These User Account Terms govern individual User accounts and form part of the contractual “Terms” defined in Section 2.1 of the Platform Terms. Capitalized terms have the meanings assigned in the Platform Terms. An individual User affirmatively accepts the Platform Terms, these User Account Terms and the End User License Agreement in the User’s individual capacity when creating a personal account. The Privacy and Cookie Policy is provided as a privacy notice and is not a contractual waiver of statutory privacy rights. Mandatory applicable law and the order-of-precedence rules in Platform Terms Section 2.2 control actual conflicts. Ambry is a business-to-business marketplace: a personal User account is an authentication account only, distinct from an Organization account, and does not by itself confer access to marketplace or other business features, establish business status, or bind any Organization.

2.1 Any individual who has reached the age of majority where the individual resides may create a personal User account through an enabled Google or other third-party sign-in method, or directly through email registration and authentication. Creating a personal account does not establish that the User owns or represents a business, is a carrier, broker or other Provider, or is authorized to act for an Organization. Before the User has created an eligible Organization or has been duly admitted to an existing eligible Organization, the account provides no access to Ambry marketplace or business functionality, including Organization dashboards or data, Service listings, Requests, Orders, bookings, Provider offers, messaging between counterparties, commercial payments, payouts, or related features. Only the minimum functions necessary to sign in, verify and secure the personal account, manage personal account settings, create an Organization, or accept an Organization invitation may be available. These limited setup functions do not constitute access to the marketplace.
2.2 Access to business features requires a valid association with an eligible Organization that has accepted the applicable Organization Terms, completion of any applicable eligibility or verification requirements, and the particular permissions granted to the User. Merely creating or joining an Organization does not guarantee access to every feature or permission. Only duly authorized Users may act on an Organization’s behalf, and only within their assigned authority. An individual User cannot create a binding Request, confirm or accept an Order, publish a Service, or incur commercial obligations for an Organization without the required Organization association and authority. A Request is not an Order; an Order requires the Customer’s affirmative booking confirmation and the selected Provider’s affirmative acceptance under Platform Terms Sections 3.3 and 7.1.
2.3 Each Organization, acting through its authorized administrators, is responsible for inviting, approving, supervising and managing its Users; determining their permissions; and promptly removing or revoking their Organization-level access when their employment, engagement, role or authority ends or changes. A User must immediately stop acting for an Organization when authorization ends. An Organization is responsible for the consequences of its own failure or delay in managing or revoking User access, to the extent permitted by law. Ambry is not responsible for such Organization failures or delays, except to the extent attributable to Ambry’s own breach of an applicable obligation, failure to implement a revocation properly communicated or executed through available controls, or other liability that cannot lawfully be excluded. Ambry may reasonably rely on authenticated Organization-account actions as provided in Platform Terms Section 3.4, subject to its limitations.
2.4 A User account and its authentication credentials are personal and must not be shared. A User must provide accurate information actually requested, protect account access, and comply with applicable business-use, security, prohibited-conduct, privacy, confidentiality and intellectual-property restrictions in the Terms. If a User is removed from the User’s only Organization, or otherwise has no current eligible Organization association, all marketplace and Organization-level access ceases and the User returns to the limited personal-account setup functions described in Section 2.1. If the User has another eligible Organization association, only the separately authorized access for that other Organization may remain. Removal from an Organization does not automatically delete the personal User account or lawfully retained records.

3.1 A User must provide a valid email address and the accurate personal information actually requested by the enabled registration process. Google or another enabled third-party sign-in method may replace the need to create a separate Ambry password. Ambry may verify email or account access and request updated information for legitimate security or eligibility purposes. Personal User registration does not itself require a government identity document, driver’s licence, business registration or insurance certificate. Organization registration and verification, Provider insurance requirements under Platform Terms Section 24, and Stripe Connect Express onboarding are separate processes applicable when relevant; they are not prerequisites for creating a preliminary personal account. No successful personal registration alone activates marketplace functionality.
3.2 Before creating the account, the User must have a reasonably conspicuous opportunity to review and retain the Platform Terms, these User Account Terms and the End User License Agreement and must affirmatively accept them. The Privacy and Cookie Policy must be made available as a notice. Ambry may keep reasonably maintained, tamper-evident evidence of the versions presented, document identifiers or hashes, account identifier, timestamp, acceptance action and relevant security records, subject to privacy law. Such records may be used as rebuttable evidence and do not conclusively establish acceptance in the face of contrary evidence or mandatory law. Acceptance in an individual capacity does not establish an Organization’s assent. The Beta Agreement and applicable Organization and Order Terms require their own acceptance at the appropriate stage, as stated in Platform Terms Sections 2.1 and 3.3.

4.1 Users must protect passwords, third-party sign-in methods, authentication tokens and recovery credentials and must not share them. Users using a password should maintain a strong, unique password. Ambry may require reasonable additional verification or multi-factor authentication, especially for Organization administrators, sensitive actions and material account changes. Users must not circumvent security controls, impersonate others, interfere with the Platform, or conduct prohibited automated extraction or security testing, subject to any good-faith research exception expressly provided in the End User License Agreement.
4.2 A User must promptly report suspected account compromise, unauthorized access, credential theft or misuse of Organization permissions to support@ambry.io, and where reasonably possible within twenty-four (24) hours after becoming aware of the issue. An Organization must separately comply with its incident-notification and cooperation duties under Platform Terms Section 12.5 when applicable. Ambry may take proportionate protective action, including session revocation, account restrictions, additional verification or temporary suspension, consistent with Platform Terms Sections 5.3 and 17, processor rules and mandatory law. A protective restriction does not automatically determine wrongdoing, cancel an Order or forfeit funds.
4.3 Each Organization is responsible for the permissions it grants and for promptly withdrawing access when a User is no longer authorized. An Organization’s failure or delay in revoking access remains its responsibility, subject to the limitations in Section 2.3, Platform Terms Section 3.4 and mandatory law. An individual User remains responsible for the User’s own conduct and legally enforceable account obligations, but personal account creation alone does not make the User personally liable for the Organization’s Service, cargo, insurance, payment or indemnity obligations. Ambry remains responsible for its own non-excludable legal obligations, including any security or access-control failure attributable to Ambry.
4.4 Access to payment-related functions may require further Organization permissions, verification and processor eligibility. Stripe Connect Express Providers complete and maintain their own onboarding, bank details and bank payout settings with Stripe. Ambry may submit only the supported payment-administration instructions authorized under Platform Terms Sections 8–9, the applicable Order Terms, processor arrangements and law; it does not independently control a Provider’s bank payout schedule. A payment authorization, Request or search result does not itself form an Order, and no undisclosed Platform Fee arises from preliminary User registration.

5.1 Content and data submitted through an account are governed by Platform Terms Sections 10–12 and the End User License Agreement. Users must have the rights and authority necessary to submit materials and must not upload misleading credentials, unlawfully disclose personal information, misuse Confidential Information, or extract, sell or use non-public rates, shipment details or counterparty contact lists for unsolicited marketing or deceptive diversion. An Organization retains its rights in Organization content as stated in Platform Terms Section 10.2; account access does not transfer that ownership to the User or Ambry.
5.2 Ambry’s rights in protected Platform technology, voluntary feedback and appropriately aggregated or de-identified market insights are governed by Platform Terms Sections 10.1 and 10.3–10.5, subject to confidentiality, privacy and applicable law. Nothing in these User Account Terms grants ownership of other Organizations’ information or prohibits lawful independent business relationships, competition or use of independently and lawfully obtained public information.

6.1 Ambry may send account, security, acceptance, Organization-access, Request, Order, payment, compliance and material-change communications reasonably necessary to operate the Platform and administer the Terms. Such communications are distinct from optional marketing. Users must maintain an accessible registered email address and reasonably review relevant in-Platform notifications. Delivery and evidentiary rules in Platform Terms Section 21 apply where relevant and subject to mandatory law; notices to an Organization and notices to an individual User are not automatically interchangeable.
6.2 Optional marketing and commercial electronic messages are sent only with a lawful basis and any consent required by applicable law, including Canada’s Anti-Spam Legislation (CASL). Where required, Ambry will identify the sender and provide a functioning unsubscribe mechanism. Accepting the Terms, opening an account or acknowledging the Privacy and Cookie Policy does not by itself authorize optional marketing. Unsubscribing from marketing does not prevent lawful transactional, security or legally required notices.

7.1 An Organization may remove a User’s Organization-level access through the available administrative process. The Organization is responsible for timely removal when the User leaves, is dismissed, ceases to be engaged, or otherwise loses authority. Ambry has no independent duty to monitor each Organization’s employment or authorization relationships or to determine when a particular User should be removed. Ambry is not liable for an Organization’s failure or delay in revoking access, except for Ambry’s own breach of applicable obligations or non-excludable liability, as described in Section 2.3.
7.2 Once Organization access is revoked or removed, the User has no further right to view that Organization’s data or use its business functions. If no other eligible Organization association remains, the User has no marketplace access and may use only the limited personal-account setup and security functions described in Section 2.1. The personal account may remain in existence and may later be associated with another eligible Organization if properly authorized.
7.3 A User may request deactivation of the personal account, subject to reasonable identity verification, lawful retention and outstanding matters. Ambry may restrict, suspend or terminate access in accordance with Platform Terms Sections 5.3 and 17 and mandatory law. Suspension or deactivation does not itself cancel confirmed Orders, create undisclosed fees or forfeit properly owed funds. Outstanding Organization Orders, refunds, transfers, claims and accrued obligations remain governed by Platform Terms Sections 7–9 and 17.3 and the applicable Order Terms. Privacy requests and required retention remain subject to the Privacy and Cookie Policy and applicable law.

Platform Terms Sections 8–9, 13–17, 19 and 20–24 apply only to the extent relevant to an individual User and permitted by applicable law, under Platform Terms Sections 2.2–2.3. Organization-specific cargo, insurance, payment, indemnification and release obligations are not imposed on an individual merely for creating a personal User account. The Provider insurance requirements in Section 24 apply to relevant Provider Organizations, not to an unassociated individual User. The single aggregate liability cap in Platform Terms Section 16 is not multiplied by this document, and mandatory exceptions remain effective. Platform Terms Sections 19–22 govern disputes, amendments, notices and language to the extent their wording applies to an individual User and mandatory law permits. These User Account Terms do not create a consumer logistics service or a right to marketplace access without an eligible Organization. Where affirmative acceptance of an amendment is legally required, continued use alone does not replace it.