Privacy Policy

Updated: April 28, 2026

1 — INTRODUCTION AND SCOPE OF THIS POLICY

SWIFTX Inc., together with its subsidiaries and affiliates (“SWIFTX,” “we,” “our,” or “us”), is committed to safeguarding the privacy of individuals who interact with our products and services. We understand the importance of transparency regarding how we collect, use, disclose, and protect information, and we appreciate your trust in our practices.

This Privacy Policy explains the categories of information we collect, the purposes for which we process such information, how we share and safeguard it, and the rights available to you under applicable U.S. privacy laws. This Policy applies to all users who access or interact with SWIFTX Services within the United States.

“SWIFTX Services” include, collectively:

  • Delivery and logistics services provided by SWIFTX;
  • Our website, mobile sites, and the domain located at https://www.swiftx-express.com (the “Website”);
  • Any related technologies, platforms, tools, features, digital interfaces, or other offerings operated by or on behalf of SWIFTX.

This Privacy Policy applies solely to the SWIFTX Website. The Website does not offer visitor registration or account creation functionality. Its sole interactive function is to allow visitors to query shipment tracking information by entering a tracking number.

This Policy also governs our collection of information outside of our online Services, including information submitted through customer service interactions,application forms. All individuals whose information we process are referred to collectively as “users” or “visitors”.

IMPORTANT NOTICE — EUROPEAN USERS: The Website does not accept visitors located in the European Union, European Economic Area, or United Kingdom. If you are located in any of these jurisdictions, you must immediately cease using the Website. SWIFTX does not provide services to European users and does not have a legal basis to process personal data under the General Data Protection Regulation (GDPR) or the UK GDPR. Any data inadvertently collected from European users will be deleted promptly upon discovery.

2 — WHEN DO WE COLLECT INFORMATION?

The Website is a limited-functionality, tracking-query-only platform. SWIFTX does not collect personal information directly from Website visitors. The limited circumstances in which information may be collected through the Website are described the following:

2.1 The Website does not require or request any personal information from visitors.

2.2 Information Collected Automatically

When you access or use our Websites or Apps, we may automatically collect certain information using standard web technologies such as cookies and analytics tools. This includes usage data and device/network information as described in Section 3.

3 — WHAT INFORMATION DO WE COLLECT?

Because the Website’s sole function is to allow visitors to query shipment tracking information by entering a tracking number, SWIFTX does not collect personal information (such as names, phone numbers, email addresses, physical addresses, identity documents, or biometric data) from Website visitors. The limited categories of information that may be collected automatically through standard web technologies are described below.

3.1 Usage Information

This includes data about how you engage with our Websites and Services, such as access times, pages features viewed, browser type and system activity.

3.2 Device and Network Information

This includes device model, IP address, operating system, browsing type, cookies, and similar technologies used to support analytics, security, and service performance.

4 — WHY DO WE COLLECT AND PROCESS INFORMATION?

The Website does not collect personal information from visitors. The limited technical information automatically collected through the Website (such as IP addresses and browser data) is processed only as described below and only to the extent permitted by applicable U.S. law. The legal bases and purposes set out in this Section apply to the Website only to the limited extent that any information is processed through it.

4.1 Legal Bases for Processing

To the extent any information is processed through the Website, the applicable legal basis is for one or more of the following reasons:

  • Compliance with legal obligations: Including safety requirements, regulatory filings, law enforcement requests, trade compliance, and recordkeeping obligations.
  • Legitimate business interests: For the Website, this is limited to: maintaining and improving Website functionality, preventing unauthorized or abusive access, and supporting internal Website security operations. These interests are weighed against and do not override the minimal privacy impact on visitors, given that no personal information is actively collected.

4.2 Business Purposes for Processing

We process information for the following legitimate business purposes:

(a) Service Delivery and Contract Fulfillment

For the Website, the only relevant function is enabling the shipment tracking query feature, which does not involve the collection or processing of user personal information.

(b) Service Improvement, Research, and Development

We may analyze aggregate, non-identifiable Website usage patterns(such as page load times, error rates, and traffic volumes) to improve Website service performance and reliability. No personal information is used for this purpose in connection with the Website.

(c) Internal Business Operations

This includes internal audits, data governance, fraud prevention, cybersecurity operations, financial reporting, mergers and acquisitions, business continuity planning, and other internal administrative purposes.

(d) Safety, Security, and Fraud Prevention

For the Website, this is limited to maintain a secure Website environment, including monitoring unauthorized access attempts, preventing unauthorized queries, and detecting malicious activities.

(e) Compliance with Legal and Regulatory Requirements

For the Website, compliance obligations are limited to applicable U.S. privacy laws (including CCPA/CPRA and applicable state privacy statutes) governing the minimal technical data collected automatically.

(g) Protection of Individuals and Public Safety

We may process information where necessary to prevent physical harm, protect life, or address emergencies.

5 — HOW DO WE USE COOKIES AND THIRD-PARTY TECHNOLOGIES?

The Website uses a limited set of standard web technologies (such as cookies and other tracking, and analytics technologies) solely to support the functionality, performance, and security of the Website.

The technologies we may use include:

  • Cookies — small data files stored on your browser to enable core functionality, preferences, and security.The Website does not use cookies for behavioral advertising, cross-site tracking, or personalization purposes.
  • Tracking pixels and tags — used solely to measure aggregate Website page interactions and traffic patterns.
  • Analytics tools — deployed solely to better understand how visitors aggregate patterns interact with the Website (e.g., pages visited, session duration, referral source). Analytics data is used only for Website performance improvement and is not used for individual profiling or behavioral advertising.

Information collected through these technologies may include browser type, pages viewed, session duration, and IP address.

You may manage or disable cookie settings through your browser. However, disabling certain cookies may impair functionality or limit access to certain features of the SWIFTX Services, such as the shipment tracking query tool.

For more details concerning our use of cookies, please refer to our Cookie Notice, which forms part of this Privacy Policy.

6 — WHO DO WE SHARE INFORMATION WITH?

Because the Website does not collect personal information from visitors, there is no personal information to sell, share, or disclose for cross-context behavioral advertising within the meaning of the California Consumer Privacy Act (CCPA/CPRA).

We may disclose limited technical information (such as IP addresses and browser data automatically collected through the Website) to third parties solely as necessary to operate the Website.

6.1 Categories of Third Parties to Whom We Disclose Information

In connection with the operation of the Website, SWIFTX may disclose limited technical information(such as IP addresses and aggregated usage data) to the following categories of third parties. No personal information about Website visitors is disclosed to these parties.

  • Operating system and platform providers (e.g., Android, iOS)
  • Mapping service providers (e.g., Apple Map, Google Maps, HERE Maps)
  • Analytics platforms (e.g., Google Analytics, Mixpanel)
  • Third-party vendors supporting employment-related functions (for SWIFTX employees)

6.2 Purposes for Disclosures

These disclosures support functions such as:

  • Enabling navigation, routing, and location-based features;
  • Providing Website performance analytics and diagnostics;
  • Enhancing Website interface, system stability, and visitor experience;
  • Supporting compliance, fraud detection, and cybersecurity operations.

6.3 Legal, Safety, and Corporate Transaction Disclosures

We may disclose information(including any limited technical data collected through the Website) when necessary to:

  • Comply with applicable laws, regulations, legal processes, or government requests;
  • Protect the rights, property, or safety of SWIFTX, Website visitors, or the public;
  • Investigate suspected fraud, security incidents, or policy violations;
  • Support corporate transactions such as mergers, acquisitions, or reorganization, in accordance with confidentiality obligations.

7 — HOW DO WE PROTECT INFORMATION?

SWIFTX implements administrative, technical, and physical safeguards designed to protect information from unauthorized access, disclosure, alteration, loss, and destruction. These safeguards are aligned with industry standards and applicable data protection requirements.Because the Website does not collect personal information from visitors, the primary focus of these measures is Website infrastructure security.

Our protective measures include:

  • Encryption, secure transmission protocols, and access controls;
  • Network and system monitoring, firewalls, and intrusion detection tools;
  • Authentication measures and role-based access to control to Website systems and any data processed through them;
  • Security awareness and training for personnel with access to control to Website systems and any data processed through them;
  • Vendor oversight to ensure third parties maintain appropriate security measures.

While we strive to protect your information, no system or method of electronic transmission is completely secure. You share responsibility for maintaining the confidentiality of account credentials and should avoid reusing passwords across multiple platforms.

If you have concerns about the security of the Website or believe any information has been accessed without unauthorized, you should contact us immediately.

8 — HOW DO WE RETAIN INFORMATION?

Because the Website does not collect personal information from visitors, retention obligations in connection with the Website are limited to the minimal technical data (such as server logs and IP addresses) automatically generated through Website operation. Such technical data is retained only for as long as necessary to:

  • Fulfill the purposes for which the information was collected;
  • Comply with applicable legal,regulatory requirements;
  • Resolve disputes and enforce agreements.

To determine appropriate retention periods, we consider:

  • The nature and sensitivity of the information;
  • The volume and categories of data involved;
  • The potential risks of unauthorized access or disclosure;
  • The purposes for which the data is processed;
  • Legal, regulatory, tax, accounting, and reporting requirements;
  • Industry standards and operational needs.

When technical data collected through the Website is no longer required, we will securely delete in accordance with applicable laws.

9 — WHERE DO WE STORE OR PROCESSINFORMATION?

SWIFTX Services are operated within the United States and are intended for U.S.-based users. Accordingly,information collected by SWIFTX is generally stored and processed within the United States.

We do not intentionally collectinformation from individuals physically located in the European Union(EU), European Economic Area (EEA), the United Kingdom (UK) or other regions where local data protection laws impose cross-border transfer restrictions. We have not implemented, and do not rely on, any legal mechanism under the GDPR or UK GDPR (including Standard Contractual Clauses, adequacy decisions, or other transfer mechanisms) to transfer personal data from the EU, EEA, or UK. If you are located in these jurisdictions, you must not use the Website. Should we become aware that personal data from such individuals has been collected, we will take reasonable steps to delete it.

If you access the SWIFTX Services from outside the United States (other than from the EU/EEA/UK, from which access is prohibited)—including from Asia or other regions with privacy laws differing from U.S. standards—your continued use of the Services constitutes your acknowledgment and consent to the processing of information in the United States under U.S. laws.

10 — WHAT PRIVACY RIGHTS CAN MAY APPLY TO YOU?

Because the Website does not collect personal information from visitors (other than limited technical data such as IP addresses and browser information collected automatically), most of the rights described in this Section have limited or no practical applicability to Website visitors. Nonetheless, depending on your state of residence and the privacy laws applicable, you may have certain rights regarding the information we process. These rights are not absolute and may be subject to limitations or exceptions under applicable laws. We may require verification of your identity or authority before responding to your request.

10.1 Right to Access

You may request confirmation of whether we hold any information about you and obtain a copy of the information we hold. Because Website does not collect personal information from visitors (other than limited automatically collected technical data), the practical scope of this right for Website visitors is minimal.We will provide this information in a portable format where required by law. We will provide available information in a portable format where required by law.

10.2 Right to Correct (Rectification)

You may request that we correct or update any information about you that is inaccurate or incomplete. Because the Website does not collect personal information from visitors, this right has limited practical applicability in connection with Website use.We will take reasonable steps to verify the accuracy of the data before making corrections.

10.3 Right to Delete

You may request the deletion of any information we maintain about you when permitted by law. Because the Website does not collect personal information from visitors, this right is primarily relevant to any residual technical data (such as server logs) that may be associated with your visit. We may retain information where retention is required for legal, security or regulatory purposes.

10.4 Right to Restrict Processing

You may request that we temporarily restrict or limit how we use any information about you in certain circumstances.This right has limited practical applicability for Website visitors given the minimal nature of information collected through the Website.

10.5 Right to Data Portability

Where required by law, you may request that we provide any information about you .Because Website visitors do not provide personal information to the Website, this right has limited practical applicability in connection with Website use.

10.6 Right to Object

You may object to the processing of any information about you based on our legitimate interests. We will cease such processing unless we demonstrate compelling legitimate grounds for the processing is necessary for legal claims.

10.7 Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects. You may request manual review of such decisions where applicable.

10.8 Right to Withdraw Consent

The Website does not rely on consent as a basis for processing, so this right is not applicable to Website visitors.

11 — ADDITIONAL INFORMATION REGARDING OUR PRIVACY PRACTICES UNDER LOCATION-SPECIFIC PRIVACY LAWS

11.1 California Consumers (CCPA/CPRA) – Notice at Collection

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). This section supplements the rest of our Privacy Policy and applies solely to California residents.

A. Categories of Information Collected in the Past 12 Months

The Website does not collect personal information from visitors. Through standard web technologies (such as cookies and server logs), the following limited categories of technical information may be collected automatically:

  • Online Identifiers (e.g., IP address)— collected automatically through standard web server and analytics technologies only
  • Internet or electronic network activity information
  • Transactional and delivery information

B. Categories of Information Disclosed

In the past twelve (12) months, we may have disclosed the above categories to the third-party service providers listed in Section 6, exclusively for business purposes permitted by the CCPA/CPRA.

C. No Selling or Sharing for Cross-Context Behavioral Advertising

SWIFTX does not “sell” or “share” information—not applicable because the Website does not collect personal information from visitors—within the meaning of the CCPA/CPRA.

D. Your California Privacy Rights

California residents may exercise the following rights:

  • Right to Access —not applicable because the Website does not collect personal information from visitors.
  • Right to Delete — not applicable because the Website does not collect personal information from visitors.
  • Right to Correct — request correction of inaccurate personal information.
  • Right to Know — request information regarding data sources, purposes, and third-party disclosures.
  • Right to Opt Out of Sale/Sharing — not applicable because SWIFTX does not sell or share information.
  • Right to Limit Use of Sensitive Personal Information — not applicable to Website Visitors.
  • Right to Non-Discrimination — we will not deny services or provide a different level/quality of service because you exercised your CCPA rights.

E. Verifiable Consumer Requests

Before fulfilling a request, SWIFTX will verify your identity using reasonable methods, which may include authentication through your account or matching identifiers. Authorized agents may submit requests subject to proof of authority.

F. Shine the Light Law (California Civ. Code §1798.83)

California residents may request information about disclosures of personal information to third parties for their direct marketing purposes. SWIFTX does not disclose information for third-party direct marketing purposes, and the Website does not engage in direct marketing to visitors.

12 — ADDITIONAL STATE PRIVACY RIGHTS

(Applies to Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia, and any other U.S. jurisdictions with similar privacy laws.)

Residents of certain U.S. states may have additional rights regarding their personal data, depending on the laws applicable in their state of residence. Because the Website does not collect personal information from Website visitors, these rights have limited practical applicability in connection with Website use. To the extent any information is held, the following rights may apply:

12.1 Right to Access and Data Portability

You may request access to any data we maintain about you and obtain a portable copy, to the extent required by state law.

12.2 Right to Correct

You may request correction of inaccurate any data about you that we maintain.

12.3 Right to Delete

You may request deletion of any data about you we have collected, subject to exclusions for operational, security, legal, or recordkeeping purposes.

12.4 Right to Opt Out

Depending on the state, you may request to opt out of:

  • Targeted advertising
  • The sale of personal data (SWIFTX does none)
  • Profiling that produces legal or similarly significant effects

12.5 Universal Opt-Out Mechanisms (UOOMs)

For states that recognize browser-based opt-out signals (e.g., Global Privacy Control), we will treat a valid signal as a request to opt out of targeted advertising where required by law.

12.6 Appeals Process

If SWIFTX denies your request, you may appeal the decision by contacting us at: [email protected]. We will respond within the timeframes required by applicable state laws.

13 — CHILDREN’S PRIVACY

SWIFTX Services are not directed to, and should not be used by, individuals under the age of 18. We do not knowingly collect information from visitors under 18.

If you believe a visitor under 18 has accessed the Website, please contact us immediately. Upon verification, we will take reasonable steps to ensure no information relating to that minor is retained.

14 — LINKS TO OTHER WEBSITES

The SWIFTX Services may contain links to third-party websites, applications, or services that are not owned or controlled by SWIFTX. We are not responsible for the privacy practices, security practices, or content of such third-party platforms.

We encourage you to review the privacy policies of any third-party site you visit. Your interactions with those platforms are governed exclusively by their respective policies.

15 — ADDITIONAL INFORMATION FOR OTHER JURISDICTIONS

This Privacy Policy applies solely to the SWIFTX Website, which is directed exclusively to Website visitors located within the United States. In certain jurisdictions outside the United States, local privacy laws may impose requirements or restrictions that differ from U.S. laws. SWIFTX does not actively offer or target its Services to users located outside the United States, and we do not intentionally collect personal information from individuals in jurisdictions where such collection would require additional legal bases or cross-border transfer mechanisms in connection with Website visits.

Individuals located in the EU, EEA, or UK are not permitted to use the Website and must immediately cease access. SWIFTX does not recognize any legal basis under the GDPR or UK GDPR for processing personal data of EU/EEA/UK residents. Continued use of the Website by EU/EEA/UK residents is unauthorized. Any technical data (such as IP addresses) inadvertently collected from such individuals will be deleted upon discovery and will not be retained or processed beyond what is technically necessary to deliver the webpage.

16 — WHAT IF YOU HAVE QUESTIONS OR COMPLAINTS?

If you have questions, concerns, or complaints regarding this Privacy Policy or the Website’s data practices, or if you wish to exercise your privacy rights, you may contact us using the information provided below. We will review your inquiry and respond within the timeframes required by applicable law.

You may also have the right to lodge a complaint with your state’s attorney general or other relevant supervisory authority if you believe we have violated applicable privacy laws.

17 — HOW DO WE UPDATE THIS PRIVACY POLICY?

We may revise or update this Privacy Policy from time to time to reflect changes in our data practices, Services, technologies, or legal obligations. When we make material changes, we will update the “Last Updated” date at the top of this Policy.

If a revision materially affects your rights to our data practices on the Website, we will make reasonable efforts to notify you through prominent notice on our Website, or through another communication method permitted by law.

Your continued use of the SWIFTX Services following the posting or communication of an updated Privacy Policy constitutes your acknowledgment and acceptance of the revised terms.

18 — No Employment Relationship

Identity verification, account eligibility determinations, and platform access controls are implemented solely for purposes of platform security, fraud prevention, and compliance. These measures do not constitute supervision, direction, or control over how delivery services are performed.

Nothing in this Privacy Policy or in SWIFTX’s identity verification practices shall be construed as creating an employment, agency, or labor relationship between SWIFTX and any driver or delivery service provider.

19 — CONTACT US

If you have questions about this Privacy Policy, would like to exercise your privacy rights, or wish to contact our Data Protection Officer, you may reach us at:

Email: [email protected]

Mailing Address:
SWIFTX Inc.
14337 Limonite Ave, Building 4, Eastvale, CA 92880