Privacy Policy

Information You Provide

• Account Information: Name, email address, phone number, date of birth, profile photo, and password when you create an account.
• Identity Verification: Driver's license information, government-issued ID, and selfie photos for identity verification purposes.
• Payment Information: Credit/debit card numbers, bank account details, and billing addresses processed through our secure third-party payment provider (Stripe). Movyn does not store full payment card numbers.
• Vehicle Information: Vehicle make, model, year, VIN, license plate, photos, descriptions, and location data for Hosts listing vehicles.
• Communications: Messages sent through the Platform between Hosts and Guests, customer support inquiries, and feedback.
• Reviews and Ratings: Reviews, star ratings, and public feedback you provide about trips and other users.

Information Collected Automatically

• Device Information: IP address, browser type, operating system, device identifiers, and mobile network information.
• Usage Data: Pages visited, features used, search queries, booking history, click patterns, and time spent on the Platform.
• Location Data: Approximate location based on IP address. With your consent, precise GPS location for finding nearby vehicles and facilitating pickups/returns.
• Cookies and Tracking: Cookies, web beacons, and similar technologies to recognize your browser, remember preferences, and analyze usage patterns.

Information from Third Parties

• Background Checks: Driving records and criminal background information from authorized screening services for safety purposes.
• Social Login: Name, email, and profile information from Google, Apple, or Facebook if you choose to sign in with a social account.
• Insurance Partners: Claims history and coverage information from our insurance partners for protection plan administration.

We use the information we collect to:

• Create and manage your account
• Facilitate bookings, payments, and communications between Hosts and Guests
• Verify your identity and driving eligibility
• Process payments and prevent fraud
• Provide customer support and respond to inquiries
• Send booking confirmations, trip reminders, and service updates
• Personalize your experience, including search results and recommendations
• Improve the Platform through analytics and usage research
• Enforce our Terms of Service and protect the safety of our community
• Comply with legal obligations and respond to lawful requests
• Send promotional communications (with your consent; you can opt out at any time)

We do not sell your personal information. We may share your information in the following circumstances:

• Between Users: When you book a vehicle, your name, profile photo, and contact information are shared with the Host (and vice versa) to facilitate the trip. Review content and ratings are publicly visible.
• Service Providers: With trusted third-party vendors who perform services on our behalf, including payment processing (Stripe), identity verification, background checks, cloud hosting (AWS), email delivery, and analytics. These providers are contractually bound to protect your data.
• Insurance Partners: With our insurance and protection plan partners to administer coverage, process claims, and handle incidents.
• Legal Compliance: When required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In connection with a merger, acquisition, bankruptcy, or sale of all or a portion of our assets. You will be notified of any such change.
• With Your Consent: When you explicitly authorize us to share your information for a specific purpose.

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest (AES-256)
• Secure payment processing through PCI DSS-compliant providers
• Regular security audits and vulnerability assessments
• Access controls limiting employee access to personal data on a need-to-know basis
• Two-factor authentication available for all accounts
• Automated monitoring for suspicious activity and unauthorized access

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security and encourage you to use strong, unique passwords and enable two-factor authentication.

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Specific retention periods include:

• Account data: Retained while your account is active and for 3 years after deletion
• Transaction records: Retained for 7 years for tax and legal compliance
• Communications: Retained for 2 years after the last interaction
• Usage logs: Retained for 1 year
• Identity verification documents: Retained for 3 years after verification

You may request earlier deletion of your data, subject to legal retention requirements.

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Portability: Request a machine-readable copy of your data.
• Opt-Out: Opt out of marketing communications at any time by clicking "unsubscribe" in any promotional email or updating your notification preferences.
• Do Not Sell: We do not sell personal information. California residents may still submit a "Do Not Sell" request for verification.
• Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at privacy@movyn.net. We will respond to verified requests within 30 days.

We use the following types of cookies:

• Essential Cookies: Required for the Platform to function properly (authentication, security, load balancing).
• Functional Cookies: Remember your preferences, language, and settings.
• Analytics Cookies: Help us understand how you use the Platform so we can improve it (e.g., Google Analytics).
• Marketing Cookies: Used to deliver relevant advertisements and measure campaign effectiveness. Only activated with your consent.

You can manage cookie preferences through your browser settings or our cookie consent banner. Disabling certain cookies may limit Platform functionality.

The Movyn Platform is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us at privacy@movyn.net.

Movyn is based in the United States. If you access the Platform from outside the United States, your information may be transferred to and processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses where applicable.

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to know what personal information is collected, used, and shared
• Right to delete personal information held by us and our service providers
• Right to opt out of the sale or sharing of personal information
• Right to correct inaccurate personal information
• Right to limit the use of sensitive personal information
• Right to non-discrimination for exercising privacy rights

To submit a request, email privacy@movyn.net or call 1-800-MOVYN-00. We will verify your identity before processing any request.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Platform, sending you an email, or updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your information.

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

• Email: privacy@movyn.net
• Address: Movyn, Inc., 548 Market Street, Suite 35, San Francisco, CA 94104
• Phone: 1-800-MOVYN-00
• Data Protection Officer: dpo@movyn.net

If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.