Privacy Policy

1. What We Collect

We collect information you provide directly and information generated by your use of our services:

Information you provide:

• Name, phone number, and email address when you book a ride or contact us
• Pickup and drop-off addresses for trip routing
• Payment information (processed by Stripe — we do not store card numbers)
• Driver application information (license, vehicle details, insurance documents)
• Messages you send us through the contact form or email

Information collected automatically:

• IP address and approximate location when you visit our website
• Browser type, device type, and operating system
• Pages you visit, time spent, and how you arrived at our site
• Driver location during active trips (only while the app is in use)

2. How We Use It

We use your information to:

• Process and fulfill your ride bookings
• Send booking confirmations and driver assignment notifications via SMS and email
• Calculate fares and process payments
• Communicate with you about your trip or account
• Match available drivers to open ride requests
• Improve our service based on usage patterns
• Comply with legal obligations

3. We Don't Sell Your Data

Bay State Ride does not sell, rent, or trade your personal information to third parties for their marketing purposes. Your data is used only to provide you with the transportation services you've requested.

This applies regardless of whether you are a customer or a driver.

4. When We Share Data

We share limited information only when necessary to provide our service:

• Assigned driver: Your first name and pickup location are shared with your driver once they accept your trip
• Stripe: Payment processing. Stripe's privacy policy governs their data use. We never store full card numbers
• Twilio: SMS delivery of booking confirmations and driver notifications
• Cloudflare: Infrastructure, DDoS protection, and edge caching
• Law enforcement: Only if required by law or valid legal process

We do not share data with advertisers, data brokers, or any party for marketing purposes.

5. Cookies & Analytics

We use a small number of cookies and similar technologies:

• Session cookies: Used to keep you logged in to the driver app. These expire when you close your browser or sign out
• Cloudflare cookies: Security and performance cookies set by our hosting provider
• Analytics: We may use privacy-focused analytics (such as Cloudflare Web Analytics) that do not use cross-site tracking cookies and do not share data with third parties

We do not use Google Analytics, Facebook Pixel, or other third-party ad-tracking cookies. You can disable cookies in your browser settings; note that the driver app requires session cookies to function.

6. Data Retention

We keep your information for as long as necessary to provide our services and comply with legal requirements:

• Booking records: Retained for 3 years for accounting and dispute resolution purposes
• Driver records: Retained for the duration of the driver relationship plus 2 years
• Contact form submissions: Retained for 1 year, then deleted
• Website logs: Retained for 30 days

You may request deletion of your data at any time (see Section 8). Certain records may be retained longer if required by law.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Ask us to correct inaccurate or incomplete information
• Deletion: Request that we delete your personal information (see Section 8)
• Portability: Receive your data in a structured, machine-readable format
• Opt-out of SMS: Reply STOP to any text message to unsubscribe from notifications

Residents of California have additional rights under CCPA, including the right to know what personal information is collected and the right to non-discrimination for exercising privacy rights.

8. Request Deletion

To request deletion of your personal data, email us at ride@baystateride.com with the subject line "Data Deletion Request" and include:

• Your full name
• The phone number or email address associated with your account or bookings
• What data you'd like deleted (your account, booking history, contact form submissions, etc.)

We will confirm receipt within 5 business days and complete your request within 30 days. Note that we may retain certain records if required by law (e.g., financial records for tax purposes).

9. Security

We take reasonable technical and organizational measures to protect your personal information, including:

• HTTPS encryption on all pages and API endpoints
• Passwords hashed with bcrypt before storage
• Payment processing handled entirely by Stripe (PCI-DSS compliant)
• Access to our database limited to authenticated personnel
• Infrastructure protected by Cloudflare's security layer

No method of transmission over the internet is 100% secure. We will notify affected users promptly in the event of a data breach as required by applicable law.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

• Email: ride@baystateride.com
• Phone: 781-866-0921

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page reflects the most recent version. Continued use of our services after changes constitutes acceptance of the updated policy.