Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account Registration: Full name, email address, phone number, password, and account type (customer, driver, or vendor).
• Booking Information: Pickup and drop-off locations, travel dates and times, passenger count, special requests, and payment details.
• Driver & Vendor Profiles: Driver's license, vehicle registration, insurance documents, background check consent, business license, and banking information for payouts.
• Communications: Messages sent through our in-app chat, support tickets, and review submissions.
• Identity Verification: Government-issued ID and selfie photos for driver background checks.

1.2 Information Collected Automatically

• Location Data: Real-time GPS location during active rides (drivers and riders), and approximate location for service availability checks.
• Device Information: IP address, browser type, operating system, device identifiers, and app version.
• Usage Data: Pages visited, features used, search queries, booking history, and interaction timestamps.
• Cookies & Tracking: Session cookies, preference cookies, and analytics pixels to improve your experience.

1.3 Information from Third Parties

• Payment Processors: Stripe provides tokenized payment confirmation; we do not store full card numbers.
• Background Check Providers: Results from authorized background screening services for driver verification.
• Social Login: If you sign in via Google or Apple, we receive your name and email from those providers.

2. How We Use Your Information

• Process and fulfill ride bookings, including matching riders with drivers and vehicles.
• Process payments and issue refunds through our secure payment infrastructure.
• Send booking confirmations, ride status updates, receipts, and important service notifications via email and push notifications.
• Verify driver and vendor identities, conduct background checks, and maintain platform safety.
• Provide real-time ride tracking and ETA updates to riders and authorized contacts.
• Resolve disputes, handle support tickets, and investigate complaints.
• Improve our platform through analytics, A/B testing, and user feedback.
• Send promotional offers, newsletters, and referral program updates (with your consent; you may opt out at any time).
• Comply with legal obligations, including tax reporting and law enforcement requests.
• Detect and prevent fraud, abuse, and unauthorized access.

3. How We Share Your Information

We do not sell your personal information. We share data only in the following circumstances:

• Drivers & Vendors: Your first name, pickup/drop-off location, and contact number are shared with your assigned driver to complete your ride.
• Service Providers: Stripe (payments), Resend (email delivery), Supabase (database and authentication), and analytics providers — all under strict data processing agreements.
• Corporate Accounts: If you book through a corporate account, your ride data may be visible to your company's account administrator.
• Legal Requirements: When required by law, court order, or to protect the safety of our users or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.

4. Location Data

HeXA RIDES collects precise location data from drivers during active rides to enable real-time tracking, ETA calculations, and route optimization. Riders' location is used to determine pickup accuracy and service availability. You may disable location permissions in your device settings, but this will limit core functionality. Location data from completed rides is retained for 90 days for dispute resolution purposes.

5. Data Retention

• Account Data: Retained while your account is active and for 3 years after account deletion for legal and tax compliance.
• Booking Records: Retained for 7 years to comply with financial and tax regulations.
• Location Data: Active ride location is deleted within 90 days of ride completion.
• Chat Messages: Retained for 12 months, then archived or deleted.
• Background Check Data: Retained for the duration of the driver's active status plus 2 years.

6. Your Rights & Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update inaccurate or incomplete information via your Account Settings.
• Deletion: Request deletion of your account and associated data (subject to legal retention requirements).
• Opt-Out of Marketing: Unsubscribe from promotional emails via the link in any email, or toggle off in Account Settings → Privacy.
• Data Portability: Request your data in a machine-readable format.
• Do Not Sell: We do not sell personal data. Nevada residents may still submit a verified request to confirm this.

To exercise any of these rights, contact us at privacy@hexarides.com.

7. Security

We implement industry-standard security measures including 256-bit SSL/TLS encryption for data in transit, AES-256 encryption for sensitive data at rest, PCI-DSS compliant payment processing via Stripe, role-based access controls, and regular security audits. However, no system is 100% secure. If you suspect unauthorized access to your account, contact us immediately at security@hexarides.com.

8. Children's Privacy

HeXA RIDES is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us and we will promptly delete it.

9. Cookies & Tracking Technologies

We use cookies and similar technologies to maintain session state, remember your preferences, and analyze platform usage. Types of cookies we use:

• Essential Cookies: Required for authentication and core platform functionality.
• Preference Cookies: Remember your language, currency, and display settings.
• Analytics Cookies: Help us understand how users interact with our platform (Google Analytics).

You can control cookies through your browser settings. Disabling essential cookies may affect platform functionality.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-app notification at least 14 days before the changes take effect. Your continued use of the Services after the effective date constitutes acceptance of the updated policy.

11. Contact Us