1 Scope

This Privacy Policy applies to information processed by Book It Rides in connection with the Platform. It does not apply to transportation services provided by Operators, or to Operator websites, apps, or offline practices. Operators are independent businesses and are responsible for their own privacy notices and legal compliance.

International users. If you access or use the Platform from outside the United States, the International Privacy Addendum supplements this Privacy Policy for cross-border processing topics.

This Privacy Policy is written in English. Any translation is provided for convenience only; the English version controls to the maximum extent permitted by law.

2 Key Definitions

“Operator” means an independent transportation provider using the Platform.
“End-Customer” means a rider/passenger/customer of an Operator.
“Personal Data” / “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual, as defined by applicable law.
“Process” / “Processing” means collection, use, storage, disclosure, transmission, analysis, deletion, or other handling of information.

3 Roles & Responsibility

The Platform supports Operator-managed booking/quote/reservation workflows. For privacy purposes:

Operator-controlled End-Customer data: Operators generally determine what End-Customer data is collected and how it is used for their transportation services. Operators are typically the “controller” (or equivalent) of that data.
Book It Rides as service provider/processor: When we handle Operator-controlled End-Customer data to provide the Platform, we generally act as a “processor” or “service provider” to the Operator.
Book It Rides business/admin data: We are the controller of our own account, billing, support, security, and Platform usage data.

If an Operator has executed a DPA via DocuSign or Adobe Sign, that executed DPA governs the parties’ controller/processor obligations for the covered processing.

End-Customer requests about an Operator’s transportation services (including bookings, pricing disputes, refunds, and service fulfillment) must be directed to the Operator.

4 Information We Collect

A Account & Business Information (Operators and business users)

Business name, business contact name, email, phone, address (if provided)
Account credentials and authentication data (e.g., username, password hash, access tokens)
Subscription plan, billing status, invoices/receipts, and transaction references
Customer support communications and requests

B Platform & Technical Data

IP address and approximate location (derived from IP)
Browser/device information, operating system, device identifiers
Log files, timestamps, diagnostic and performance data
Security events (e.g., suspicious login attempts), abuse prevention signals

C Operator-Controlled End-Customer Data (processed to provide the Platform)

Booking/reservation details and status (as configured by the Operator)
Trip-related inputs (pickup/drop-off locations, dates/times, notes)
End-Customer contact details (name, phone, email) provided through Operator workflows
Communications logs (e.g., messages/notifications sent as configured by Operator)

D Payment Data

Payment card data is generally handled by payment processors. We may receive limited payment-related metadata (e.g., last 4 digits, card brand, billing ZIP, transaction IDs, payment status) depending on the processor and configuration.

E Sensitive Data

The Platform is not intended for “sensitive” or “special category” data (e.g., health data). Operators and users should not submit such data unless expressly agreed in writing.

5 Sources of Information

Directly from you: when you create an account, configure the Platform, submit forms, or contact support.
From Operators and their End-Customers: through Operator-configured booking/quote/reservation workflows.
Automatically: through cookies and similar technologies and through server logs when you use the Platform.
From service providers: such as hosting providers, analytics providers, and payment processors, consistent with this Policy.

6 How We Use Information

We use information for the following purposes:

Provide, operate, maintain, and support the Platform
Authenticate users and administer accounts
Process subscriptions, billing, and payments (Platform fees)
Secure the Platform, prevent fraud/abuse, and debug/repair errors
Monitor performance, improve features, and develop new functionality
Communicate about updates, security notices, and administrative messages
Comply with law and enforce our agreements and policies

We do not use Operator-controlled End-Customer data for third-party advertising. Operators control what they communicate to End-Customers and are responsible for their own marketing consents and compliance.

7 How We Disclose Information

We may disclose information in the following circumstances:

Service providers / subprocessors: hosting, infrastructure, analytics, customer support tools, email/SMS delivery, and payment processors that perform services on our behalf.
Legal and safety: to comply with law, respond to lawful requests, protect rights and safety, investigate fraud/abuse, or enforce our agreements.
Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets (subject to confidentiality and applicable law).
With your direction: when you request or configure integrations and sharing (e.g., third-party apps you connect).

We do not disclose personal information to third parties for their own direct marketing purposes without your direction or consent, where required by applicable law.

8 Cookies & Similar Technologies

We use cookies and similar technologies (e.g., local storage, pixels, SDKs) for:

Strictly necessary functions (authentication, session management, security)
Preferences (remembering settings)
Performance & analytics (understanding usage to improve the Platform)

You can control cookies through your browser settings. If you disable certain cookies, parts of the Platform may not function properly.

Where legally required (for example, in certain jurisdictions outside the U.S.), Operators or Book It Rides may present additional cookie notices/controls.

9 Advertising / “Sale” / “Share”

Book It Rides does not “sell” personal information or “share” personal information for cross-context behavioral advertising, as those terms are defined under certain U.S. state privacy laws.

We do not use Operator-controlled End-Customer data for targeted advertising.

If our practices change in a way that would be considered a “sale” or “sharing” under applicable law, we will update this Policy and implement any required opt-out mechanisms.

10 Data Security

We maintain commercially reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, or alteration. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your login credentials and for all activity under your account.

11 Data Retention

We retain information for as long as reasonably necessary to:

Provide and improve the Platform
Comply with legal obligations
Resolve disputes and enforce agreements
Maintain security and audit logs

Operator-controlled End-Customer data is retained in accordance with Operator configuration/instructions, contractual commitments (including any executed DPA), and technical limitations (e.g., backup cycles).

12 International Data Transfers

Book It Rides is operated from the United States. Information may be processed and stored in the United States and other locations where we or our service providers operate.

If a lawful transfer mechanism is required by applicable law for cross-border transfers, the parties will rely on the mechanism specified in an executed agreement (such as an executed DPA or transfer addendum), where applicable.

For additional international information, see the International Privacy Addendum.

13 Your Rights & Requests

A. End-Customers (riders/passengers) using an Operator’s booking flow

If you are an End-Customer, the Operator controls your transportation/booking data. Please submit privacy requests (access, deletion, correction, etc.) to the Operator first. If we receive your request and we can identify the relevant Operator, we may refer the request to the Operator and/or assist the Operator where legally required and technically feasible.

B. Operators and business users

Depending on your jurisdiction and the nature of the data, you may have rights to request access, correction, deletion, portability, or to object/restrict certain processing. We will respond as required by applicable law and subject to identity verification, security requirements, and legal exceptions.

C. U.S. State Privacy Disclosures (e.g., CA, CO, CT, UT, VA and similar)

These laws may grant residents certain rights, such as: (i) access; (ii) deletion; (iii) correction; (iv) portability; (v) opt-out of certain processing (e.g., targeted advertising, sale/sharing); and (vi) non-discrimination for exercising rights.

“Sale” / “Share”: As stated in Section 9, we do not sell or share personal information for cross-context behavioral advertising.

How to submit requests: Email us at bookittechnologies@gmail.com with the subject line “Privacy Request.” We may request additional information to verify your identity and to understand the scope of your request.

Authorized agents (where permitted by law) must provide proof of authorization. We may still require verification directly with the individual, as permitted by law.

D. EEA/UK/Similar Rights

If a data protection regime such as GDPR applies to our processing, you may have rights such as access, rectification, erasure, restriction, objection, and portability, and the right to lodge a complaint with a supervisory authority. These rights apply only to the extent the law applies to our processing in the relevant role (controller vs. processor) and subject to legal limitations.

14 Children’s Privacy

The Platform is intended for business users (Operators and their staff) and is not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can take appropriate action.

15 Third-Party Links & Integrations

The Platform may include links to third-party services or allow integrations (e.g., analytics, email/SMS providers, payment processors, mapping, calendars). Third parties’ privacy practices are governed by their own policies, not this Privacy Policy.

16 Changes to This Policy

We may update this Privacy Policy from time to time. Updates are effective when posted, as indicated by the “Last Updated” date. Your continued use of the Platform after changes become effective means you accept the revised Privacy Policy to the maximum extent permitted by law.

17 Contact

Book It Technologies LLC (DBA Book It Rides)
Indiana, United States
Privacy & Legal: bookittechnologies@gmail.com