Privacy Policy.

We collect information you provide directly to us when you create an account, complete a license application, or contact us for support. This includes: - Account information: name, email address, and password - Business information: company name, entity type, state of operation, and principal details you enter to generate a compliance checklist - Documents you upload: license images, medical examiner certificates (DOT physicals), training and continuing education certificates, identification documents (e.g., driver's licenses, photo IDs), and other compliance-related files you submit through the platform - Usage data: pages viewed, features used, and actions taken within the platform - Communications: emails or messages you send to our support team We do not collect payment card numbers directly. Payment processing is handled by Stripe, our third-party payment processor, which maintains its own privacy and security practices.

We use the information we collect to: • Provide, maintain, and improve the ClearPath Pro platform • Generate compliance checklists and application documents based on your inputs • Send transactional emails such as document reminders and application status updates • Respond to your support requests and questions • Monitor platform security and prevent fraudulent activity • Comply with legal obligations We do not sell your personal information to third parties.

We share your information only in the following circumstances: - Service providers: We use third-party vendors to operate the platform. Each vendor is bound by data processing agreements limiting how they handle your data on our behalf: — Supabase: database hosting and document file storage. Data is physically stored on Amazon Web Services (AWS) infrastructure in the United States. — Vercel: web infrastructure and content delivery — Anthropic Claude API: AI features for document review and platform assistance — Stripe: payment processing for subscription billing — Resend: transactional email delivery (renewal reminders, application updates) - Legal requirements: We may disclose information if required by law, court order, or governmental authority. - Business transfers: If ClearPath Pro is acquired or merges with another company, your information may be transferred as part of that transaction, with prior notice to you. - With your consent: We may share information for other purposes with your explicit consent.

We implement industry-standard security measures to protect your information, including: - Encryption in transit (TLS/HTTPS) for all data transmitted to and from the platform - Encryption at rest for all data stored in our database, including uploaded documents - Access controls limiting which team members can access user data - Two-factor authentication (TOTP) available on user accounts - Audit logging of sensitive actions (logins, document access, role changes) - Regular security reviews of our infrastructure and third-party dependencies No method of transmission or storage is 100% secure. In the event of a security breach affecting your personal information or uploaded documents, we will notify affected users in accordance with applicable state breach notification laws, typically within 72 hours of becoming aware of the breach. Notifications will include: what data was affected, the steps we are taking in response, and what actions you can take to protect yourself.

We retain your account, application, and uploaded document data for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymize your personal information and uploaded documents within 30 days, except where we are required to retain certain records for legal or regulatory compliance purposes. Application metadata (compliance checklists, state requirements) may be retained in anonymized aggregate form for product improvement purposes. This anonymized data does not include personally identifiable information or document contents.

Depending on your location, you may have the following rights regarding your personal information: - Access: Request a copy of the personal data we hold about you - Correction: Request correction of inaccurate or incomplete data - Deletion: Request deletion of your personal data and uploaded documents (subject to legal retention requirements) - Portability: Request an export of your data in a machine-readable format - Objection: Object to certain types of processing To exercise any of these rights, email us at hello@clearpathpro.io. We will respond within 30 days. We are working on self-serve data export and account deletion tools and will update this policy when those are available.

We use cookies and similar technologies to maintain your login session and remember your preferences. We do not use third-party advertising cookies. Session cookies are required for the platform to function. You can configure your browser to block cookies, but doing so will prevent you from logging in.

ClearPath Pro is designed for business use and is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the platform at least 14 days before the change takes effect. Your continued use of ClearPath Pro after the effective date constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: ClearPath Pro Email: hello@clearpathpro.io We take privacy inquiries seriously and will respond promptly.