Privacy Policy

This page is required by

1 Information We Collect

We collect information you provide directly (name, email, phone, licence details) and automatically (IP address, device info, location data) to operate our platform safely.

• Account Information: Full name, email address, phone number, profile photo
• Driver Information: Driver's licence details, vehicle information, insurance documents
• Ride Information: Pickup and dropoff locations, travel dates, number of passengers
• Payment Information: Processed securely through Stripe — we never store full card numbers
• Communication Data: In-app messages between drivers and passengers
• Device & Usage Data: IP address, browser type, device information, pages visited

2 How We Use Your Data

Your data is used to match drivers with passengers, process payments, verify identities, send notifications, and improve our services. We never sell your data to third parties.

• Match passengers with available drivers on requested routes
• Process secure payments through Stripe
• Verify driver identities and licence validity
• Send ride confirmations, departure reminders, and booking updates
• Provide customer support and resolve disputes
• Improve platform safety and prevent fraud
• Analyze usage patterns to enhance our service

3 Data Sharing

We share minimal necessary data between matched drivers and passengers (names, contact methods via proxy numbers). We use Stripe for payments and Supabase for secure data storage. We share data only:

• Between matched drivers and passengers (name, pickup/dropoff locations)
• With Stripe for payment processing (PCI-compliant)
• With Supabase for secure database hosting
• When required by law, court order, or government authority
• With your explicit consent for any other purpose

4 Your Rights

You can access, update, or delete your account and data at any time through your profile settings. You have the following rights:

• Access: View and download your personal data
• Update: Correct inaccurate or incomplete information
• Delete: Request full account and data deletion (see our Data Deletion page)
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to certain processing of your data

To exercise any of these rights, visit your Profile settings or email privacy@ridecarpooling.com.

5 Cookies & Consent Management

We use cookies and similar tracking technologies on RideCarpooling.com. To comply with GDPR and PIPEDA (Canada's privacy law), we have our own built-in Consent Management system. You have full control over which categories of cookies are active.

Your consent preferences are stored in your browser's local storage under the key rc_cookie_consent_v2. You can change or withdraw your consent at any time by opening the Cookie Preferences panel from our website footer.

For a full breakdown of every cookie we use, third-party services, opt-out links, and your rights under GDPR and PIPEDA, see our Cookie Policy.

6 Security

We use industry-standard encryption, secure APIs, and regular security audits to protect your data. All payments are PCI-compliant through Stripe. Specific security measures include:

• 256-bit TLS encryption for all data in transit
• Encrypted data storage with Supabase's secure infrastructure
• PCI-DSS Level 1 compliance through Stripe for payment processing
• Regular security audits and penetration testing
• Two-factor authentication for administrative access
• Automated monitoring and alerting for suspicious activity

For details on the limits of our verification processes and liability, please read our Disclaimer.

7 Data Retention

We retain your personal data only for as long as necessary to provide our services or as required by law:

• Active accounts: Data retained while account is active
• Deleted accounts: Personal data permanently removed within 30 days
• Transaction records: Retained up to 7 years as required by Canadian tax law (anonymized)
• Messages: Retained until account deletion

8 Children's Privacy

RideCarpooling.com is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal data, we will delete it immediately.

9 Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via email or through a prominent notice on our website. Continued use of the platform after changes constitutes acceptance of the updated policy.