1. Introduction

PointA2B ("we", "us", "our", or "the Company") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform and services (the "Platform").

Current Service Area: PointA2B currently operates in Newfoundland and Labrador, Canada. We may expand our services to other provinces and territories in Canada in the future. This Privacy Policy applies to all users of the Platform regardless of their location.

This Privacy Policy is designed to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation in Canada. Currently, as we operate in Newfoundland and Labrador, we comply with PIPEDA, which applies in provinces without substantially similar provincial privacy legislation. If and when we expand to provinces with their own privacy legislation (such as British Columbia's PIPA or Alberta's PIPA), we will ensure compliance with applicable provincial laws in those jurisdictions.

By using our Platform, you consent to the collection, use, and disclosure of your personal information in accordance with this Privacy Policy. If you do not agree with our policies and practices, you must not use our Platform.

2. Information We Collect

2.1 Information You Provide to Us

We collect personal information that you voluntarily provide to us when you:

• Create an Account: Full name, age, phone number, password, and optional profile information (profile picture, bio)
• Post Rides: Listing details, locations, dates, pricing, descriptions, and images
• Communicate with Other Users: Messages sent through the Platform
• Contact Us: Information you provide when contacting our support team

2.2 Information Automatically Collected

When you use our Platform, we automatically collect certain information, including:

• Usage Data: Pages visited, features used, time spent on the Platform, click patterns
• Device Information: Device type, operating system, browser type, IP address, device identifiers
• Location Data: General location data (city/region level) when you use location-based features
• Log Data: Access times, error logs, and system activity

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activities. You can control cookie settings through your browser preferences. Note that disabling cookies may affect the functionality of the Platform.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• Service Provision: To provide, operate, and maintain the Platform and its features
• Account Management: To create and manage your account, authenticate your identity, and process your requests
• Communication: To facilitate communication between users through our messaging system
• Matching Services: To connect users based on their listings and preferences
• Safety and Security: To monitor for fraudulent, illegal, or harmful activity, and to protect users and the Platform
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Platform Improvement: To analyze usage patterns, improve our services, and develop new features
• Customer Support: To respond to your inquiries, provide technical support, and resolve issues
• Communication: To send you important notices, updates, and administrative information (you may not opt-out of these communications)

4. Disclosure of Your Information

We may disclose your personal information in the following circumstances:

4.1 With Other Users

Your profile information (name, profile picture, bio, ratings) and listings are visible to other users of the Platform. Messages you send are accessible to the intended recipient.

4.2 Service Providers

We may share your information with third-party service providers who perform services on our behalf, including:

• Cloud hosting and storage providers (Supabase)
• Analytics and performance monitoring services
• Customer support tools
• Payment processors (if and when implemented)

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

4.5 With Your Consent

We may share your information with third parties when you have provided explicit consent for such sharing.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Account Information: Retained while your account is active and for a reasonable period after account deletion for legal and safety purposes
• Listings: Retained while active and for historical records as required by law
• Messages: Retained to facilitate communication between users
• Log Data: Retained for up to 12 months for security and troubleshooting purposes

When we no longer need your personal information, we will securely delete or anonymize it in accordance with our data retention policies and applicable law.

6. Security of Your Information

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security assessments and updates
• Limited access to personal information on a need-to-know basis
• Secure hosting infrastructure with industry-standard security practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. Your Rights and Choices

Under Canadian privacy law, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request access to the personal information we hold about you. You can access much of your information directly through your account settings.

7.2 Right to Correction

You have the right to request correction of inaccurate or incomplete personal information. You can update most information through your account settings.

7.3 Right to Withdraw Consent

You may withdraw your consent to the collection, use, or disclosure of your personal information at any time, subject to legal and contractual restrictions. Note that withdrawing consent may limit your ability to use certain features of the Platform.

7.4 Right to Deletion

You may request deletion of your account and personal information. You can delete your account directly in the app by going to Profile → Account → Delete Account. We will honor such requests subject to our legal obligations to retain certain information for record-keeping, legal compliance, and safety purposes.

7.5 Account Settings

You can update or modify certain personal information directly through your account settings on the Platform. Account deletion is also available directly in the app via Profile → Account → Delete Account. For other requests, please contact us using the information provided in Section 12.

8. Cross-Border Data Transfers

Your personal information may be processed and stored outside of Canada, including in the United States and other jurisdictions where our service providers operate. When we transfer personal information outside of Canada, we ensure that appropriate safeguards are in place to protect your information in accordance with Canadian privacy laws.

By using our Platform, you consent to the transfer of your personal information to jurisdictions outside of Canada for the purposes described in this Privacy Policy.

9. Children's Privacy

Our Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe we have collected information from a child under 18, please contact us immediately.

10. Third-Party Links and Services

Our Platform may contain links to third-party websites or services that are not owned or controlled by PointA2B. We are not responsible for the privacy practices of such third parties. We encourage you to review the privacy policies of any third-party websites or services you access through our Platform.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We may also notify you via email or through the Platform for significant changes.

Your continued use of the Platform after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.

12. Contact Us and Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, or if you wish to exercise your rights under Canadian privacy law, please contact our Privacy Officer:

Filing a Complaint: As we currently operate in Newfoundland and Labrador, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada (OPC) if you believe we have not addressed your privacy concerns adequately. If we expand to provinces with their own privacy commissioners (such as the Office of the Information and Privacy Commissioner of British Columbia or the Office of the Information and Privacy Commissioner of Alberta), users in those jurisdictions may also file complaints with the appropriate provincial authority.

13. Consent

By using our Platform and providing your personal information, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not consent to these practices, please do not use our Platform.

You may withdraw your consent at any time by contacting us or by deleting your account, subject to legal and contractual restrictions and reasonable notice.

14. Specific Provisions for Location Data

Our Platform uses location data to match users and facilitate ride sharing services. We collect general location information (city/region level) when you use location-based features. Ride Now uses your approximate location to show nearby availability. We do not continuously track your precise location.

You can control location permissions through your device settings. Note that disabling location services may limit certain features of the Platform.

15. Data Breach Notification

In the event of a data breach that poses a real risk of significant harm to you, we will notify you and the appropriate privacy authorities as required by Canadian privacy law, including PIPEDA's breach notification requirements. Notifications will be provided as soon as feasible after we become aware of the breach.

16. Minors and Capacity

Our Platform is intended for users who are at least 18 years of age and have the legal capacity to enter into binding agreements. By using the Platform, you represent and warrant that you meet these requirements.