Privacy Policy

Relationship to Terms of Service

This Privacy Policy is incorporated by reference into, and forms part of, the RideBuilder Terms of Service (the "Terms"). Capitalized terms not defined here have the meanings given in the Terms. If this Privacy Policy conflicts with the Terms on a privacy topic, this Privacy Policy controls; otherwise, the Terms govern. This Policy does not apply where a separate privacy policy is presented to you at collection and expressly supersedes it.

Controller and Contact

RideBuilder is the business responsible for decisions about how your personal information is processed ("controller," where applicable). You can contact us at privacy@ridebuilder.com or via Section 15.

Our Services are hosted in the United States. If you access the Services from outside the U.S., your information may be transferred to, stored in, or processed in the U.S. (or other countries where our service providers operate). We take steps consistent with applicable law to protect cross-border transfers.

Questions or Concerns?

Reading this Privacy Policy will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at privacy@ridebuilder.com.

Summary of Key Points

This summary provides key points from our Privacy Policy. You can find more details about any of these topics in the sections below.

1. What Information Do We Collect?

We collect personal information that you voluntarily provide to us when you register on the Services, express interest in obtaining information about us or our products and Services, participate in activities on the Services, or otherwise contact us.

Personal Information Provided by You

The personal information we collect may include the following:

• Names
• Email addresses
• Usernames
• Passwords
• Mailing addresses
• Contact or Authentication Data
• Account profile details (display name and avatar), communications you send to us (including support requests), and any information you include in forum posts or build galleries ("Contributions").

Sensitive information: We do not intentionally collect "sensitive" personal information (for example, government issued identifiers, precise geolocation, or protected-class data). Please do not submit sensitive information through the Services.

Social Media Login Data: We may provide you with the option to register using your existing social media account details, like your Facebook, X, or other social media account. If you choose to register in this way, we will collect certain profile information as described in Section 7.

Application Data

If you use our applications, we may also collect:

• Geolocation information: We may request access to track location-based information from your mobile device to provide certain location-based services. You may change our access in your device settings.
• Mobile Device Data: We automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system, version information, browser type and version, hardware model, internet service provider and mobile carrier, and IP address.
• Push notifications:We may request to send you push notifications regarding your account or certain features. You may turn them off in your device's settings.

Information Automatically Collected

We automatically collect certain information when you visit, use, or navigate the Services. This may include device and usage information such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, and location. We also collect information through cookies and similar technologies. See our Cookie Policy for more details.

The information we collect includes:

• Log and Usage Data: Service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services, including IP address, device information, browser type, activity timestamps, pages viewed, searches, and device event information.
• Device Data: Information about your computer, phone, tablet, or other device used to access the Services, including IP address, device identification numbers, location, browser type, hardware model, internet service provider, and operating system.
• Location Data:Information about your device's location, which can be either precise or imprecise. You can opt out by disabling your Location setting on your device, though some aspects of the Services may be affected.
• Information from other sources: We may receive information from service providers, partners that support sign-in or social-login features, and other users. Our use of information received from Google APIs will adhere to the Google API Services User Data Policy.

2. How Do We Process Your Information?

We process your personal information to provide, improve, and administer our Services, communicate with you, ensure security and fraud prevention, comply with law, and for other purposes with your consent where required. We only process your information where we have a valid legal basis under applicable law.

• To facilitate account creation, authentication, and management.
• To provide and operate the Services, including debugging, support, and feature delivery.
• To communicate with you about the Services (transactional notices, changes, updates, and security alerts).
• To personalize and improve the Services through analytics and performance monitoring.
• To prevent, detect, and investigate security incidents, fraud, abuse, or violations of the Terms.
• To process payments or related transactions and maintain records consistent with law.
• To provide marketing or promotional messages where permitted and consistent with your preferences (you may opt out at any time).
• To support linked accounts where you choose to connect them and operate those integrations.
• To facilitate mergers, acquisitions, or asset transfers ("Business Transactions") as permitted by law.
• To comply with legal obligations, respond to lawful requests, and enforce our rights under the Terms.

3. What Legal Bases Do We Rely On?

We only process your personal information when we believe it is necessary and we have a valid legal basis to do so under applicable law:

• Consent. Where you have given consent (you may withdraw it at any time).
• Contract. To enter into or perform a contract with you and provide the Services you request.
• Legal obligations. To comply with applicable law.
• Legitimate interests. To operate, secure, and improve the Services, and to prevent fraud and misuse, provided these interests do not override your rights.
• Vital interests. To protect the vital interests of you or another person.

If you are located in Canada: We may process your information if you have given us specific permission (express consent) or in situations where your permission can be inferred (implied consent). You can withdraw your consent at any time subject to legal or contractual restrictions and reasonable notice. In some exceptional cases, we may be legally permitted to process your information without your consent, including for fraud detection, Business Transactions, legal proceedings, or when information is publicly available as specified by regulations.

4. When and With Whom Do We Share Your Personal Information?

We may share your data with third party vendors, service providers, contractors, or agents who perform services for us or on our behalf (for example, hosting, cloud storage, security and fraud prevention, analytics, customer support, email and SMS delivery, authentication and social-login, and payment processing). We permit these third parties to use personal information only to provide services to us.

We may also share your personal information in the following situations:

• Affiliates. We may share information with our affiliates for the purposes described in this Policy.
• Business Transactions. We may share or transfer your information in connection with any Business Transaction.
• Business Partners. We may share your information with our business partners to offer you certain products, services, or promotions.
• Legal, Safety, and Rights. We may disclose information to comply with law or legal process; to enforce our Terms; or to protect the rights, property, or safety of RideBuilder, our users, or others.
• With Your Direction. We share information with third parties when you choose to do so — for example, when you link a social-media or payment account.
• Advertising and Analytics. We may allow service providers to collect information on the Services for analytics and advertising. We do not disclose your personal information to advertisers for their independent use without your consent.
• Aggregated and De-Identified Data. We may share aggregated or de-identified information that does not identify you.

Your interactions with third-party materials and any third-party payments remain subject to the applicable third party's terms and privacy policies; RideBuilder does not control those services.

5. Do We Use Cookies and Other Tracking Technologies?

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some help us maintain security, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

We also allow certain third parties and service providers to use online tracking technologies on our Services for analytics and advertising, including to help manage and display advertisements and tailor them to your interests.

Your choices: You can manage cookies through your browser settings, in-product preferences, and our Cookie Notice tools. Blocking non-essential cookies may affect some features. We honor browser-based Global Privacy Control (GPC) signals where required. For more details, see our Cookie Policy.

6. Do We Offer Artificial Intelligence-Based Products?

We offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies ("AI Features") when enabled in the Services. Our AI Features are designed for model-assisted recommendations, content generation, and natural-language understanding (e.g., search, summarization, prompts).

How we process your data using AI:

• Inputs, outputs, and logs. When you use AI Features, we process inputs, outputs, and logs to operate the feature, troubleshoot, prevent abuse, and improve the Services.
• Third-party model providers. We may use third-party model or infrastructure providers acting as our processors, who are contractually required to protect personal information.
• Training and improvement. We do not use your personal information to train models available to other customers unless you opt in or have made such information public via your Contributions. We may use de-identified and aggregated data to improve our Services.
• Automated decisions. We do not rely solely on automated decision-making that produces legal or similarly significant effects without providing a way to obtain human review.
• Your choices. AI Features are optional where not necessary to provide the Services. Do not submit sensitive personal information in prompts.

7. How Do We Handle Your Social Logins?

Our Services offer you the ability to register and log in using your third-party social media account details (like your Facebook or X logins). Where you choose to do this, we will receive certain profile information about you from your social media provider, typically including your name, email address, and profile picture.

We will use this information only for the purposes described in this Privacy Policy (for example, account creation, authentication, and displaying your avatar with your Contributions). We will not post to your social account without your explicit action. You can disconnect a linked account at any time in settings.

8. How Long Do We Keep Your Information?

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law. In some cases we may retain information after account closure (for example, to comply with law or maintain security logs and backups).

When we have no ongoing legitimate business need to process your personal information, we will either delete or de-identify such information, or securely store your personal information and isolate it from any further processing until deletion is possible.

9. How Do We Keep Your Information Safe?

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process (for example, access controls, encryption in transit, and regular backups). However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

If we believe the security of your information has been compromised, we will notify you as required by law. You are responsible for safeguarding your account credentials and for using a secure device and network.

10. Do We Collect Information From Minors?

We do not knowingly collect, solicit data from, or market to children under 18 years of age. By using the Services, you represent that you are at least 18 (or the age of majority where you live). If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any such data, please contact us at privacy@ridebuilder.com.

11. What Are Your Privacy Rights?

In some regions (like Canada), you have certain rights under applicable data protection laws. These may include the right to: (i) request access and obtain a copy of your personal information; (ii) request rectification or erasure; (iii) restrict the processing of your personal information; (iv) data portability; and (v) not be subject to automated decision-making. In certain circumstances, you may also have the right to object to the processing of your personal information.

Withdrawing your consent: If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us using the details provided in Section 15.

Opting out of marketing: You can unsubscribe from our marketing and promotional communications at any time by clicking the unsubscribe link in emails we send, or by contacting us using the details provided in Section 15.

Account Information: You can review or change the information in your account, or terminate your account, by logging into your account settings. Upon termination, we will deactivate or delete your account and information from our active databases, though we may retain some information in our files.

If you have questions or comments about your privacy rights, you may email us at privacy@ridebuilder.com.

12. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

This does not affect our handling of browser-based Global Privacy Control (GPC) signals, which we honor where required by applicable law.

13. Do United States Residents Have Specific Privacy Rights?

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you, correct inaccuracies, get a copy of, or delete your personal information. These rights may be limited in some circumstances by applicable law.

Categories of Personal Information We Collect

The table below shows the categories of personal information we have collected in the past twelve (12) months.

We will use and retain the collected personal information as needed to provide the Services or for as long as the user has an account with us (Categories A, B, D, F, K).

We do not "sell" personal information and do not "share" personal information. If that changes, we will update this Policy and provide required opt-outs. We have disclosed the following categories to third parties for business or commercial purposes in the preceding twelve (12) months: Category A (Identifiers), Category B (Personal information as defined in the California Customer Records law), Category D (Commercial information), and Category F (Internet or other electronic network activity information).

Your Rights

You have rights under certain US state data protection laws. These rights include:

• Right to know whether or not we are processing your personal information.
• Right to access your personal information.
• Right to correct inaccuracies in your personal information.
• Right to request the deletion of your personal information.
• Right to obtain a copy of the personal information you previously shared with us.
• Right to non-discrimination for exercising your rights.
• Right to opt out of the processing of your personal information if it is used for "sharing," the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.

Depending upon the state where you live, you may also have additional rights including the right to obtain lists of third parties to whom we have disclosed personal information, the right to limit use of sensitive personal information, and others.

How to Exercise Your Rights

To exercise these rights, you can contact us by visiting ridebuilder.com/legal-policy/data-request, by emailing us at privacy@ridebuilder.com, or by referring to the contact details at the bottom of this document. We will respond within the timeframe required by law (generally forty-five (45) days).

We will honor your opt-out preferences if you enact the Global Privacy Control (GPC) opt-out signal on your browser where required by law.

Appeals

Under certain US state data protection laws, if we decline to take action regarding your request, you may appeal our decision by emailing us at privacy@ridebuilder.com. If your appeal is denied, you may submit a complaint to your state attorney general.

California "Shine The Light" Law

California Civil Code Section 1798.83 permits our users who are California residents to request, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes. If you are a California resident and would like to make such a request, please submit your request in writing using the contact details provided in Section 15.

14. Do We Make Updates to This Notice?

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date at the top of this Privacy Policy and will be effective when posted, unless otherwise stated. If we make material changes to this Privacy Policy, we will provide additional notice as appropriate. Where required by law, we will obtain your consent to material changes.

15. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may email us at privacy@ridebuilder.com or contact us by post at:

16. How Can You Review, Update, or Delete the Data We Collect From You?

Based on the applicable laws of your country (or, for US residents, your state of residence), you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. To request to review, update, or delete your personal information, please visit: