service and jurisdiction limits. Certain features, integrations, processing operations, legal rights, and notices depend on the user's plan, location, transaction, and features actually deployed. Where an applicable customer agreement or Data Processing Addendum ("DPA") governs customer-controlled information, it supplements this notice as described below.

1.3 No blanket consent. Simply viewing this Privacy Policy does not supply every consent required for cookies, marketing texts, sensitive information, recording, or consumer electronic disclosures. Where separate permission is required, the relevant party must obtain it through an appropriate process.

2. Our Role: Controller or Service Provider / Processor

2.1 Our own business operations. To the extent we determine the purposes and means of processing account registration, subscriptions, direct sales inquiries, fraud prevention, customer support, platform security, and product administration, we generally act as a controller or business under the applicable privacy law.

2.2 Customer documents and signing workflows. An organization or individual sending an agreement generally decides which documents to upload, whose information to include, who receives the agreement, what fields signers complete, how long business records must be kept, and which lawful purposes justify that transaction. For personal information in such documents and workflows, we ordinarily process on the customer's behalf as its service provider or processor, subject to the applicable agreement, instructions, and law. Some associated event information may also be processed independently where reasonably necessary for our legal compliance, security, billing, claims, and fraud prevention.

2.3 Where to direct privacy requests. If a person requests correction or deletion of content contained in an agreement controlled by a sender or organization, we may need to refer the person to that customer or assist that customer rather than unilaterally edit a signed record. We will consider requests about our own controller-held account and usage information directly. Nothing in this distinction reduces nonwaivable rights under applicable law.

2.4 Customer duties. Customers must provide any required notice, lawful basis, consent, and restrictions when they collect, upload, disclose, or send information about others. Customers must not place unnecessary sensitive information in signing invitations or permit access to unauthorized parties. TT Contracts remains responsible for its own duties as a controller or processor as applicable.

3. Definitions

"Personal information" means information linked or reasonably linkable to an identifiable individual, as defined by applicable law. "Customer Content" means uploaded contracts, templates, document fields, attachments, messages, completed agreements, and other information supplied in a customer's workspace or signing request. "Signer" means a person asked to review, acknowledge, or sign a document, whether or not they have an account. "Sender" means the account holder or organization initiating that request. "Organization Administrator" means a user with workspace administration permissions. "Audit Data" means the event information the system actually records about preparation, routing, access, signing, completion, and related actions. "Service providers" means entities processing information on our behalf for operational purposes. "Independent third parties" means recipients processing data for their own purposes, where that distinction applies under law. Undefined capitalized terms may have meanings in the TT Contracts Terms of Use.

PART II. WHAT INFORMATION WE HANDLE

4. Categories of Personal Information

The categories described below may be collected directly from a user, supplied by a sender, produced by a transaction, or received from permitted service providers. Not every category is collected from every person. The exact information handled depends on the product functions you use.

4.1 Account, identity and contact information. Names, email addresses, telephone numbers, account identifiers, business or organization name, role, job title, username, profile and preference settings, and authentication or account-recovery information. Passwords or authentication secrets, if used, should be handled through appropriate security practices; we do not represent here that a particular authentication method is deployed.

4.2 Business, team and administrator information. Company contact details, account membership, invitations to join a workspace, billing administrators, access permissions, seat changes, administrator actions, business communications, and relevant verification information where requested for security or legal reasons.

4.3 Agreements, templates and document fields. The text and attachments of documents that users choose to create or upload; names and contact details of counterparties; addresses, business identifiers, compensation and payment provisions, employment or contractor information, property and commercial transaction details, and any other personal information a customer places in a document. We cannot predict or control all categories customers elect to include.

4.4 Electronic-signature and transaction evidence. Information available from the signing process may include signer names and email addresses, signature or initials data, document identifiers, signature-field values, signing intent or consent records, viewing and completion events, access or delivery status, timestamps, and technical metadata such as IP address, browser or device information. An audit trail does not by itself establish government-issued identity verification.

4.5 Messages and support. Invitations, reminder and status notices, support requests, correspondence, issue reports, attachments submitted for troubleshooting, and related interaction histories. A sender may include a document title or other information in an email invitation; customers should avoid placing sensitive data in subject lines or preview text.

4.6 Payment and commercial information. Plan selection, subscription and trial status, billing contact, transaction IDs, invoice details, payment status, tax records, refunds, and limited payment-method information provided by the payment processor.

4.7 Device, security and usage information. IP address, approximate location inferred from network information, device/browser type, operating system, language, referrer, pages and features accessed, logs, dates and times of activity, session information, security indicators, and cookie or similar identifiers, to the extent actually collected. We do not assert that precise GPS location or biometric identification is collected by default.

4.8 Information from other people and integrations. Senders may provide signers' contact details and document contents. An organization may invite team members or import customer details. A permitted integration or independent vendor may return delivery, verification, billing or transaction status information. Any external-source matching, marketing enrichment, or cross-product sharing requires its own accurate disclosure and lawful basis.

5. Sensitive Information, Regulated Records and Optional Inputs

5.1 Documents may contain sensitive data. Customer Content may include government identifiers, bank information, details about health, employment, children, financial status, legal disputes, or other information treated as sensitive under applicable law. A customer must determine whether such information is legally necessary and permitted for the particular use case and use appropriate contractual, technical and organizational safeguards.

5.2 Regulated workflows are not automatically authorized. Our marketing examples for healthcare, recruiting, finance or real estate do not mean that TT Contracts is certified for HIPAA, GLBA, specific professional-secrecy rules, financial-services retention, government identity systems, or other regulated processing. Unless we have expressly approved a regulated use in a signed agreement, with any required business-associate or data-processing terms and verified controls, customers should not upload protected health information or other data requiring such arrangements.

5.3 Do not collect more than needed. Customers should avoid requesting Social Security numbers, full financial-account numbers, medical diagnoses, passport images, or biometric samples unless an authorized workflow, legal basis, privacy notice, and appropriate safeguards are in place. The existence of a free-text field is not permission to demand sensitive data.

6. Sources of Information

We may receive information (a) when you fill in a page, create an account, upload a file, enter document fields, sign, subscribe or contact us; (b) from the sender, organization or workspace administrator who invited you; (c) automatically from browsers, session tools, security logs and permitted cookies; and (d) from service providers or integrations necessary for the feature used. We will identify any materially different source or data brokerage practice in a revised notice before beginning such processing where required.

PART III. PURPOSES, LEGAL BASES AND SHARING

7. Why We Use Personal Information

Subject to the role and permissions described above, we use information to: provide account and workspace functionality; upload, route, display, store and deliver agreements; request and capture electronic signatures; generate available audit and completion records; send operational invitations and reminders; authenticate and administer accounts; support users and troubleshoot problems; administer subscriptions and payments; investigate fraud, abuse or unauthorized access; protect the integrity, security and availability of the Services; comply with applicable law and defend legal claims; and assess service performance and improve usability using data permitted for that purpose.

We do not treat a customer's private contract as general marketing material merely because it is stored on the platform. Any use of Customer Content for product-model training, unrelated advertising, or public examples would require a separately established legal basis and any applicable consent or authorization;

8. Legal Bases Where Required

Where laws such as the GDPR apply, the Company's legal bases may include: performance of a contract for account administration and delivery of requested Services; compliance with legal obligations for records, tax or lawful requests; legitimate interests for proportionate security, fraud prevention and support (after any required balancing); and consent for optional processing that requires consent, such as some marketing or nonessential tracking. In customer-controlled signing workflows, the customer determines and documents the relevant legal basis as controller, while we process on its documented instructions when required. If data involves special categories, an additional lawful condition may be needed; users should not assume consent to sign an agreement automatically supplies that condition.

9. How Information Is Shared

9.1 Senders, signers and authorized workspace users. Information is shared to carry out the agreement workflow. A sender can generally access the documents it prepared and event information available to its account; invited recipients may receive the document, related messages and completed copies as permitted by the sender's settings and applicable law. Team administrators may have access and control depending on their workspace permissions. A signed document may necessarily reveal information about other parties named in it.

9.2 Service providers. We may share the minimum appropriate information with hosting, storage, network, security, email delivery, analytics, customer-support, payment, and other vendors needed to operate authorized features, subject to appropriate contracts and safeguards. We do not assert that a specific provider or DPA is in place without verification.

9.3 Customer-enabled connections. If a customer authorizes a third-party integration or exports or forwards a completed document, the information disclosed may be handled under the recipient's separate privacy terms and the customer's instructions. Users should review the relevant access settings, vendor terms, and risks before enabling integrations.

9.4 Corporate group and independent businesses. We may disclose information to a corporate affiliate only where the entity is genuinely affiliated, disclosure serves a disclosed lawful purpose, and legal/contractual safeguards apply. The Company's wider brand ecosystem and CDL Recruiters LLC must not be treated as having automatic access to all private TT Contracts documents.

9.5 Legal process and protection. We may disclose information if legally required or reasonably necessary to respond to lawful requests, enforce legal rights, investigate security incidents, protect persons or property, and prevent fraud, considering any applicable objection, notice and proportionality requirements.

9.6 Corporate transactions. Information may be transferred as permitted by law in a merger, acquisition, financing, restructuring or sale of business assets, subject to confidentiality, applicable notice and continuing privacy obligations.

9.7 De-identified data. We may analyze aggregate or de-identified information for legitimate operational purposes when individuals cannot reasonably be identified and when we maintain any restrictions required by applicable law. We do not characterize pseudonymous or easily reversible records as anonymous.

10. Sale, Targeted Advertising and Cross-Context Sharing

We may operate a public marketing website as well as a logged-in electronic-signature workspace. Some website analytics, advertising or measurement technologies, if enabled, may involve disclosures that are regulated as a “sale,” “sharing,” or targeted advertising under certain U.S. privacy laws even where no money is exchanged for personal information. Rights and obligations depend on the technologies in use and applicable law.

Where applicable law grants a right to opt out of sale, sharing, or targeted advertising, you may submit a request using the contact method in Section 25. We will provide any additional legally required opt-out mechanism and honor recognized preference signals when required. We do not authorize an account holder to use another person's document content for unrelated marketing without a lawful basis.

11. Cookies, Similar Technologies and Browser Controls

We and service providers may use cookies, local storage, and related technologies to support authentication, session continuity, security, preferences, customer document workflows, analytics, and performance. The public website and logged-in platform may use different technologies and third parties. Some optional technologies may require consent or give rise to an opt-out right under applicable law.

You can adjust browser settings to restrict cookies; essential session functionality may be unavailable if necessary storage is blocked. Where a legally required consent choice or browser opt-out applies, we will handle it in accordance with applicable law. Please use the Section 25 contact to ask about cookie controls or to submit a request.

12. Service Communications and Marketing Choices

We may send transactional account messages, document invitations and reminders requested by senders, signature-status messages, security notifications, and billing or support updates. Some messages are sent on behalf of a customer that supplies the contact details; those recipients may need to contact the sender about the underlying relationship. Separate promotional emails or texts are subject to applicable marketing laws, consent rules, unsubscribe methods, and suppression practices. Signing a customer document or receiving an invitation does not by itself authorize marketing calls or texts from unrelated brands. We will not condition a purchase on consent to optional marketing where prohibited by law.

13. Automated Processing, Identity Checks and AI

TT Contracts uses software-driven operations to facilitate document routing, access controls, signature workflows, notices, and related account functionality. Depending on the services and vendors in use, automated processing may also assist reliability, service quality, fraud prevention, and support. Such automated steps do not guarantee the legal validity of a contract, a signer's identity, or the absence of fraud.

Where an activity involves automated decision-making subject to special legal requirements, or requires notice or consent, we will provide applicable notices and choices. Customers should not upload documents containing sensitive regulated information unless they have confirmed the Service is appropriate for that information.

14. Organization Access, Signer Links and Confidentiality

A customer's document permissions determine which members, senders and recipients may access available content. Administrators may be able to invite or remove members, change access, and obtain organization records according to the available features. Sharing an invitation or completed agreement outside the platform can disclose data to others; users should verify recipient addresses and securely manage devices, accounts, sign-in credentials and links. Where a recipient can open a document with a link, that link may act as a bearer credential and should be treated as sensitive.

15. Security Practices and Incident Response

We seek to apply administrative, technical, and organizational measures appropriate to the sensitivity of the information processed, including account access restrictions and measures intended to prevent unauthorized disclosure or misuse. No website, transmission, device, or storage system can be guaranteed to be completely secure. Customers and signers must safeguard credentials, document-access links, and devices and use appropriately secure channels.

We assess suspected security incidents and provide notices to affected people, customers, or authorities when required by law or binding contract. Please report suspected account or document-access security incidents using Section 25.

16. Retention of Accounts, Documents, Signatures and Audit Data

We retain information for periods appropriate to providing requested Services; maintaining accounts, electronic records, and evidence; managing document lifecycles; preventing fraud; responding to disputes; and meeting legal, tax, financial or contractual obligations. Actual retention depends on the account, document type, plan, applicable instructions, and lawful recordkeeping requirements.

A sender or organization may control deletion or retention of documents within its workspace. Deleting an account or record does not necessarily erase an executed agreement, transaction evidence, backup copy, security record, or record retained under an applicable legal hold. Where applicable law provides a deletion right, we will assess exceptions and whether a customer rather than TT Contracts controls the document. To request information on the retention of your records, contact us through Section 25.

17. Cross-Border Processing and International Transfers

Your personal information may be processed or made accessible in countries other than the country where you reside, including where infrastructure vendors, authorized service providers, or support personnel operate. Those countries may have different data-protection laws. Where applicable law requires special safeguards for an international transfer, we will apply a valid transfer mechanism or other legally required protection. For jurisdiction-specific questions, contact us using Section 25.

18. Third-Party Sites, Exports and Independent Recipients

Our pages may link to outside websites and services. When a user chooses to leave TT Contracts, export a file, forward a PDF, enable an integration, or send data to a recipient who operates independently, that recipient's legal obligations and privacy notice may apply. We are responsible for our own lawful disclosures, vendor oversight and data handling; we do not control every later use of a document after an authorized recipient downloads it. This section does not excuse any Company violation of applicable privacy law.

PART V. PRIVACY RIGHTS AND SPECIAL NOTICES

19. General Privacy Rights and How to Exercise Them

Depending on your location, role and the applicable law, you may have rights to request access, confirmation of processing, correction, deletion, restriction, portability, information about disclosures, objection to certain processing, withdrawal of consent, or appeal a denied request. Exercising a valid privacy right will not result in unlawful discrimination or retaliation. Submit requests to the privacy contact in Section 25 or any accessible self-service controls actually offered. We may take reasonable steps to verify identity, protect other signers' data, and determine whether we act as controller or processor for the requested information. We will respond within applicable legal time limits and explain permitted exemptions or routes for appeal. Authorized agents may act when legally allowed and properly verified.

A signer may need to contact the sender or organization for changes to the contents of that sender's legal agreement. TT Contracts should not silently amend an executed contract in response to an unverified request; we can assist with lawful alternatives such as customer-led correction, account-data updates, restricted access, or documented deletion where appropriate.

20. California and Other U.S. State Privacy Disclosures

If a comprehensive state privacy law applies to TT Contracts, eligible residents may have rights to know or access, obtain copies, correct, delete, opt out of certain sales/sharing or targeted advertising, limit certain sensitive-data uses, or appeal our decisions as provided by that law. We consider scope, exemptions, and the role of the customer that controls a document when evaluating requests.

Information categories potentially involved in TT Contracts include identifiers and contact information, business and subscription details, device and usage information, approximate location inferred from network data, document/signature event information, and information customers choose to place in documents. Sections 4–12 describe potential sources, purposes, and recipient categories. If law requires additional notices at collection or a specific opt-out mechanism, those requirements apply in addition to this notice. Send privacy requests to the address in Section 25.

21. European Economic Area, United Kingdom and Other International Rights

Where the GDPR, UK GDPR, or a comparable law applies, eligible individuals may have rights to access, rectify, erase, restrict, port, or object to processing, withdraw consent prospectively, and complain to a supervisory authority. Processing may be based on a contract, legal duties, legitimate interests, consent, or another valid lawful basis appropriate to the activity. Where a customer controls a document, that customer may be responsible for responding to requests about it and we may assist as appropriate. Applicable transfer safeguards, processor agreements, representatives, and other jurisdiction-specific requirements remain in force regardless of this notice.

22. Children and Age-Related Restrictions

TT Contracts accounts are intended for adults who can lawfully agree to the applicable terms. Some customer documents may concern minors or include data about minors supplied by an authorized adult, but the mere existence of that document does not authorize tracking, profiling or marketing to children. We do not intend to offer the Services directly to children. If we identify information collected contrary to applicable law, we will take appropriate steps to restrict or delete it in accordance with legal requirements.

23. Privacy by Design, Data Accuracy and Customer Responsibilities

We aim to limit access and processing to appropriate business purposes, preserve necessary records, and correct inaccurate account information when lawfully requested. Users who control documents should check information before sending, minimize recipient distribution, give fair notice, maintain lawful permissions, use appropriate verification for high-risk transactions and promptly revoke unnecessary access. The customer's responsibility for the contents of its agreement does not eliminate the Company's own statutory responsibilities concerning platform security, vendor handling, and lawful processing.

24. Changes to This Policy

We may update this Privacy Policy to describe new features, practices, legal requirements, or service arrangements. The current publication will display the effective or last-updated date. If a change materially alters handling of information already collected or otherwise triggers a notice or consent requirement, we will give appropriate notice and obtain consent where required before applying the new practice. A retroactive expansion of purposes is not automatically authorized by continued use. Prior versions may be retained where reasonably needed for legal compliance and accountability.

25. Privacy Contact and Notices

Operator: Truckers Talent Incorporated
Product website: https://www.truckerstalentesign.com
Email for privacy requests and security reports: [email protected] (please use the subject “TT Contracts Privacy Request” or “TT Contracts Security Report”)
Postal address: 990 Biscayne Blvd, Suite 501, Miami, FL 33132

When making a request, please identify whether it concerns your TT Contracts account, an invitation to sign, or content controlled by a sender. Do not email complete contracts, full payment details, credentials, or government identifiers without a secure method arranged with us. We may verify your connection to a record before disclosing or changing it. Additional rights, notices, or contact methods required by applicable law remain available.

26. Relationship to Terms of Use, DPAs and Electronic-Signature Consent

This Privacy Policy explains privacy practices; it is not a substitute for the TT Contracts Terms of Use, the separate consent required for certain electronic signatures or electronic delivery of statutory records, a valid customer DPA, an applicable state notice at collection, or an industry-specific privacy disclosure. A signed DPA or customer agreement governs specified processing on behalf of a customer to the extent applicable, without curtailing the individual's mandatory privacy rights. Electronic-signature consent is separate from consent for optional marketing or cookies. If a customer contract and this notice differ about customer-directed processing, we will resolve the difference under the applicable contracts and law and make any necessary disclosures to affected individuals.