Telematics Data Access Authorization

Clean Freight Consultants Inc. DBA CleanFreight

This Telematics Data Access Authorization ("Authorization") describes how Clean Freight Consultants Inc., operating as CleanFreight ("Company," "we," "us," or "our"), accesses and uses telematics data from your fleet management systems in connection with the CleanFreight platform (the "Service").

1. Purpose

The purpose of this Authorization is to describe the scope and conditions under which the Company accesses telematics data from third-party telematics providers on behalf of the Customer. The Company accesses this data solely to provide the Service, which includes fleet performance analytics, emissions calculations, fuel efficiency monitoring, sustainability reporting, and related insights. The Company does not access telematics data for any purpose other than providing and improving the Service as described in the Terms of Service.

2. Scope of Access

When Customer connects a telematics provider to the Service, the Company may access the following categories of data:

• Vehicle identification data: unit numbers, vehicle identification numbers (VINs), make, model, year, and asset identifiers.
• Operational data: odometer readings, engine hours, fuel consumption, distance traveled, and trip data.
• Performance data: idle time, speed data, harsh events, and engine diagnostics.
• Location data: GPS coordinates and geofence events, as provided by the telematics platform.
• Fuel and emissions data: fuel usage records, fuel type, and related metrics used for emissions calculations.

The specific data accessed depends on the telematics provider, the Customer's telematics configuration, and the features of the Service that Customer has enabled. The Company accesses only the data necessary to provide the requested Service features.

3. Customer Representations and Responsibilities

By connecting a telematics provider to the Service, Customer represents and warrants that:

• Customer is the authorized owner or operator of the vehicles and fleet assets associated with the telematics account.
• Customer has the legal right and authority to grant the Company access to the telematics data.
• Customer has obtained all necessary consents from drivers, employees, and other individuals whose personal information may be included in the telematics data, in accordance with applicable privacy laws.
• Customer's use of the Service and sharing of telematics data complies with all applicable laws, regulations, and contractual obligations.
• Customer will promptly notify the Company of any changes to its authorization or any concerns regarding data access.

4. Credentials; Storage; Revocation

To access telematics data, Customer provides API credentials (such as API keys or tokens) for its telematics provider accounts. The Company stores these credentials using industry-standard encryption methods. Credentials are accessible only to authorized systems and personnel on a need-to-know basis. Customer may revoke the Company's access to telematics data at any time by: (a) disconnecting the telematics provider through the Service's settings; (b) revoking the API credentials directly through the telematics provider's platform; or (c) contacting the Company to request disconnection. Upon revocation, the Company will cease accessing new data from the disconnected provider. Previously collected data will be retained in accordance with the Company's data retention policies as described in the Privacy Policy.

5. Third-Party Services

The telematics providers (including Geotab, Samsara, Motive, ISAAC, and others) are independent third-party services not owned, controlled, or operated by the Company. The Company is not responsible for the availability, accuracy, completeness, or security of data provided by third-party telematics platforms. Customer's relationship with its telematics provider is governed by the applicable third-party terms and conditions. The Company does not modify, tamper with, or write data back to the Customer's telematics platform unless explicitly authorized by the Customer and supported by the telematics provider's API.

6. Data Use and Protection

Telematics data accessed through this Authorization is used solely for the purposes described in Section 1 and in accordance with the Company's Privacy Policy and Terms of Service. The Company implements commercially reasonable security measures to protect telematics data, including encryption in transit and at rest, access controls, and regular security assessments. The Company does not sell telematics data to third parties. The Company may use de-identified and aggregated telematics data for benchmarking, research, and product improvement purposes, provided that such data cannot reasonably be used to identify the Customer or any individual.

7. Governing Law

This Authorization shall be governed by and construed in accordance with the laws of the Province of Alberta and the federal laws of Canada applicable therein, without regard to conflict of law principles. Any disputes arising under or in connection with this Authorization shall be subject to the exclusive jurisdiction of the courts located in Calgary, Alberta, Canada.