Pursuant to the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), we are required to inform California residents at or before the point of data collection about the categories of personal information we collect, the purposes for which we use it, whether it is sold or shared, and how long we retain it.
We collect the following categories of personal information:
Identifiers (e.g., name, email address, phone number, IP address)
- Used for account management, communication, identity verification, and fraud prevention.
- Identifiers are not sold or shared, except as disclosed within this Policy.
- Retention: maintained for the duration of the relationship plus up to 7 years for compliance and recordkeeping.
Commercial Information (e.g., purchase or claim history)
- Used for fulfilling orders, underwriting, and recordkeeping.
- Commercial Information is not sold or shared, except as disclosed within this Policy.
- Retention: retained for up to 7 years in line with accounting, tax, and insurance requirements.
Internet or Network Activity (e.g., browsing history, device data, cookies)
- Used for analytics, marketing, and website performance monitoring.
- Internet or Network Activity is not sold or shared, except as disclosed within this Policy.
- Retention: retained for up to 24 months, unless needed longer for security or fraud prevention.
Geolocation Data (via IP address)
- Used for fraud prevention and website security.
- Geolocation Data is not sold or shared, except as disclosed within this Policy.
- Retention: raw sensor data is retained only as long as needed to generate trip summaries and safety insights (typically no longer than 24 months), after which it is deleted or de-identified. Derived analytics are retained for up to 24 months.
Inferences (e.g., preferences derived from interactions)
- Used for improving user experience and personalizing services.
- Inferences are not sold or shared, except as disclosed within this Policy.
- Retention: retained for up to 24 months.
Sensitive Personal Information (if collected)
- Used only for essential business purposes such as fraud prevention or legal compliance.
- We do not use or disclose Sensitive Personal Information to infer characteristics about you, or for any purpose that would trigger the right to limit under CPRA.
- Retention: retained only as long as necessary to fulfill the disclosed purpose or as legally required.
We do not use or disclose Sensitive Personal Information for purposes other than those explicitly permitted under applicable law. We do not sell or share personal information for monetary compensation or for cross-context behavioral advertising.
For additional details about your rights under California law, please see the California section of this Privacy Policy.