Privacy Policy

1. Introduction

Rush Enterprise ("we," "our," or "us") operates the Rush mobile application and website (the "Platform"). This Privacy Policy describes our practices regarding the collection, use, and disclosure of information we receive from users of our Platform.

By using Rush, you consent to the data practices described in this policy. If you do not agree with our policies, please do not use our Platform.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when using our Platform:

• Account Information: Name, email address, phone number, date of birth, profile photo
• Identity Verification: Driver's license, ID documents, selfie verification
• Payment Information: Credit/debit card details (processed securely through Stripe)
• Vehicle Information (Hosts): Vehicle make, model, year, photos, registration documents, insurance information
• Communications: Messages between users, support inquiries, reviews and ratings

2.2 Information Collected Automatically

When you use our Platform, we automatically collect:

• Device Information: Device type, operating system, unique device identifiers
• Location Data: GPS location when you use location-based features (with your permission)
• Usage Data: Pages viewed, features used, search queries, interaction patterns
• Log Data: IP address, browser type, access times, referring URLs

2.3 Information from Third Parties

We may receive information about you from:

• Identity verification services
• Payment processors (Stripe)
• Background check providers (where applicable)
• Social media platforms (if you choose to connect your account)

3. How We Use Your Information

We use the information we collect to:

Purpose	Data Used
Provide and improve our services	Account info, usage data, device info
Process bookings and payments	Payment info, booking details, user profiles
Verify user identity	ID documents, selfie, background checks
Enable location-based features	GPS location data
Send notifications and updates	Email, phone number, push notification tokens
Prevent fraud and ensure safety	Usage patterns, device info, verification data
Provide customer support	Account info, communications, booking history
Comply with legal obligations	Various data as required by law

4. Information Sharing

We share your information in the following circumstances:

4.1 With Other Users

• Hosts see: Renter's name, profile photo, rating, and booking details
• Renters see: Host's name, profile photo, rating, and vehicle information
• We never share your full payment details with other users

4.2 With Service Providers

We work with trusted third parties who assist us in operating our Platform:

• Stripe: Payment processing and fraud prevention
• SendGrid: Email notifications and communications
• Cloud hosting providers: Data storage and infrastructure
• Analytics services: Usage analysis and improvement

4.3 For Legal Reasons

We may disclose information when required to:

• Comply with applicable laws or legal processes
• Respond to lawful requests from public authorities
• Protect our rights, privacy, safety, or property
• Enforce our Terms of Service

5. Data Retention

We retain your personal information for as long as:

• Your account remains active
• Needed to provide you services
• Required by law or for legal purposes
• Necessary for fraud prevention and safety

After account deletion, we may retain certain data in anonymized form for analytics, or as required by law.

6. Your Rights and Choices

Depending on your location, you may have the following rights:

6.1 Access and Portability

Request a copy of your personal data in a portable format.

6.2 Correction

Update or correct inaccurate personal information through your account settings.

6.3 Deletion

Request deletion of your account and personal data. Some data may be retained for legal or safety purposes.

6.4 Opt-Out

• Marketing emails: Unsubscribe link in emails
• Push notifications: Device settings or app settings
• Location tracking: Device location permissions

7. Data Security

We implement industry-standard security measures to protect your data:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure payment processing through PCI-compliant providers
• Regular security assessments and monitoring
• Access controls and authentication measures
• Employee training on data protection

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

8. Children's Privacy

Rush is not intended for users under 21 years of age. We do not knowingly collect personal information from individuals under 21. If we become aware that we have collected such information, we will take steps to delete it promptly.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using Rush, you consent to the transfer of your information to the United States and other countries where we operate.

10. Third-Party Links

Our Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new policy on our Platform
• Updating the "Last Updated" date
• Sending you an email notification (for significant changes)

Your continued use of Rush after changes constitutes acceptance of the updated policy.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising your rights

We do not sell your personal information to third parties.

13. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation including:

• Right to access, rectification, and erasure
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: support@rush-enterprise.com
• General Inquiries: contact@rush-enterprise.com
• Data Protection Officer: privacy@rush-enterprise.com

We will respond to your inquiry within 30 days.