Carrier Credential Deletion Addendum

Supplements the LanePilot Privacy Policy currently in force (Version 4.7) and Addenda 1 and 2. It does not replace them. Where this Addendum is more specific about carrier credential deletion timing, the more specific terms govern.

This Addendum amends the "Carrier credentials, active secret" row of the Privacy Policy's retention table.

We delete an active carrier credential (the encrypted password, token, or account number you connected) immediately when you disconnect that carrier, whether or not you close your account.

When you close your account, we do not delete your connected carrier credentials at the moment of closure. We hold them, unused and inaccessible through the Service, for the same 29-day recovery window described elsewhere in this Policy. If you restore your account within that window, your carrier connections are restored with it. If the window ends without a restoration, we destroy the credentials at that point, along with the rest of your account's data.

A carrier credential is never retained under a legal hold, in either case above. This is unchanged.

The retention table row "Carrier credentials, active secret" therefore reads: "Deleted immediately on disconnection. On account closure, destroyed with the rest of the account when the 29-day recovery window ends. Never retained beyond that, never placed under legal hold."

Privacy rights and deletion requests: [email protected]. LanePilot Technology, LLC, 8370 Wattsburg Road, Erie, PA 16509.