Privacy Policy Effective Date: May 1, 2026
 Last Updated: May 1, 2026 GenXpress (“GenXpress,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information of visitors to our website, users of our applications and platform, and our customers and their authorized representatives. This Privacy Policy explains how we collect, use, disclose, retain, transfer, and protect personal information when you use our website, platform, applications, and related services collectively, the “Services.” GenXpress is a Canadian business and this Privacy Policy is intended to reflect our obligations under applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act, or PIPEDA, where applicable. By using our Services, you acknowledge that you have read this Privacy Policy. 1. Accountability GenXpress is responsible for personal information under our control, including personal information transferred to service providers for processing. We have designated a privacy contact responsible for overseeing our privacy practices and responding to privacy-related questions, requests, and complaints. Privacy-related inquiries may be directed to: GenXpress
 3535 Laird Rd, Unit 13
 Mississauga, ON L5L 5Y7
 Email: info@genxpress.ca
 Phone: 877-477-5525 2. What information we collect We may collect the following types of information. a. Information you provide directly This may include: • your name; • company name; • email address; • telephone number; • billing address; • account login credentials; • shipping, order, tracking, courier, and claims-related information; • payment or billing-related information; • communications you send to us; • documents or supporting materials you upload through the Services, including credit, account, claims, or shipping-related documentation; and • other information you choose to provide. b. Information collected automatically When you visit or use our Services, we may automatically collect certain technical information, such as: • IP address; • browser type; • device type; • operating system; • pages viewed; • date and time of access; • referring website; • app or site usage information; • cookie or similar tracking data; and • security, diagnostic, and performance information. c. Information from third parties We may receive information from third parties such as: • courier and shipping partners; • payment processors; • analytics providers; • cloud hosting and technology vendors; • fraud prevention or security providers; • your employer or organization, where your access is provided through a business account; and • other parties involved in providing, supporting, or administering the Services. 3. Why we collect and use personal information We collect, use, and disclose personal information only for purposes that are reasonable in the circumstances, including to: • provide, operate, maintain, and improve the Services; • create, verify, and manage user accounts; • process transactions, invoicing, payments, and billing; • administer customer accounts and credit terms; • facilitate shipping, tracking, reporting, claims, and logistics-related workflows; • communicate with users, customers, vendors, and service providers; • provide customer service and technical support; • send service-related notices, including account, security, billing, and payment reminders; • monitor, improve, troubleshoot, and secure the Services; • detect, investigate, and prevent fraud, misuse, unauthorized access, security incidents, or unlawful activity; • comply with legal, regulatory, contractual, accounting, tax, insurance, and record-keeping requirements; • enforce our Terms of Service and other agreements; and • carry out any other purpose that we identify at or before the time of collection, or as otherwise permitted or required by law. 4. Consent Where required by applicable law, we obtain consent for the collection, use, and disclosure of personal information. In some cases, your consent may be implied by your use of the Services or by your voluntary submission of information necessary for us to provide the Services you request. For example, if you provide shipment information, billing details, or claims documentation, we will use that information to provide the related service. In other cases, we may seek express consent, including where the information is sensitive or where required by law. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. If you withdraw consent, some Services or features may no longer be available to you. 5. Limiting collection, use, disclosure, and retention We limit the personal information we collect to what is reasonably necessary for the purposes described in this Privacy Policy or otherwise identified to you. We do not use or disclose personal information for purposes other than those for which it was collected, except with consent or as permitted or required by law. We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, to provide the Services, to resolve disputes, to enforce our agreements, and to comply with legal, accounting, tax, insurance, regulatory, and business record requirements. When personal information is no longer required, we will securely delete, anonymize, or destroy it, subject to applicable legal obligations. 6. Claims, shipping, and courier-related information Where our Services include claims submission, shipment issue reporting, courier tracking, logistics administration, or related workflows, GenXpress may collect and process information required to administer, transmit, review, or support a claim, shipment, delivery, account, or service request. GenXpress may share relevant information and supporting documentation with the applicable courier, carrier, logistics provider, service provider, customer account holder, insurer, payment processor, or other party involved in the shipment, claim, account, or service request, as reasonably necessary to provide the Services. Claim outcomes, eligibility, documentation requirements, reimbursement decisions, and timelines may depend in whole or in part on the applicable courier’s, carrier’s, insurer’s, or service provider’s policies, terms, or claims procedures. 7. How we share personal information We may disclose personal information: • to service providers that help us operate the Services, such as hosting, infrastructure, support, analytics, communications, security, payment, and software vendors; • to couriers, carriers, logistics providers, claims-related counterparties, insurers, or other parties where necessary to provide the Services; • within your organization, if your account is provided through a business or enterprise customer; • to payment processors, financial institutions, or collection-related service providers for billing, payment, credit, and account administration purposes; • where required or permitted by law, regulation, court order, subpoena, legal process, or lawful request; • in connection with an actual or proposed merger, acquisition, financing, reorganization, asset sale, or similar business transaction; • to protect our rights, safety, security, property, users, customers, service providers, or others; and • with your consent or as otherwise permitted or required by law. We do not sell personal information in the ordinary course of our business. 8. Service providers and cross-border processing We may store or process personal information in Canada, the United States, or other jurisdictions where we or our service providers operate. Because our online application may be hosted or supported by service providers located in the United States, personal information may be transferred to, stored in, or processed in the United States. When personal information is processed outside Canada, it may be subject to the laws of that jurisdiction and may be accessible to courts, law enforcement, national security authorities, regulators, or government agencies in accordance with applicable local law. GenXpress remains responsible for personal information under our control, including personal information transferred to service providers for processing. Where required, we use contractual, technical, organizational, and other reasonable measures designed to provide a comparable level of protection while personal information is processed by third-party service providers. 9. Cookies and similar technologies We may use cookies, pixels, local storage, and similar technologies to: • keep users signed in; • remember preferences; • analyze traffic and usage; • maintain security; • detect misuse or unauthorized access; • improve website and platform performance; and • understand how users interact with the Services. You can control cookies through your browser settings. However, disabling certain cookies may affect website or platform functionality. If we use non-essential analytics, advertising, or similar tracking technologies, we may provide additional notice and consent mechanisms where required by law. 10. Safeguards We use administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, modification, or destruction. These safeguards may include access controls, encryption or secure transmission technologies, authentication controls, confidentiality obligations, internal policies, staff training, monitoring, backups, and vendor security requirements. No method of transmission over the Internet or method of electronic storage is completely secure. Accordingly, while we take reasonable steps to protect personal information, we cannot guarantee absolute security. 11. Accuracy We take reasonable steps to ensure that personal information in our possession is accurate, complete, and up to date as necessary for the purposes for which it is used. You are responsible for providing accurate information and updating your account information where necessary. 12. Access, correction, and privacy requests Subject to applicable law, individuals may request access to personal information we hold about them and may request corrections to inaccurate or incomplete information. To make a privacy request, please contact us using the contact information above. We may need to verify your identity before responding. In some cases, we may be unable to provide access to certain information, including where disclosure would reveal personal information about another individual, confidential commercial information, information protected by legal privilege, or information that cannot be disclosed for legal, security, or fraud prevention reasons. Depending on your location, you may also have additional rights under applicable privacy laws. 13. Confidentiality incidents and breaches If we become aware of a breach or confidentiality incident involving personal information, we will take steps to contain, assess, and address the incident. Where required by applicable law, we will notify affected individuals, the Office of the Privacy Commissioner of Canada, and/or other appropriate regulatory authorities. We will also maintain records of breaches of security safeguards involving personal information where required by law. 14. Children’s privacy Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information directly from children under 13 without appropriate authorization. 15. Third-party websites and services Our Services may contain links to third-party websites, tools, platforms, or services. We are not responsible for the privacy practices of those third parties. We encourage users to review their privacy policies before providing personal information. 16. Changes to this Privacy Policy We may update this Privacy Policy from time to time to reflect changes in our Services, practices, technology, or legal requirements. When we make changes, we will post the revised version on our website or within the Services and update the “Last Updated” date above. Where required by law, we will provide additional notice or obtain consent. 17. Contact us If you have questions, concerns, requests, or complaints regarding this Privacy Policy or our handling of personal information, please contact: GenXpress
 3535 Laird Rd, Unit 13
 Mississauga, ON L5L 5Y7
 Email: info@genxpress.ca
 Phone: 877-477-5525