Privacy Policy

1. Introduction

Welcome to Checkrides.io ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

2. Information We Collect

2.1 Personal Information

When you register for an account or use our Service, we may collect the following personal information:

• Account Information: Full name, email address, password (encrypted)
• Profile Information: Optional information you choose to provide about yourself
• Payment Information: Billing details and payment card information (processed securely through Stripe)
• Communication Data: Information you provide when you contact us or submit content

2.2 User Content

We collect content you submit to the Service, including:

• Checkride experiences and reviews ("gouges")
• Comments and feedback
• Messages sent through the Service

2.3 Automatically Collected Information

When you access the Service, we automatically collect certain information, including:

• Log Data: IP address, browser type, operating system, referring URLs, pages viewed, date/time stamps
• Device Information: Device type, unique device identifiers, mobile network information
• Usage Data: How you interact with the Service, features used, time spent, clickstream data
• Location Data: Approximate geographic location based on IP address

2.4 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to collect information and improve your experience. These technologies help us:

• Remember your preferences and settings
• Understand how you use the Service
• Provide and improve our features
• Measure the effectiveness of our marketing campaigns
• Detect and prevent fraud

You can control cookies through your browser settings, but disabling cookies may limit your ability to use certain features of the Service.

3. How We Use Your Information

We use the collected information for various purposes, including:

• Provide and Maintain the Service: Process registrations, authenticate users, provide requested features
• Improve the Service: Analyze usage patterns, develop new features, enhance user experience
• Communication: Send service-related emails, respond to inquiries, provide customer support
• Marketing: Send promotional emails about new features or services (you can opt out at any time)
• Security: Monitor and prevent fraudulent, unauthorized, or illegal activity
• Legal Compliance: Comply with legal obligations and enforce our Terms of Service
• Analytics: Understand user behavior and measure the effectiveness of our Service
• Payment Processing: Process transactions and manage subscriptions

4. How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Supabase: Authentication and database hosting
• Stripe: Payment processing (Stripe receives payment card information directly from you)
• PostHog: Analytics and product insights
• Resend: Email delivery services
• Vercel: Hosting and infrastructure

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Public Content

Content you submit, such as checkride reviews and gouges, may be visible to other users of the Service. Do not include sensitive personal information in publicly visible content.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, government agencies).

4.4 Business Transfers

If Checkrides.io is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different Privacy Policy.

4.5 With Your Consent

We may share your information with third parties when you give us explicit consent to do so.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Regular security audits and assessments
• Access controls and authentication mechanisms
• Secure password storage using industry-standard hashing

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain information for legal, accounting, or security purposes. Some information may remain in backup copies for a limited period.

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

7.1 Access and Portability

You have the right to request access to the personal information we hold about you and to receive a copy of it in a structured, commonly used, and machine-readable format.

7.2 Correction

You have the right to request that we correct inaccurate or incomplete personal information. You can update most information through your account settings.

7.3 Deletion

You have the right to request deletion of your personal information, subject to certain exceptions (e.g., legal obligations, fraud prevention).

7.4 Objection and Restriction

You have the right to object to or restrict certain processing of your personal information, including for marketing purposes.

7.5 Withdrawal of Consent

Where we rely on your consent to process your information, you have the right to withdraw that consent at any time.

7.6 Opt-Out of Marketing

You can opt out of marketing emails by clicking the "unsubscribe" link in any marketing email or by updating your email preferences in your account settings.

7.7 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your CCPA rights

7.8 European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including those outlined in sections 7.1-7.5 above.

7.9 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

8. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.

If you are located outside the United States and choose to provide information to us, please note that we transfer the information, including personal information, to the United States and process it there. By using the Service, you consent to this transfer.

9. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information from our systems.

10. Third-Party Links

The Service may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit.

11. Do Not Track Signals

Some browsers support a "Do Not Track" (DNT) feature. Our Service does not currently respond to DNT signals. We track user activity as described in this Privacy Policy regardless of DNT signals.

12. Analytics and Advertising

12.1 Analytics

We use PostHog for analytics to help us understand how users interact with the Service. PostHog may use cookies and similar technologies to collect information about your use of the Service. You can learn more about PostHog's privacy practices at posthog.com/privacy.

12.2 Advertising

We may use third-party advertising partners to display ads on our Service or to manage our advertising on other sites. These partners may use cookies and similar technologies to collect information about your activities on our Service and other websites to provide you with targeted advertising.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page and updating the "Last Updated" date
• Sending an email notification to the email address associated with your account
• Displaying a prominent notice on the Service

Your continued use of the Service after any changes to this Privacy Policy constitutes acceptance of those changes.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: [email protected]
Legal: [email protected]
Website: checkrides.io/contact

15. Data Protection Officer

If you are located in the EEA, UK, or Switzerland and have concerns about our data practices, you may contact our Data Protection Officer at [email protected].

You also have the right to lodge a complaint with your local data protection authority.