Last Updated: June 29, 2026 
 
1. Scope of This Privacy Notice
 
This Privacy Notice (“Notice”) explains how TransCore, LP ("TransCore," "we," "us," or "our") collects, uses, discloses, retains, and protects personal information. Depending on the context in which personal information is collected or processed, TransCore may act as a data controller (or “business”) or as a data processor (or “service provider”) under applicable privacy and data protection laws.
 
This Notice applies to personal information collected through our websites, mobile applications, customer and business communications, events, facilities, and services where TransCore determines the purposes and means of processing such information, including when you create an account, use our products or applications, visit our websites, communicate with us, or engage with us in a business or customer context. Additional disclosures applicable to certain U.S. state residents are set forth in the TransCore State Privacy Rights Supplement, which is incorporated by reference.
 
This Notice does not apply to information we process solely on behalf of a customer (including a public agency or tolling authority) as a service provider/processor under a contract. In those cases, the customer’s or agency’s privacy notice governs, and TransCore processes the information solely in accordance with the customer’s documented instructions and the applicable contract, as permitted by applicable law.
 
However, in certain situations, TransCore may process personal data and sensitive data including license plate images, license plate numbers, or other ALPR-related data as a controller/business (where TransCore determines the purposes and means of processing). In those cases, this Privacy Notice applies to that processing, and the disclosures in Section 12 (and other applicable sections) describe how we collect, use, disclose, retain, and protect such information. 
 
2. Information We Collect 
 
We collect the categories of personal information listed below for the business and commercial purposes described below. We retain personal information for as long as reasonably necessary for the purposes described in this Notice, consistent with Section 6 (Data Retention). 
 
Categories we may collect (depending on how you interact with us): 
 

• Identifiers and contact information (e.g., name, email address, mailing address, phone number, unique account identifiers) 

• Account and authentication information (e.g., username, password, security questions, tokens or similar credentials) 

• Transaction and payment information (e.g., payment card information handled by our payment processors, billing details, transaction history) 

• Device and online activity information (e.g., IP address, device identifiers, browser type, app version, operating system, log data, cookie identifiers, usage data, diagnostics) 

• We may collect or process precise location information where necessary to enable core functionality (e.g., tolling or location-dependent features).  Location collection is limited to what is necessary for the requested service and is not used for tracking unrelated activities. 

• Transportation/tolling information (where applicable) (e.g., vehicle identifiers, transponder identifiers, license plate number, toll transaction records, travel/usage information) 

• Photos and images (e.g., images of vehicle license plates or vehicles that you upload through the mobile application) 

• Customer support content (e.g., communications, chat content, call recordings where permitted, and related metadata) 

• Inferences (limited) (e.g., inferences about preferences derived from your use of our services, where permitted) 
   

Purposes for Collection/Use of Information 
 

• Provide and operate our websites and mobile applications; create and manage accounts; provide customer support 

• Process payments and transactions; send transactional and service-related communications 

• Maintain safety, security, and integrity; debug, troubleshoot, and prevent fraud or misuse 

• Improve and develop our services; perform analytics in a manner consistent with applicable law and your choices 

• Support proximity‑based and functionality‑dependent features enabled within the mobile application (for example, Bluetooth‑enabled interactions) 

• Comply with legal obligations; respond to lawful requests; protect rights and safety 
   

Sources of Personal Information 
 
We collect personal information from: 
 

• You (for example, when you create an account, contact support, or submit forms); 

• Your devices and browsers automatically (for example, through cookies, SDKs, and similar technologies); and 

• Other sources (for example, our affiliates, service providers, or business partners, and public sources) where permitted. 

 
Certain data elements described above (such as account information, vehicle identifiers, license plate images, and transaction records) may be associated with or linked to your user account to enable core application functionality, account management, and service delivery. 
 
3. How We Use Personal Information 
 
We use personal information only to the extent reasonably necessary and proportionate for legitimate business purposes consistent with applicable law, including to: 
 

• Provide, operate, and maintain our websites, mobile applications, and services; 

• Process transactions and payments and manage billing; 

• Communicate with you about your account, services, support requests, and administrative matters; 

• Analyze, improve, and develop our services and user experience using third‑party analytics providers acting on our behalf; 

• Maintain the safety, security, and integrity of our systems and facilities; 

• Prevent fraud, abuse, and misuse; and 

• Comply with legal, regulatory, and contractual obligations and protect rights. 
   

4. Legal Bases for Processing (Where Applicable) 
 
Where required by applicable law, we process personal information based on one or more legal bases, including performance of a contract, legitimate business interests, compliance with legal obligations, or your consent.  Where TransCore acts as a processor or service provider, personal information is processed solely in accordance with applicable contractual instructions and not for TransCore’s independent business purposes, except as permitted by law and the customer remains responsible for determining the applicable legal basis for such processing. 

5. Disclosure of Personal Information 

We disclose personal information only as necessary for the purposes described in this Notice and as permitted or required by applicable law, including to: 
 

• Service providers and vendors (e.g., hosting, analytics, customer support tools, payment processors, security providers) that process information on our behalf; 

• Affiliates and subsidiaries (for internal administration and consistent business purposes); 

• Government entities, regulators, and law enforcement when we believe disclosure is required or appropriate to comply with law, protect rights, or prevent harm; 

• Corporate transaction counterparties (in connection with mergers, acquisitions, financing, reorganization, or sale of assets); 

• Customers/agency partners (where you use a service through an employer, organization, or agency relationship and that entity is the program owner). 

 
With respect to license plate images, license plate numbers, or other ALPR-related data: 
 

• Where we process such data on behalf of a program owner, disclosures and responses to requests are handled in accordance with the program owner’s instructions and applicable law. 

• Where we process such data as a controller/business, we may disclose it to service providers, affiliates, and government entities as described in this Notice for the purposes described in Section 12 and Section 3, and we will respond to requests and legal demands consistent with applicable law. 
   

We do not sell personal information for money. We do not use personal information for advertising, targeted advertising, or ad measurement purposes. We use third‑party analytics and diagnostics providers acting as service providers to help us understand service performance and reliability. 
 
We do not knowingly share personal information for cross-context behavioral advertising, except to the extent certain online analytics and advertising technologies may be considered "sharing" under some state laws. Where required, we provide opt-out mechanisms described in this Privacy Policy and the State Privacy Rights Supplement. 
 
For purposes of mobile application privacy disclosures, certain data processing activities described in this Notice (including transfers to transportation agencies, tolling authorities, and service providers) may be characterized as “data sharing”.  These disclosures reflect how app store platforms define sharing and may differ from how “sale,” “sharing,” or “third-party disclosure” is defined under applicable privacy laws. 
 
6. Data Retention 
 
We apply the following general retention practices, unless a different period is required by a program owner or applicable law:
 

• Account data: retained for the life of the account and a limited period thereafter for audit and compliance purposes; 

• License plate images and vehicle data: retained for as long as necessary to provide the service, support account functionality, and comply with legal or contractual requirements, and deleted or de-identified thereafter; 

• Transaction and tolling records: retained in accordance with applicable transportation and public records laws; 

• Device and usage data: retained for a limited period necessary for security, diagnostics, and service improvement. 

 
In addition to time-based retention, we apply event-based deletion triggers, such as account closure, fulfillment of processing purpose, or expiration of contractual or legal requirements. 
Where TransCore acts as a service provider or processor, retention is governed by customer instructions and applicable law and the applicable customer agreement or data processing agreement controls in the event of any conflict with this Notice. 
 
7. Data Security 
 
We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. 

8. Your Privacy Rights 

Depending on where you live and how we process your personal information, you may have the right to: 
 

• Access and obtain a copy of your personal information; 

• Correct inaccurate personal information; 

• Delete certain personal information, including information associated with your account, subject to retention requirements; 

• Opt-out of certain processing (such as targeted advertising, "sale" or "sharing" as defined by law) where applicable; and 

• Limit the use and disclosure of sensitive personal information (where applicable). 

 
How to exercise rights: 
 

• Submit a request using the methods described in the TransCore State Privacy Rights Supplement. 

• We may need to verify your identity before fulfilling a request. 

• Authorized agents may submit requests where permitted by law. 

 
We will not discriminate against you for exercising your rights.  Users may request deletion of their personal information by submitting a request through the methods described in this Notice.  Where data is processed on behalf of a program owner, users may be directed to the applicable agency or program owner to complete their request.  TransCore is not authorized to respond directly to such requests except as required by law or as instructed by the customer.
   
9. Cookies and Online Technologies 

We use cookies, SDKs, pixels, and similar technologies to operate our websites and apps, remember your preferences, perform analytics and diagnostics related to performance, stability, and usage trends, and to maintain security and prevent fraud. 
We do not use these technologies for behavioral advertising, ad targeting, or ad measurement. 

Bluetooth and Device Permissions 
Our mobile applications may use Bluetooth or similar short‑range technologies to enable specific features. These interactions are proximity‑based and are not intended to track precise or continuous location. You can control Bluetooth permissions through your device settings. 

Your Choices 

• Cookie controls: You can adjust cookie preferences using our cookie banner and/or Cookie and Tracking Technologies Notice. 

• Device settings: You can limit certain tracking on your mobile device (for example, restrict ad ID use) and manage app permissions. 

• Do Not Track: Some browsers transmit "Do Not Track" signals. Because there is not yet an industry standard for responding to these signals, we do not respond to them in a uniform manner. 
   

10. Children’s Privacy 

Our services are not directed to children, and we do not knowingly collect personal information from children under the age required by applicable law (generally under 13). If we become aware that we have collected such information, we will take appropriate steps to delete it. If our services are offered for teen audiences (13–17) in any context, we will provide additional notices and choices as required by applicable law. 

11. International Transfers 

TransCore is headquartered in the United States, and personal information may be processed and stored in the United States and other countries where we or our service providers operate. Where required by law, we use appropriate safeguards for cross-border transfers. 

12. Transportation and Tolling‑Specific Data Processing 

Transportation and Tolling 

TransCore provides technology and services to transportation agencies and tolling authorities. In those programs, we may process personal information such as vehicle identifiers, transponder identifiers, license plate numbers, toll transaction records, travel/usage information, and related customer support communications. When we process this information on behalf of a program owner (agency/customer), that entity’s privacy notice and instructions govern. 

Vehicle and Lice Plate Images 

Our mobile application allows users to capture and upload images of their vehicle license plate for purposes such as account setup, vehicle identification, and facilitating transportation or tolling services. These images may be associated with your account and are processed to provide the requested services.  
Where license plate images or related vehicle data are processed in connection with a transportation or tolling program operated by a customer, public agency, or tolling authority, TransCore acts solely as a service provider or processor on behalf of that program owner and does not independently determine the purposes or means of such processing. In those cases, the applicable program owner determines the purposes and means of processing, including retention, access, disclosures, and compliance with any Automatic License Plate Recognition (ALPR) or vehicle‑data‑specific laws. The program owner’s privacy notice governs such processing. 

When TransCore Acts as a Controller for ALPR-Related Data 

TransCore may processes ALPR-related data (including license plate images and license plate numbers) as a controller/business, meaning we determine the purposes and means of processing. In those contexts, we may process ALPR-related data for purposes such as: (a) providing and operating our services; (b) account setup and identity/vehicle verification; (c) fraud prevention, security monitoring, and misuse detection; (d) resolving disputes, chargebacks, and enforcing terms; (e) compliance with legal obligations and responding to lawful requests; and (f) maintaining system integrity and auditing. 
Retention: We retain ALPR-related data for as long as reasonably necessary for these purposes, consistent with Section 6, and any applicable legal requirements. [Optionally insert a program-specific retention range or criteria.] 
Disclosures: We may disclose ALPR-related data to service providers, affiliates, and government entities as described in Section 5, including to comply with law, protect rights and safety, and prevent fraud. 

13. Changes to This Notice
 
We may update this Privacy Notice from time to time. If we make material changes, we will provide notice as required by applicable law. 

14. Contact Us 

If you have questions or requests regarding this Privacy Notice or our privacy practices, please contact us at privacy@transcore.com or 800-923-4824. 
 
TransCore State Privacy Rights Supplement 

This State Privacy Rights Supplement (“Supplement”) provides additional disclosures and explains privacy rights that may apply to residents of certain U.S. states under applicable state privacy laws. This Supplement supplements and is incorporated into the TransCore Privacy Notice (“Privacy Notice”).  Depending on the context in which personal information is processed, TransCore may act as a “business” or “controller,” or as a “service provider” or “processor,” as those terms are defined under applicable state privacy laws. This Supplement should be read together with the Privacy Notice to understand how those roles apply in different contexts. 

If there is a conflict between this Supplement and the Privacy Notice for residents of a covered state, this Supplement controls to the extent required by applicable law. 

1. Covered States and Applicability 

This Supplement applies to individuals who reside in U.S. states that have enacted comprehensive consumer privacy laws, including (as enacted and effective) California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia, as well as any other similar state privacy laws that become effective and apply to our processing activities. 

This Supplement does not apply to information that is exempt under applicable law (for example, certain information governed by HIPAA or GLBA), to the extent such exemptions apply. 

2. TransCore’s Role: Controller/Business vs. Service Provider/Processor   

In some contexts (including certain ALPR-related processing), TransCore acts as a controller/business, meaning we determine the purposes and means of processing. In other contexts, particularly for agency-sponsored programs, TransCore acts as a service provider/processor on behalf of the customer, public agency, or tolling authority (each, a “Program Owner”). 
Where TransCore acts as a service provider/processor: 
 

• The Program Owner determines the purposes and means of processing personal information; 

• TransCore processes personal information solely on behalf of and in accordance with the Program Owner’s instructions, applicable contracts, and applicable law. TransCore does not independently determine the purposes or means of processing such personal information and does not use such information for its own independent commercial purposes, except as permitted by law; and 

• The Program Owner’s privacy notice governs how personal information is collected, used, retained, and disclosed for that program. 
   

Because of the allocation of roles, certain privacy rights requests must be submitted directly to the Program Owner, not to TransCore and TransCore is not authorized to fulfill such requests except as required by applicable law or as instructed by the Program Owner. 

ALPR and Vehicle Data Requests 

Where ALPR-related data is processed by TransCore on behalf of a Program Owner, requests should be directed to that Program Owner. Where ALPR-related data is processed by TransCore as a controller/business, requests may be submitted to TransCore using the methods outlined in Section 6. 

3. Summary of Processing (Cross‑Reference to the Privacy Notice) 

Details about the categories of personal information processed, sources, purposes, disclosures, retention, and security measures are described in the Privacy Notice, including: 
 

• Information We Collect: Section 2 

• How We Use Personal Information: Section 3 

• Disclosure of Personal Information: Section 5 

• Data Retention: Section 6 

• Data Security: Section 7 

• Transportation and Tolling–Specific Data Processing: Section 12 

• Contact Us: Section 14 
   

This Supplement focuses solely on state‑law rights and mechanisms for exercising those rights. 

4. Sensitive Personal Data
 
Depending on how a Program Owner uses our mobile applications and services, TransCore may process certain categories of sensitive personal data (as defined by applicable state privacy laws) on behalf of that Program Owner. 

This may include, for example: 
 

• Vehicle and transportation data, such as license plate numbers and toll transaction information; 

• Images of vehicle license plates uploaded by users through the mobile application for account setup, vehicle identification, or transportation/tolling services; 

• Government‑issued identifiers, where provided by or through a Program Owner; 

• Account authentication information; and 

• Location‑adjacent information, such as proximity‑based signals derived from Bluetooth or similar short‑range technologies. 
   

TransCore processes sensitive personal data only as instructed by the applicable Program Owner, consistent with contractual requirements and applicable law. Where state law requires consent, authorization, or a specific legal basis to process sensitive personal data, the Program Owner is responsible for obtaining and managing that consent or legal basis, unless otherwise agreed in writing. TransCore relies on the Program Owner to confirm that any required notices, authorizations, or legal bases have been satisfied for such processing. 

5. State Privacy Rights (May Vary by State) 

Depending on your state of residence and applicable law, you may have the right to: 
 

• Access / Confirm Processing – request confirmation of whether personal information is processed and obtain access to it; 

• Correction – request correction of inaccurate personal information; 

• Deletion – request deletion of certain personal information, subject to legal and contractual retention requirements; 

• Data Portability – receive certain personal information in a portable and readily usable format; and 

• Opt Out of Certain Processing, including:  

• targeted advertising, 

• the sale of personal information (as defined by law), or 

• profiling in furtherance of decisions that produce legal or similarly significant effects (where applicable). 
   

No Targeted Advertising 

TransCore does not use personal information processed through mobile applications or services for targeted advertising. 

Sale / Sharing 

TransCore does not sell personal information for monetary consideration. When acting as a service provider or processor, TransCore does not disclose personal information for its own independent commercial purposes and does not sell or share such information as those terms are defined under applicable state privacy laws, and limits use and disclosure to performing services for the Program Owner, except as permitted by law. Certain disclosures to service providers or Program Owners may be considered a “sale” or “sharing” under some state definitions, depending on context; these disclosures are described in the Privacy Notice.
 
6. How to Exercise Your Privacy Rights 

Requests Relating to Program Owner Applications 

If your request relates to a mobile application or service provided through a Program Owner (such as a transportation agency or tolling authority), please submit your request directly to that Program Owner using the contact information provided in their privacy notice. 

If a request is submitted to TransCore in this context, TransCore may: 
 

• refer you to the appropriate Program Owner, and/or 

• assist the Program Owner in responding to the request, as required by applicable law and contract. 
   

Requests Relating to TransCore as Controller 

If your request relates to personal information TransCore processes as a controller (for example, through TransCore’s corporate websites or direct business communications), you may submit a request by: 
 

• Email: privacy@transcore.com 

• Phone: 800‑923‑4824 

• Mail: TransCore, LP 
   

Attn: Privacy 
150 4th Avenue North 
Suite 1200 
Nashville, TN 37219 
 
In the event of a conflict between instructions provided by a Program Owner and this Supplement with respect to data processed on the Program Owner’s behalf, the applicable contract or data processing agreement will control to the extent permitted by law. 
 
7. Verification and Response Timing 

We (or the applicable Program Owner) may take reasonable steps to verify your identity and authority before fulfilling a request. Responses are provided within the timeframes required by applicable law, generally within 45 days, subject to extensions where permitted. 

8. Appeals 

In states that provide a right to appeal a denied request, appeals relating to Program Owner data should be submitted to the Program Owner. Appeals relating to TransCore’s own processing (where TransCore acts as controller) may be submitted using the contact information above. We will respond within the timeframe required by law. 

9. Authorized Agents 

Where permitted by applicable law, you may designate an authorized agent to submit a privacy rights request on your behalf. Proof of authorization and identity verification may be required. 

10. Non‑Discrimination 

TransCore will not unlawfully discriminate against you for exercising applicable privacy rights. 

11. De‑Identified and Aggregated Information 

We may use de‑identified or aggregated information as permitted by law and contract. Where information is maintained in de‑identified form, TransCore does not attempt to re‑identify it except as permitted by law. 

12. Updates to This Supplement 

We may update this Supplement from time to time. If material changes are made, we will provide notice as required by law. The “Last Updated” date reflects the effective date of the current version. 

13. Contact Us 

For questions regarding this Supplement: 

Privacy Team 
Email: privacy@transcore.com 
Phone: 800‑923‑4824