Privacy Policy

SaaS-first v2.3 (assistant-tool surface / MCP section). Repo-canonical as of 2026-09-04. The v2.1 republish is complete; the live preshiftiq.com page carried v2.1 as of 2026-08-11 (verified against the live page 2026-09-01). The repo file is canonical; the site copy follows.

Effective Date: July 5, 2026

Last Updated: September 4, 2026

PreShiftIQ™ ("PreShiftIQ," "we," "us," or "our") respects your privacy. This Privacy Policy describes the personal information we collect through preshiftiq.com and app.preshiftiq.com (together, the "Site" and the "Platform"), and through our advisory engagements, how we use that information, with whom we share it, and the rights available to you. If you do not agree with this Privacy Policy, please do not use the Site or Platform or submit information to us.

1. Who We Are

PreShiftIQ™ is an independent buyer-side intelligence platform for supply chain technology. Buyers across the supply chain ecosystem (shippers, brokers, carriers, and 3PLs) use the Platform to complete structured assessments and receive matches against interview-validated vendor scorecards. Technology vendors participate in scorecard interviews and receive matched buyer leads. We also provide advisory services, including vendor evaluations and buyer assessments, as engagements alongside the Platform.

Our matching is fiduciary to the buyer: vendors pay for outcomes, never for placement, ranking, or influence over scores.

Contact: info@preshiftiq.com. Web: preshiftiq.com.

2. Information We Collect

2.1 Platform Account Information. When you create an account, we collect your name, business email, company, role, and authentication credentials, which are managed by our authentication provider. Vendors accessing leads by secure email link provide their email address for verification.

2.2 Buyer Assessment Information. Buyers completing a Platform assessment provide business information about their organization and requirements: company profile, operational details, technology stack, budget ranges, timelines, priorities, and stated non-negotiable requirements. This information exists to produce your match and, as described in Section 5, to be shared with a vendor who accepts your match.

2.3 Vendor Scorecard Information. Vendors participating in an evaluation provide company, product, and capability information through structured questionnaires and validation interviews. Scorecard information exists to be measured against buyer requirements and, as described in Section 5, to be shared in scoped form with a matched buyer.

2.4 Transaction Information. When a vendor accepts a lead, we collect billing details and payment records through our payment processor. We do not store full payment card numbers on our systems.

2.5 Advisory Engagement Information. Information you provide during advisory engagements, including organizational details, contractual context, and responses to assessment workbooks.

2.6 Contact, Subscription, and Correspondence Information. Contact form submissions, email correspondence, event registrations, and resource downloads, including the information needed to respond or fulfill the request.

2.7 Information Collected Automatically. Technical and device data (IP address, browser, operating system, device type), usage data (pages viewed, session duration, referring URLs, approximate location derived from IP address), cookies as described in our Cookie Policy, and server, security, and error logs maintained to operate, secure, and improve the Site and Platform.

2.8 Information From Third Parties. In vendor evaluations we may collect information about vendors and their offerings from public sources, customer references, regulatory registries (for example, the FMCSA device registry for ELD verification), and the vendors themselves. We may receive contact information from professional networks or referrers.

2.9 Pre-Launch Interest Registrations. Some pages on preshiftiq.com describe product verticals that have not yet launched and offer a form to register your interest. If you submit that form, we collect your name, work email, and the vertical you registered for, and, if you choose to provide them, your company, role, organization size, current system, and evaluation timeframe, together with the page you submitted from and the time of submission. No account is created, and this information is collected before and outside any Platform account. We use it to record pre-launch interest in that vertical, to understand demand for it, and to contact you about that vertical when it launches, on the legitimate-interest basis described in Section 4 (communicating with prospective customers). We retain interest registrations until the vertical launches and a reasonable follow-up period ends, or until you ask us to remove yours, whichever comes first. To request removal, contact info@preshiftiq.com from the registered email address; consistent with how removal works across our systems, the record is deactivated and excluded from all use rather than physically destroyed immediately (a soft delete), and registering again afterward creates a new registration.

3. How We Use Your Information

We use the information we collect to: operate the Platform, including computing matches between buyer assessments and vendor scorecards; disclose match information between matched parties as described in Section 5; process lead payments; deliver advisory services and related deliverables; respond to inquiries and communicate with you, including service communications and, where permitted, marketing you can opt out of at any time; maintain, secure, and improve the Site, the Platform, and our internal systems, including error monitoring; create aggregated and de-identified data as described in Section 5A; comply with legal, regulatory, accounting, and contractual obligations; and protect our rights, our customers' rights, and the integrity of our services, including maintaining audit records of data disclosures and preventing fraud or misuse.

4. Legal Bases for Processing

Where the EU General Data Protection Regulation, the UK GDPR, or similar law applies, we process personal information on these bases: performance of a contract (delivering the Platform and services you or your organization engaged); legitimate interests (operating and securing the Platform, communicating with prospective customers, developing our services in ways that do not override your rights); consent (non-essential cookies, marketing, and other activities where consent is required); and legal obligation.

5. Platform Data Sharing Between Buyers and Vendors

The Platform's purpose is to connect matched buyers and vendors, and that requires a defined, limited exchange of information between them. This section describes exactly what is shared and when.

Before a vendor accepts a match, buyers appear to vendors anonymously: vendors see the match profile (persona, operational scale, requirements summary) without the buyer's identity or contact details.

When a vendor accepts a match and the lead fee is settled, both sides receive the information relevant to that specific match and nothing more. The buyer receives the vendor's identity, contact details, and scorecard as it was measured for their unique use case: their persona, their evaluated criteria, their stated priorities. The vendor receives the buyer's identity, contact details, and completed questionnaire for that match, including stated non-negotiable requirements. Information outside the match is never shared: no other personas, no other buyers, no other vendors, no scoring mechanics. What was measured for you is what is shared with you.

Every disclosure is recorded in an audit log. Vendors never pay for placement, ranking, or score influence, and disclosure occurs only through the acceptance mechanism described here, never by sale of personal information.

5A. Aggregated and De-Identified Data

We create aggregated and de-identified data from Platform activity, including assessment responses, scorecard data, and match outcomes. This data is stripped of identifying information and combined across participants so that it does not identify, and cannot reasonably be used to identify, any individual, buyer organization, or vendor's confidential responses. We use this data to operate and improve the matching engine, to produce market intelligence, and we may license or sell it to vendors, partners, and other third parties, including as benchmarking products, vendor intelligence subscriptions, and data syndication services. We commit to maintaining this data in de-identified form and do not attempt to re-identify it. Aggregated and de-identified data is not personal information, and nothing in this section permits the sale of personal information, which we do not sell.

5B. Assistant Tool Access (MCP Server)

PreShiftIQ operates a Model Context Protocol (MCP) server at mcp.preshiftiq.com that lets AI assistants (such as Claude or ChatGPT) query the Platform's public information on a user's behalf. The public tools return only information already published on preshiftiq.com: the platform description, the covered technology categories with live vendor counts, the per-category vendor roster, how matching works, how we are paid, and a link to start an assessment. Public tool results contain no personal information.

For each tool call we record a telemetry event containing the tool name, a timestamp, the calling assistant's product family (such as claude or chatgpt), a one-way hash of the calling software's user-agent string, a one-way hash of the call's arguments, the result count, status, and latency. We do not record the raw arguments of public tool calls, and public calls are not associated with any account. These records are retained as append-only operational facts and are used for reliability, abuse prevention, and aggregate usage measurement.

Your conversation with an AI assistant belongs to that assistant's provider, not to us. What an assistant sends to our server, and how long the provider retains your conversation, is governed by the provider's own privacy policy. If you follow an assessment link produced by a tool call, the sign-up carries an arrival marker (such as mcp-claude) through the first-party attribution path described in our Cookie Policy; no additional identifier is created by the tool surface.

6. How We Share Information With Others

We do not sell personal information. We do license aggregated and de-identified data as described in Section 5A. Beyond the matched-party sharing in Section 5, we share information only with parties who help us run our business or as required by law.

Service providers. We use the following categories of providers, each permitted to use your information only to provide services to us: website hosting (Squarespace), application hosting and infrastructure (Vercel, Railway), authentication (Clerk), payment processing (Stripe), transactional email (SendGrid), error monitoring (Sentry), source control and development infrastructure (GitHub), AI-assisted analysis tooling (Anthropic), CRM and scheduling (HubSpot, Calendly), advertising and website analytics (LinkedIn), and email, documents, and storage (Google Workspace). We maintain data processing agreements with our sub-processors.

Professional advisors. Auditors, accountants, attorneys, and insurers, where appropriate.

Advisory engagement participants. During an advisory engagement, information may be shared between buyer and vendor parties only as authorized by the engagement's scope and applicable confidentiality terms.

Legal and safety. Authorities, courts, or other parties when we believe disclosure is required by law, necessary to enforce our rights, or necessary to protect any person's safety.

Business transfers. In a merger, acquisition, financing, or asset sale, information may be transferred subject to standard confidentiality protections.

7. International Transfers

PreShiftIQ™ is based in the United States. Information is transferred to, stored, and processed in the United States and in our service providers' locations. Where required, we rely on appropriate safeguards, such as Standard Contractual Clauses, for cross-border transfers.

8. Data Retention

We retain personal information as long as needed for the purposes collected, including providing the Platform and services, maintaining accurate business and audit records, complying with legal obligations, resolving disputes, and enforcing agreements. Match records, disclosure audit logs, and payment records are retained consistent with financial and professional recordkeeping standards. Engagement records and audit work product are retained for the engagement plus a reasonable archival period.

9. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, role-based access controls on the Platform, and audit logging of data disclosures. No method of transmission or storage is fully secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify affected parties and authorities as required by applicable law.

10. Your Rights and Additional Information

10.1 Your Rights

Depending on where you are located, you may have rights with respect to your personal information, including:

Access: the right to know what personal information we hold about you.

Correction: the right to request that inaccurate or incomplete information be updated.

Deletion: the right to request deletion of your personal information, subject to legal and contractual exceptions.

Portability: the right to receive a copy of your information in a portable format.

Objection or restriction: the right to object to or restrict certain processing.

Withdraw consent: where processing is based on consent, the right to withdraw consent at any time.

Non-discrimination: the right not to be discriminated against for exercising these rights.

To exercise any of these rights, contact us at info@preshiftiq.com. We may need to verify your identity before fulfilling certain requests. We will respond within the timeframes required by applicable law.

10.2 California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (as amended by the CPRA), including the right to know, delete, correct, and limit certain uses of personal information, and the right not to be discriminated against for exercising these rights. PreShiftIQ™ does not sell personal information and does not share personal information for cross-context behavioral advertising.

10.3 Children's Privacy

The Site and our services are intended for business users and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

10.4 Third-Party Links

The Site may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to read the privacy policies of any third party before sharing information.

10.5 Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top indicates when it was most recently revised. Material changes will be communicated through the Site or by other appropriate means. Continued use of the Site after changes take effect constitutes acceptance of the updated policy.

10.6 Contact

Questions, requests, or complaints about this Privacy Policy or our handling of personal information can be directed to:

PreShiftIQ™

Email: info@preshiftiq.com

Web: preshiftiq.com