G2Mint – Privacy Notice

Effective: October 1, 2026

1. Introduction.

This Privacy Notice describes the privacy practices of G2Mint, Inc. (“we”, “us” or “our”) with respect to personal information we collect from and about users (“you”, “your” or “users”) of our websites (including www.g2mint.com) (the “Sites”), software applications, including cloud-based and mobile applications (the “Apps”), application programming interfaces (the “APIs”), or features, functionalities, and services provided through the Sites, Apps, and APIs (collectively, together with the Sites, Apps, and APIs, “G2Mint” or the “Technology”).

Please take the time to read this Privacy Notice and let us know if you have any questions or concerns. In addition to certain definitions provided within this Privacy Notice, please refer to Section 2 of our G2Mint Terms of Service [hyperlink] for definitions of the following terms: Shipper, Carrier, Broker, Authorized Client, Registered User, Subscriber, Visitor.

This Privacy Notice may be revised periodically, and any such revisions will be reflected by the effective date above. Please revisit this page to stay aware of any changes.

2. Who We Are.

G2Mint offers a suite of cloud-based software-powered solutions simplifying and enhancing transportation management for shippers, brokers, and carriers. Please note that we are located in the United States, and G2Mint and this Privacy Notice are intended for United States residents only. If you are a resident of another country, you should be aware that any information about you may be transferred to and processed in the United States, and that privacy and data protection laws in the United States may not be equivalent to laws in your country of residence.

3. Applicability of This Privacy Notice to Personal Information.

This Privacy Notice applies only to “personal information,” by which we mean information that identifies, relates to, describes, or is reasonably capable of being associated with or linked to a particular consumer or household. This Privacy Notice does not apply to anonymized, de-identified, or aggregate information.

4. Our Primary Role as a “Data Processor” or “Service Provider”.

Through G2Mint, we provide solutions to our business customers (“Business Customers”), including Shippers, Carriers, and Brokers whose use of G2Mint may involve personal information of their Authorized Clients. In connection with these solutions, we collect and process personal information pursuant to our contractual arrangement with our Business Customers. In these contexts, we are generally acting as each such Business Customer’s “data processor” or “service provider,” and, since the Business Customer makes decisions about what personal information is collected and how it is used and shared, you should consult such Business Customer’s privacy notice to understand how your personal information is collected and processed. Except in uncommon situations (e.g., in connection with legal compliance, litigation, security concerns, etc.), we will only use, disclose, and otherwise process such personal information in connection with the purposes for which the Business Customer has contracted us.

When you interact directly with us and not via a relationship with another Business Customer, such as when you provide us with your contact or billing information for our own business purposes, we are generally acting as the “data controller” because we are making the decisions about what personal information is collected and how we use that information to fulfill our business purposes, and you should consult this Privacy Notice to understand how your personal information is collected and processed.

5. Collection and Use of Personal Information.

This personal information we collect includes:

• Registration Information: Where applicable, in order to enable your creation and use of a personalized account, to validate users for purposes of platform administration and security, or to allow us to provide you with messages, notifications, and alerts relating to G2Mint and with customer support, we may collect your name, email address, username, password, and similar identifiers.
• Contact Information: If you request information about our products and services, in order to send you such information, we may collect information you provide to us in connection with such request, such as your name and email address, as well as information about your preferences regarding the information we send to you.
• Device/Browser Information: When you interact with G2Mint, we may learn information about your browser or device (e.g., name or type, version, settings, etc.), unique online identifiers (e.g., IP address), internet service provider, the name and version of your operating system, referring and exit pages, and the date, time, and duration of your visit to G2Mint or certain components of G2Mint.
• Usage Information: When you interact with G2Mint, we may collect details regarding your usage of G2Mint to present, personalize, improve, and maintain G2Mint and to gather aggregate information about our user base.
• Location Information: When you interact with G2Mint, we may learn your non-precise geographic location and may infer or derive this information from your IP address.
• Support Information: If you contact us in connection with a support request, we may collect your name, email address, and other contact information and keep records relating to your support request.
• Submitted Information: We collect any information or other content you choose to submit to us via G2Mint, which may include personal information.

We use such personal information for the purposes identified above, and more generally to: provide you with information, products or services that you request or that we are otherwise contractually obligated to provide; assist you in implementing G2Mint, including setting up accounts; provide you with support and training; comply with our contractual obligations to third parties (including Business Customers); comply with our legal and security obligations with respect to operating G2Mint; improve our products, services, and operations; personalize and continually improve user experience on G2Mint; market our products and services; perform statistical, demographic, and marketing analyses of users; and facilitate our other legitimate business purposes, including managing security with respect to G2Mint and complying with applicable laws.

6. How We Collect Personal Information.

We may collect the personal information described above from various sources, including directly from you, from third parties we partner with, and through cookies or other automated means.

• Directly from You: We collect personal information directly from you when you provide it to us, including when you create a G2Mint account; upload Submitted Information via G2Mint; or contact us with questions or comments.
• Automatically from Your Device or Browser: Certain information (e.g., Device/Browser Information and Usage Information) is automatically collected from your device or browser when you interact with G2Mint.
• From Third Parties: Third parties, including data analytics companies and companies that assist with the operation and functionality of G2Mint and our business more generally, may share information they have collected from or about you with us. The collection and use of your information by our web analytics provider, Google Analytics, is governed by Google’s privacy policy, which can be found here.
• Using Cookies and Similar Technologies: We use cookies (small files stored on your device or browser) and other similar technologies to automatically collect information when you interact with G2Mint, including, for example, Device/Browser Information, Usage Information, and Location Information. Using cookies and similar technologies, we may link information about your interactions with G2Mint over time, for example, which pages you visit, certain links or buttons you click, and how long you stay on each page.
• Publicly Available Sources: We may collect information from publicly available sources.

7. Sharing of Personal Information.

We may disclose or transfer personal information that we collect or you provide as described in this Privacy Notice: (i) to contractors, service providers, and other third parties we use to support our business, which may include data hosting, infrastructure and analytics services providers, who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them; (ii) to the Business Customers to whom we provide G2Mint, where those Business Customers contractually obligate us to provide us with such information; (iii) to fulfill any other purpose disclosed by us or otherwise readily apparent when you provide the information or consented to by you; (iv) with our affiliates or any successors to all or part of our business; (v) to comply with a subpoena, court order or applicable laws; and (vi) to protect the rights, property, or personal safety of users, us, or the public.

8. Retention of Personal Information.

We may retain your personal information for the duration of your use of or access to G2Mint. We may retain your personal information for longer as necessary and relevant to our legitimate operations in accordance with applicable laws.

9. Your Choices and Rights.

Certain states’ and countries’ data protection laws provide their residents with rights regarding businesses’ use of their personal information (sometimes referred to as “personal data”). Regardless of your state or country of residence, you can currently contact us at any time using the contact information listed in the last section of this Privacy Notice to request we do any of the following: (i) erase or delete all or some of your personal information; (ii) change, update, or correct your personal information; (iii) restrict how we use all or some of your personal information; (iv) access your personal information and, where applicable and feasible, request to receive that information in a commonly used electronic format (or ask for this information to be provided in that format to a third party); or (v) disclose what personal information we collect, use, disclose, or sell.

We will consider and respond to any such requests promptly and otherwise in accordance with applicable laws. Furthermore, if you choose to exercise your privacy rights or make the above requests, we will not treat you in a discriminatory way, nor will you receive a lesser degree of service from us.

In order to help ensure that your personal information is not disclosed to any person who does not have the right to receive it, and to help ensure your personal data is not mistakenly deleted or changed, we will attempt to verify that you are the subject of the personal information that your request concerns.

In many cases, our response may necessarily require the involvement of, and you may wish to contact directly, the relevant Business Customer that invited you to use G2Mint.

10. Children.

Our Platform is not directed to persons under the age of 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete the information. If you believe that your child under the age of 18 has submitted personal information to us, please contact us using the contact information listed in the last section of this Privacy Notice.

11. G2Mint Mail Intake (Browser Extension and Outlook Add-in).

This section supplements the Privacy Notice above and applies specifically to the G2Mint Mail Intake, which is offered in two forms:

• the G2Mint Mail Intake browser extension for Google Chrome and Microsoft Edge (the “Extension”), distributed through the browsers’ extension stores, which works in Gmail and in Outlook on the web; and
• the G2Mint Mail Intake add-in for Microsoft Outlook (the “Add-in”), which runs inside Outlook on the web and Outlook for Windows and Mac, is installed by the user or by their organization’s Microsoft 365 administrator, and is served from G2Mint’s own web domains.

The Extension and the Add-in are together referred to as “Mail Intake”. Where this section and the general Notice differ with respect to Mail Intake, this section controls. All defined terms used here have the meanings given in the Notice.

Mail Intake is a tool for freight brokerage professionals that helps turn a quote-request email, and the documents attached to it, into carrier rate quotes, orders, shipments and freight bills from within the user’s email client. It operates only inside the user’s email and only on the email the user has open.

This section comprehensively discloses how Mail Intake collects, uses and handles, stores and shares all user data it processes, and identifies every party with which user data is shared. In particular, when the user processes an email, Mail Intake collects the text of that email (its subject, sender, and body) and, when the user works with its attachments, the contents of those attachments, and transmits them directly to Google’s Gemini AI API in order to extract shipment details. This transmission, and every other data practice, is disclosed in full below.

11.1 Data Mail Intake Collects.

When a user activates Mail Intake on an open email, Mail Intake reads, from that email:

• the email subject
• the sender’s name and address
• the message body text, including the earlier messages of the conversation shown with it
• the conversation (thread) identifier
• the names of the email’s attachments, and the contents of the attachments (such as PDF files and images) that the user reads, files to a shipment, or uses to create a freight bill
• the user’s own email address, which is used only on the user’s device, to tell the user’s own messages apart from the customer’s and to confirm that a connected Microsoft account matches the mailbox open in Outlook

Outlook on the web (Extension). The Extension has access to Outlook on the web only after the user grants it that access in the browser. To read attachments in Outlook on the web, the Extension asks the user to sign in with their Microsoft account and to grant the permissions openid, profile, offline_access, User.Read and Mail.Read. Microsoft’s consent screen describes Mail.Read as permission to read the user’s mail. The Extension uses it only to list the attachments (their names, types and sizes) of the messages in the conversation the user has open and to download the attachments the user works with; it does not read message bodies through Microsoft, and it does not search, list or read other conversations or folders. Through User.Read, the Extension reads the signed-in account’s email addresses to match the account to the mailbox open in Outlook.

Outlook Add-in. The Add-in reads the selected email and its attachments through Microsoft’s Office add-in interface with Outlook’s “read item” permission, which is limited to the email the user has selected. The Add-in does not use Microsoft Graph and does not ask the user to sign in to Microsoft.

Mail Intake does not read the user’s inbox, other conversations, contacts, calendar, folders or labels, and it does not send, delete, or modify email. Replies are drafted for the user to review and send: the Extension places the draft in the email’s reply window, and the Add-in copies it to the user’s clipboard for the user to paste. Mail Intake also stores, locally on the user’s device, the configuration the user enters to connect to these services, such as service API keys and connection settings.

11.2 How Mail Intake Collects Data

Access is user-initiated. Mail Intake reads an email only while the user has Mail Intake open on it (the Extension’s side panel or the Add-in’s task pane) or uses one of its actions. In the Add-in, a newly selected email is not sent anywhere until the user chooses to read it.

The one exception is an optional setting, “Pre-read emails on open”, which is off by default. When a user turns it on, Mail Intake sends the subject, sender and body of an opened email that appears to be a freight quote request to Google’s Gemini AI API as soon as the user opens that email, so the extracted details are ready sooner. The user can turn the setting off at any time.

Mail Intake includes no analytics, advertising, or tracking technologies. The Extension runs no remote code: all of its code is included in the package installed from the browser’s extension store. The Add-in is a web page served from G2Mint’s domain inside Outlook; as Microsoft requires of every Outlook add-in, it loads Microsoft’s Office JavaScript library from Microsoft’s servers, which may load further Microsoft scripts.

11.3 How We Use and Handle the Data

Email content, attachments and the configuration above are used solely to provide the features the user invokes: extracting structured shipment details from the email and its documents, requesting carrier rate quotes for that shipment, creating an order or shipment at the user’s direction, adding documents the user selects to a G2Mint shipment, creating a freight bill, and drafting a reply the user reviews before sending. Microsoft account information is used only to sign in to Microsoft Graph and to confirm that the account matches the mailbox open in Outlook. A user reviews and corrects the extracted details before they are used. 

11.4 How We Share the Data, and All Parties It Is Shared With

To perform these features, Mail Intake transmits data directly from the user’s browser or Outlook to the following recipients. Each recipient processes the data it receives under its own privacy policy and terms.

• Google LLC (Gemini AI API / Generative Language API). Mail Intake transmits the text of the processed email (its subject, sender, and body) and, when the user reads its attachments, the contents of those attachments, directly to Google’s Gemini AI API, together with the user’s AI API key, for the purpose of extracting structured shipment fields. When the user has turned on “Pre-read emails on open”, this includes the text of opened emails that appear to be freight quote requests. This is the transmission to Google’s Gemini AI described above. Google’s handling of this data is governed by the Google Privacy Policy.
• Microsoft Corporation (Extension in Outlook on the web only). The Extension signs the user in through the Microsoft identity platform and requests attachment information and attachment files for the open conversation from Microsoft Graph. It sends Microsoft only what is needed for sign-in and for those requests. Microsoft’s handling of this data is governed by the Microsoft Privacy Statement.
• G2Mint Integration Service. The backend rating-and-ordering service configured for the user’s organization. Receives the extracted shipment details (such as origin and destination addresses, contact names and phone numbers, dates, weights, commodity and hazardous-materials information, and reference numbers), together with the user’s account credentials, for the purpose of retrieving carrier rate quotes and creating orders.
• Zippopotam.us. Receives U.S. ZIP codes, or city and state names, derived from the shipment, for the purpose of resolving postal-code and city information.
• G2Mint web application. The G2Mint web application, loaded within an embedded frame from G2Mint’s own web domains. Receives the shipment context needed to display and operate the quote, shipment and freight-bill screens and, when the user adds documents to a shipment or creates a freight bill, the attachment files the user selects. Details and documents the user saves there become part of the Business Customer’s G2Mint records and are handled as described in the rest of this Notice.
• Amazon Web Services. Hosts the Add-in’s web files on G2Mint’s domain. When Outlook loads the Add-in, it receives standard web request information, such as the device’s IP address; no email content is sent to it.

We do not sell this information, use it for advertising, or share it with any party other than those listed above and as otherwise described in the “Sharing of Personal Information” section of the Notice.

11.5 How We Store and Retain the Data

Extension. The user’s configuration, a local cache of postal-code lookups, and the email address of the connected Microsoft account are stored on the user’s device through the browser’s extension storage and remain until the user changes or clears them or uninstalls the Extension. The processed email (including attachment names and the user’s own address), the extracted details, and the Microsoft sign-in tokens are held only in the browser’s session storage and are cleared when the browser closes.

Add-in. The user’s configuration, including API keys, is stored on the user’s device in the browser storage Outlook provides for the Add-in’s domain, and remains until the user clears it or removes the Add-in. If Outlook blocks that storage, the configuration is kept in memory only and is lost when the Add-in closes. The selected email and the extracted details are held in memory only while the Add-in is open.

Attachment contents are held in memory only while they are in use and are not stored by Mail Intake. We do not retain copies of email content, attachments, the user’s API keys, or Microsoft sign-in tokens on servers we control, except for details and documents the user chooses to save in G2Mint (such as quotes, orders, shipments, documents added to a shipment, and freight bills), which are kept as part of the Business Customer’s G2Mint records. Data transmitted to the other recipients in 11.4 is retained by them under their own policies.

11.6 Limited Use of Google User Data

The Extension’s use and transfer of information received from Google APIs, including Gmail content, adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide and improve the user-facing features described in this section.
• We do not transfer Google user data except as necessary to provide those features (the extraction and quoting recipients in 11.4), to comply with applicable law, or as part of a merger or acquisition with appropriate notice.
• We do not use Google user data for serving advertisements.
• We do not allow humans to read Google user data, except with the user’s affirmative consent for specific messages, as necessary for security purposes or to comply with applicable law, or where the data has been aggregated and anonymized.
• We do not sell Google user data.

11.7 Use of Microsoft User Data.

Mail Intake applies the same limits to information received from Microsoft, including Outlook email content and attachments obtained through Microsoft Graph or the Office add-in interface:

• We use Microsoft user data only to provide and improve the user-facing features described in this section.
• We do not transfer Microsoft user data except as necessary to provide those features (the recipients in 11.4), to comply with applicable law, or as part of a merger or acquisition with appropriate notice.
• We do not use Microsoft user data for serving advertisements.
• We do not allow humans to read Microsoft user data, except with the user’s affirmative consent for specific messages, as necessary for security purposes or to comply with applicable law, or where the data has been aggregated and anonymized.
• We do not sell Microsoft user data.

11.8 User Choices
A user may stop using Mail Intake at any time. A user may remove all data the Extension stores locally by clearing the Extension’s stored data or uninstalling it, and may remove the Add-in from Outlook (or ask their organization’s administrator to remove it, where the administrator installed it). A user may turn off “Pre-read emails on open” in Mail Intake’s settings. A user may withdraw the Extension’s access to Outlook on the web in the browser’s extension settings, and may revoke the Extension’s access to their Microsoft account in that account’s app-permission settings or, for a work or school account, through their organization’s administrator. A user may revoke or rotate the API keys they have provided directly with the applicable provider. These choices are in addition to the rights described in “Your Choices and Rights” in the Notice.

12. Contact Us.

This Privacy Notice is issued by G2Mint, Inc.

If you have questions or concerns about a Business Customer’s decisions regarding the collection and processing of your personal information in connection with their products and services, you should contact the Business Customer. If you instead elect to contact us, we will use reasonable efforts to coordinate with the Business Customer in providing a response.

If you have any other questions or concerns regarding the matter described in this Privacy Notice, please contact us at support@g2mint.com.