Privacy Policy

Effective September 20, 2026 · Version 2026-09-20.us-launch

Also see our Terms of Service, Trip protection terms, Host Agreement, and Trust & Safety.

JOYRIDE PRIVACY POLICY

Effective Date: September 20, 2026

Version 1.0

This Privacy Policy explains how JoyRide (“JoyRide,” “we,” “us,” or “our”) collects, uses, discloses, retains, protects, and otherwise processes personal information in connection with the JoyRide website, mobile applications, peer-to-peer vehicle marketplace, communications, identity and driver verification, payment processing, vehicle listings, bookings, trips, customer support, and related services (collectively, the “Services”).

JoyRide is committed to being transparent about the information we collect and how that information is used. Because JoyRide operates a nationwide peer-to-peer vehicle marketplace, this Privacy Policy is intended to address privacy requirements that may apply across the United States, including state-specific privacy laws.

This Privacy Policy should be read together with JoyRide’s Terms of Service and any other privacy notices presented at the time information is collected.

1. SCOPE AND ACCEPTANCE

This Privacy Policy applies to personal information collected through or in connection with the Services, including information collected from:

• Guests who search for, book, and use vehicles;
• Hosts who list vehicles;
• Authorized drivers;
• Individuals who create or manage JoyRide accounts;
• Individuals who communicate with JoyRide;
• Individuals who visit the JoyRide website or use the JoyRide application; and
• Other individuals who interact with the Services.

By using the Services, you acknowledge that you have been provided this Privacy Policy.

Where applicable law requires JoyRide to obtain consent for a particular processing activity, JoyRide will obtain that consent separately.

This Privacy Policy does not override a specific privacy notice provided at or before collection, a legally required state-specific notice, or the terms of a specific third-party service. Where another notice applies to a particular processing activity, that more specific notice will control to the extent required by law.

2. WHO JOYRIDE IS

JoyRide is a peer-to-peer vehicle marketplace.

Hosts may list vehicles on the marketplace, and Guests may search for, book, pay for, and use those vehicles.

JoyRide facilitates marketplace transactions and related services but does not own every vehicle listed on the marketplace and is not the traditional rental company for a Host’s vehicle.

For privacy purposes, JoyRide may act as a business, controller, or similar entity with respect to information for which JoyRide determines the purposes and means of processing.

JoyRide may also use third-party service providers and processors that process personal information on JoyRide’s behalf.

Certain third parties, including payment and identity providers, may independently act as controllers or similar entities for information they process for their own legal, security, fraud-prevention, compliance, or service-improvement purposes.

3. WHAT COUNTS AS PERSONAL INFORMATION

“Personal information,” “personal data,” and similar terms generally mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with an identified or identifiable individual or household, to the extent applicable law defines such information.

Some information may be considered sensitive personal information or subject to enhanced protections under certain laws.

Depending on how the Services are used, this may include:

• Government identification information;
• Driver’s-license information;
• Identity-verification information;
• Biometric information processed by an identity-verification provider;
• Precise geolocation;
• Account credentials;
• Financial information;
• Information regarding a person's vehicle;
• Driving-record information; and
• Other information classified as sensitive under applicable law.

4. INFORMATION WE COLLECT

JoyRide may collect different categories of information depending on how you use the Services.

We do not necessarily collect every category of information from every user.

4.1 Account and Profile Information

We may collect:

• Name;
• Email address;
• Phone number;
• Password or authentication credentials;
• Profile photo;
• Date of birth or age eligibility;
• Address;
• ZIP code;
• Account preferences;
• Communication preferences;
• Emergency contact information when voluntarily provided; and
• Other information necessary to establish and manage an account.

4.2 Driver and Identity Information

JoyRide may collect or receive:

• Government-issued driver's-license information;
• Driver's-license number;
• Driver's-license expiration date;
• Issuing jurisdiction;
• Identity-document images;
• Selfies;
• Liveness information;
• Identity-verification results;
• Information used to compare a selfie with an identification document;
• Other verification information; and
• Information required to determine whether an individual satisfies JoyRide's driver requirements.

JoyRide may use third-party providers, including Stripe Identity, to perform identity verification.

JoyRide may receive verification results or limited identity information from a provider rather than retaining every underlying identity document itself.

4.3 Driving-Record and Eligibility Information

JoyRide may collect or receive information used to determine whether a driver satisfies JoyRide's eligibility requirements.

This may include:

• Driver's-license status;
• Motor-vehicle-record information;
• Driving violations;
• Suspensions or revocations;
• Accident-related information where lawfully obtained;
• Verification results;
• Age;
• Authorized-driver information; and
• Other information necessary for driver eligibility and safety.

JoyRide will only obtain and use driving-record information in accordance with applicable law.

4.4 Transaction and Booking Information

We may collect information relating to marketplace activity, including:

• Vehicle searches;
• Vehicles viewed;
• Vehicle listings;
• Booking requests;
• Reservation dates and times;
• Trip details;
• Pickup information;
• Return information;
• Cancellation activity;
• Fees;
• Charges;
• Refunds;
• Credits;
• Host payouts;
• Claims;
• Disputes; and
• Other transaction records.

4.5 Payment and Financial Information

JoyRide uses third-party payment processors, including Stripe, to process payments and payouts.

Depending on the transaction, information may include:

• Payment method;
• Billing information;
• Payment status;
• Transaction identifiers;
• Payout information;
• Refund information;
• Chargeback information;
• Bank information for Host payouts; and
• Other information necessary to process financial transactions.

Full payment-card numbers and security codes are generally processed directly by the payment processor rather than stored by JoyRide.

4.6 Vehicle and Trip Information

For Hosts and vehicles, JoyRide may collect:

• Vehicle make;
• Vehicle model;
• Vehicle year;
• Vehicle identification number;
• Registration information;
• Title information;
• Vehicle photographs;
• Vehicle condition information;
• Mileage;
• Fuel level;
• Charging information;
• Maintenance information;
• Safety information;
• Inspection information;
• Damage reports;
• Pickup and return information; and
• Other vehicle-related documentation.

4.7 Location Information

JoyRide may collect location information where necessary for the Services.

This may include:

• Approximate location derived from an IP address;
• Precise device location when permission is provided;
• Vehicle-related location information where an applicable technology or feature is enabled;
• Pickup location;
• Return location; and
• Location associated with a booking or trip.

Location information may be used to:

• Show nearby vehicles;
• Facilitate vehicle pickup and return;
• Verify trip activity;
• Prevent fraud;
• Support safety;
• Investigate suspected misuse;
• Assist with vehicle recovery;
• Resolve disputes;
• Process claims; and
• Provide other marketplace functionality.

Precise location may be considered sensitive personal information under certain state laws.

4.8 Messages and User-Generated Content

JoyRide may collect information you voluntarily provide through the Services, including:

• Messages between Hosts and Guests;
• Customer-support communications;
• Reviews;
• Ratings;
• Vehicle descriptions;
• Vehicle photographs;
• Profile photographs;
• Comments;
• Reports;
• Feedback;
• Complaints; and
• Other content submitted through the Services.

Users should avoid submitting unnecessary sensitive personal information through JoyRide messaging.

4.9 Technical and Usage Information

When you use the Services, JoyRide may automatically collect:

• IP address;
• Browser type;
• Operating system;
• Device type;
• Device identifiers;
• App version;
• Crash information;
• Security logs;
• Authentication events;
• Pages or screens viewed;
• Referring pages;
• Timestamps;
• Session information;
• Approximate location;
• Performance information; and
• Other technical information.

4.10 Fraud, Safety, and Security Information

JoyRide may collect or generate information used to identify and prevent:

• Fraud;
• Identity theft;
• Account takeover;
• Payment abuse;
• Suspicious activity;
• Unauthorized access;
• Prohibited conduct;
• Safety risks; and
• Other misuse of the Services.

This may include information from:

• Payment processors;
• Identity-verification providers;
• Fraud-prevention providers;
• Security providers;
• Public records;
• Government sources where legally available;
• Device information;
• Account activity; and
• Prior activity on the Services.

5. INFORMATION COLLECTED FROM OTHER SOURCES

JoyRide may receive information from sources other than you.

These sources may include:

• Hosts;
• Guests;
• Payment processors;
• Identity-verification providers;
• Motor-vehicle-record providers;
• Fraud-prevention providers;
• Insurance companies;
• Protection-plan providers;
• Claims administrators;
• Analytics providers;
• Security providers;
• Social-login providers;
• Public records;
• Government agencies; and
• Other lawful sources.

For example, a Host may submit a report concerning a Guest, a Guest may submit a report concerning a Host or vehicle, Stripe may provide a payment or verification result, or a driving-record provider may provide eligibility information.

6. WHY WE COLLECT AND USE INFORMATION

JoyRide may use personal information for the following purposes:

Providing the Services

We may use information to:

• Create accounts;
• Authenticate users;
• Facilitate vehicle listings;
• Facilitate bookings;
• Process trips;
• Process payments;
• Send Host payouts;
• Provide customer support; and
• Operate the marketplace.

Identity and Driver Verification

We may use information to:

• Verify identity;
• Verify age;
• Verify driver's licenses;
• Verify authorized drivers;
• Conduct required screenings;
• Prevent identity fraud; and
• Determine driver eligibility.

Payments and Financial Transactions

We may use information to:

• Process payments;
• Process refunds;
• Process Host payouts;
• Handle chargebacks;
• Detect payment fraud;
• Reconcile transactions; and
• Maintain financial records.

Safety and Fraud Prevention

We may use information to:

• Prevent fraud;
• Detect suspicious activity;
• Protect accounts;
• Investigate incidents;
• Investigate vehicle theft;
• Protect Hosts and Guests;
• Enforce marketplace rules; and
• Protect JoyRide.

Insurance and Claims

We may use information to:

• Administer protection plans;
• Facilitate insurance-related services;
• Process accident reports;
• Process claims;
• Investigate damage;
• Communicate with insurers and claims administrators; and
• Resolve disputes.

Communications

We may use information to send:

• Verification codes;
• Booking confirmations;
• Trip reminders;
• Security alerts;
• Payment notices;
• Customer-support communications;
• Account notifications; and
• Marketing communications where permitted.

Improving the Services

We may use information to:

• Troubleshoot problems;
• Monitor performance;
• Analyze marketplace activity;
• Improve products;
• Develop features;
• Conduct testing; and
• Improve user experience.

Legal Compliance

We may process information to:

• Comply with applicable law;
• Respond to lawful requests;
• Comply with court orders;
• Meet regulatory requirements;
• Meet tax obligations;
• Meet insurance requirements;
• Establish legal claims;
• Defend legal claims; and
• Enforce our agreements.

Business Transactions

We may use or disclose information in connection with:

• Mergers;
• Acquisitions;
• Financing;
• Reorganizations;
• Corporate transactions;
• Sales of assets; or
• Similar business transactions.

7. IDENTITY VERIFICATION AND DRIVER SCREENING

Because JoyRide facilitates vehicle access and transactions, JoyRide may require identity and driver verification.

This may include:

• Stripe Identity;
• Driver's-license verification;
• Government-ID verification;
• Selfie verification;
• Liveness verification;
• Identity-document checks;
• Motor-vehicle-record checks; and
• Fraud screening.

Identity verification may involve information considered sensitive or biometric under certain state laws.

JoyRide uses this information to:

• Confirm identity;
• Verify eligibility;
• Prevent fraud;
• Protect Hosts and Guests;
• Improve marketplace safety; and
• Comply with applicable requirements.

JoyRide generally seeks to minimize the amount of raw identity information it retains.

When Stripe or another provider performs identity verification, that provider may independently retain information according to its own privacy policy, legal obligations, and service terms.

8. PAYMENTS, STRIPE, AND FINANCIAL INFORMATION

JoyRide uses Stripe for payment processing, Host payouts, identity verification, and related financial services.

Stripe may process:

• Payment information;
• Transaction information;
• Device information;
• Identity information;
• Fraud-prevention information; and
• Security information.

Stripe may act as a processor or service provider for certain activities and as an independent controller for other activities.

For example, Stripe may independently process information for:

• Fraud prevention;
• Security;
• Legal compliance;
• Regulatory requirements; and
• Other purposes permitted by its terms and privacy policies.

JoyRide may receive limited payment information such as:

• Payment method type;
• Last four digits of a payment card;
• Billing information;
• Transaction identifiers;
• Payment status; and
• Dispute information.

JoyRide generally does not intend to store complete payment-card numbers or security codes.

Information retained independently by Stripe may not be deleted when a JoyRide account is deleted.

9. LOCATION INFORMATION AND VEHICLE LOCATION

Location information can be important to operating a vehicle marketplace.

JoyRide may use location information to:

• Show nearby vehicles;
• Facilitate pickup;
• Facilitate return;
• Verify trip activity;
• Prevent fraud;
• Support safety;
• Investigate suspected misuse;
• Assist with vehicle recovery;
• Resolve disputes; and
• Process claims.

Location may come from:

• A mobile device;
• IP address;
• Vehicle-related technology;
• A Host;
• A Guest; or
• Another lawful source.

JoyRide's marketplace may support location-related technology, but JoyRide does not intend to use vehicle telematics as a general-purpose feature unless that feature is specifically implemented and disclosed.

Precise location will be handled in accordance with applicable law.

10. MESSAGES, REVIEWS, PHOTOS, AND USER CONTENT

Messages sent through JoyRide may be processed to:

• Provide communications;
• Provide customer support;
• Prevent fraud;
• Investigate disputes;
• Address safety concerns;
• Moderate content; and
• Enforce marketplace rules.

Hosts and Guests should not upload unnecessary sensitive information.

Vehicle and profile photographs may contain:

• People;
• License plates;
• Addresses;
• Documents;
• Other vehicles; or
• Other personal information.

Users are responsible for ensuring that they have the right to upload information they submit to JoyRide.

Reviews and ratings may be displayed to other users as described in the Terms of Service.

11. COOKIES, ANALYTICS, DEVICES, AND SIMILAR TECHNOLOGIES

JoyRide may use:

• Cookies;
• Local storage;
• Pixels;
• Software development kits;
• Device identifiers;
• Log files;
• Analytics technologies; and
• Similar technologies.

These technologies may be used to:

• Keep users signed in;
• Remember preferences;
• Maintain security;
• Prevent fraud;
• Understand how the Services are used;
• Measure performance;
• Improve the Services; and
• Troubleshoot problems.

Third-party providers may operate certain technologies.

If JoyRide implements targeted advertising or cross-context behavioral advertising, JoyRide will provide any disclosures and opt-out mechanisms required by applicable law.

JoyRide will not add materially different tracking practices without updating applicable disclosures where required.

12. HOW WE SHARE INFORMATION

JoyRide may disclose personal information to:

• Hosts and Guests;
• Payment providers;
• Identity-verification providers;
• Fraud-prevention providers;
• Cloud-hosting providers;
• Database providers;
• Authentication providers;
• Email providers;
• SMS providers;
• Analytics providers;
• Security providers;
• Customer-support providers;
• Insurance carriers;
• Protection-plan providers;
• Claims administrators;
• Motor-vehicle-record providers;
• Professional advisers;
• Government authorities;
• Law enforcement;
• Courts;
• Regulators;
• Parties involved in business transactions; and
• Other parties with your consent or direction.

JoyRide shares information only as reasonably necessary for the applicable purpose and subject to applicable law.

13. SERVICE PROVIDERS AND PROCESSORS

JoyRide uses third-party providers to operate portions of the Services.

13.1 Stripe

Stripe may provide:

• Payment processing;
• Host payouts;
• Identity verification;
• Fraud prevention;
• Financial infrastructure; and
• Related services.

Stripe's role may vary depending on the specific service.

JoyRide will maintain appropriate contractual arrangements with Stripe and configure Stripe services consistent with JoyRide's privacy obligations.

13.2 Supabase

JoyRide may use Supabase for:

• Database services;
• Authentication;
• Backend infrastructure;
• Storage;
• Application infrastructure; and
• Related services.

JoyRide will configure access controls, security, backups, and deletion procedures appropriately.

13.3 Resend

JoyRide may use Resend for:

• Transactional email;
• Verification email;
• Account notifications;
• Booking communications; and
• Customer communications.

13.4 SMS Provider

JoyRide may use an SMS provider such as Bird/MessageBird or another provider for:

• Phone verification;
• Authentication codes;
• Security alerts;
• Transactional communications; and
• Other permitted SMS communications.

The final provider used by JoyRide will be identified in JoyRide's production vendor inventory.

13.5 Other Providers

JoyRide may use additional providers for:

• Analytics;
• Security;
• Fraud prevention;
• Mapping;
• Customer support;
• Insurance;
• Claims;
• Driver screening;
• Vehicle information;
• Hosting; and
• Other marketplace functions.

JoyRide will update this Privacy Policy or its processor disclosures where required by law.

14. SALE, SHARING, TARGETED ADVERTISING, AND SENSITIVE INFORMATION

JoyRide does not intend to sell personal information for monetary consideration as a core part of its marketplace business.

JoyRide also does not intend to disclose personal information for cross-context behavioral advertising unless that practice is specifically implemented and legally disclosed.

However, state privacy laws may define terms such as “sale,” “sharing,” “targeted advertising,” “service provider,” and “processor” differently.

Accordingly, a disclosure to a third-party provider does not automatically mean that the information is not sold or shared under every state law.

JoyRide may process sensitive personal information, including:

• Driver's-license information;
• Government identifiers;
• Identity-verification information;
• Biometric information processed by identity providers;
• Precise location;
• Account credentials; and
• Financial information.

JoyRide will use sensitive personal information only for permitted and disclosed purposes and will obtain consent when required.

If JoyRide changes its practices to involve legally defined sales, sharing, or targeted advertising, JoyRide will update this Privacy Policy and implement applicable opt-out mechanisms.

15. DATA RETENTION

JoyRide retains personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy unless a longer period is required or permitted by law.

Retention may be necessary for:

• Providing the Services;
• Completing transactions;
• Accounting;
• Tax requirements;
• Fraud prevention;
• Safety investigations;
• Claims;
• Disputes;
• Legal obligations;
• Litigation;
• Insurance requirements; and
• Enforcing legal rights.

JoyRide's target retention periods are:

These are target JoyRide retention periods rather than guarantees that every record will be deleted on a specific date.

Information may be retained longer when necessary for:

• Legal obligations;
• Claims;
• Fraud investigations;
• Safety investigations;
• Chargebacks;
• Litigation;
• Regulatory requirements;
• Insurance requirements; or
• Legal holds.

Third-party providers may maintain their own retention periods.

16. DELETION AND ACCOUNT CLOSURE

You may request deletion of personal information or closure of your JoyRide account through the procedures described below.

When JoyRide deletes information, it may:

• Permanently delete the information;
• De-identify the information; or
• Remove the information from active systems while it remains scheduled for deletion from backup systems.

Deletion may not immediately remove information independently retained by:

• Stripe;
• Identity providers;
• Payment networks;
• Insurance providers;
• Hosts;
• Government agencies;
• Law enforcement; or
• Other third parties.

JoyRide may also retain limited information where necessary to:

• Prevent fraud;
• Honor a previous privacy request;
• Comply with law;
• Resolve a dispute;
• Establish or defend legal claims; or
• Maintain legally required records.

Closing an account does not eliminate outstanding financial obligations, claims, bookings, chargebacks, legal holds, or other obligations.

17. SECURITY

JoyRide uses reasonable administrative, technical, and physical safeguards appropriate to the nature of the information processed.

Depending on the system, these safeguards may include:

• Encryption in transit;
• Access controls;
• Authentication;
• Least-privilege permissions;
• Logging;
• Monitoring;
• Backups;
• Vendor due diligence;
• Secure development practices;
• Fraud prevention; and
• Security monitoring.

No electronic transmission or storage system can be guaranteed to be completely secure.

Users are responsible for protecting:

• Passwords;
• Authentication codes;
• Devices;
• Account credentials; and
• Other security information.

Users should notify JoyRide promptly if they believe their account has been compromised.

18. DATA BREACH AND SECURITY INCIDENT RESPONSE

If JoyRide determines that a security incident has occurred, JoyRide will investigate, contain, remediate, and provide notices as required by applicable law.

Notice requirements may differ depending on:

• The state involved;
• The type of information affected;
• The number of individuals affected;
• The nature of the incident; and
• Other legal requirements.

JoyRide may use third-party security, hosting, payment, identity, and incident-response providers when investigating or responding to security incidents.

19. CHILDREN'S PRIVACY

The Services are intended for adults and eligible drivers.

JoyRide does not knowingly collect personal information from children in violation of applicable law.

Because JoyRide's minimum driver age is 18, JoyRide does not knowingly permit individuals under 18 to create driver accounts or operate vehicles through the marketplace.

If JoyRide learns that it has collected information from a child when such collection was not permitted, JoyRide will take appropriate steps to delete the information or obtain legally required consent.

20. COMMUNICATIONS AND SMS

JoyRide may communicate with users through:

• Email;
• SMS;
• Push notifications;
• In-app messages; and
• Other communication channels.

Transactional communications may include:

• Verification codes;
• Booking confirmations;
• Trip reminders;
• Security alerts;
• Payment notifications;
• Customer-support communications;
• Account notices; and
• Safety alerts.

Where marketing consent is required, JoyRide will obtain the applicable consent.

Marketing communications may include unsubscribe instructions.

Transactional and security communications may continue when necessary to provide the Services.

JoyRide may share phone numbers with its SMS provider for:

• Message delivery;
• Verification;
• Fraud prevention;
• Security; and
• Related communications.

21. YOUR PRIVACY RIGHTS

Depending on where you live and which privacy law applies, you may have rights concerning your personal information.

These may include:

• The right to know what personal information JoyRide collects;
• The right to access personal information;
• The right to obtain a copy of personal information;
• The right to correct inaccurate information;
• The right to delete personal information;
• The right to data portability;
• The right to opt out of the sale of personal information;
• The right to opt out of sharing for targeted advertising;
• The right to opt out of certain profiling;
• The right to limit certain uses of sensitive personal information;
• The right to appeal a privacy-request decision;
• The right to use universal opt-out preference signals where required; and
• The right not to receive unlawful discrimination for exercising privacy rights.

Not every right applies to every person or in every state.

Certain legal exceptions may also apply.

22. CALIFORNIA PRIVACY RIGHTS

California residents may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act.

Depending on applicable law, California residents may have rights including:

• Right to know/access;
• Right to delete;
• Right to correct;
• Right to opt out of sale;
• Right to opt out of sharing;
• Right to limit certain uses of sensitive personal information; and
• Right to non-discrimination.

California residents may also have rights concerning profiling and automated decision-making as provided by applicable law.

JoyRide will generally respond to a verifiable California privacy request within 45 days.

Where legally permitted and reasonably necessary, JoyRide may extend the response period by an additional 45 days.

JoyRide will notify the requester when an extension is necessary.

22.1 California Notice at Collection

At or before collecting personal information from California residents, JoyRide will provide a Notice at Collection describing:

• Categories of personal information collected;
• Purposes for collection;
• Whether categories are sold;
• Whether categories are shared;
• Retention information where required; and
• Other information required by California law.

The Notice at Collection may be provided through:

• The JoyRide website;
• The mobile application;
• Account creation;
• Checkout;
• Identity verification;
• Vehicle listing;
• Other collection points.

22.2 California Personal Information Categories

Depending on the Services used, JoyRide may collect categories including:

• Identifiers;
• Personal information categories under California Civil Code §1798.80;
• Characteristics of protected classifications contained in identification documents;
• Commercial information;
• Internet or electronic network activity;
• Geolocation;
• Audio/visual information;
• Professional or employment information where voluntarily provided;
• Inferences;
• Sensitive personal information.

22.3 California Sale and Sharing

As of the effective date of this Privacy Policy, JoyRide does not intend to sell personal information for monetary consideration as a core business practice.

JoyRide also does not intend to share personal information for cross-context behavioral advertising unless such practices are specifically implemented.

If JoyRide begins activities that qualify as a sale or sharing under California law, JoyRide will provide applicable disclosures and opt-out mechanisms.

23. OTHER U.S. STATE PRIVACY RIGHTS

Residents of other states with comprehensive privacy laws may have rights that vary by jurisdiction.

These may include rights to:

• Access;
• Correct;
• Delete;
• Obtain a portable copy;
• Opt out of targeted advertising;
• Opt out of sales;
• Opt out of certain profiling;
• Limit certain sensitive-data processing; and
• Appeal a privacy decision.

State laws may differ regarding:

• Who qualifies for protection;
• What information is covered;
• What exceptions apply;
• Whether consent is required;
• Response deadlines;
• Appeal procedures; and
• Universal opt-out mechanisms.

JoyRide will apply rights available to eligible residents under the law applicable to those residents.

24. HOW TO SUBMIT A PRIVACY REQUEST

JoyRide will provide at least one reasonably accessible method for submitting privacy requests.

Privacy Request Email:

privacy@drivejoyride.app

Privacy Request Web Form:

https://www.drivejoyride.app/support

Mailing Address:

JoyRide Legal, State of Georgia, United States — physical mailing address available upon request at privacy@drivejoyride.app

Requests should generally include:

• Your name;
• Email address or other account identifier;
• State of residence when relevant;
• The privacy right you are exercising; and
• Enough information for JoyRide to authenticate the request.

JoyRide may require reasonable verification before fulfilling certain requests.

JoyRide will not use verification information for unrelated purposes except as permitted by law.

25. VERIFICATION, AUTHORIZED AGENTS, AND APPEALS

JoyRide may require reasonable verification before fulfilling an access, correction, deletion, portability, or other privacy request.

The level of verification may depend on the sensitivity of the information involved.

Where permitted by law, an authorized agent may submit a privacy request on behalf of another individual.

JoyRide may require:

• Proof of authorization;
• Identity verification;
• Additional information reasonably necessary to process the request.

Where applicable law provides an appeal right, JoyRide will provide an appeal process and respond within the required legal timeframe.

Privacy Appeal Contact:

privacy@drivejoyride.app

26. DO-NOT-TRACK AND PRIVACY PREFERENCE SIGNALS

Certain browsers and devices provide privacy preference signals.

Where applicable law requires JoyRide to recognize a particular signal, JoyRide will process that signal as required.

This may include the Global Privacy Control (GPC) or another legally recognized universal opt-out mechanism.

Traditional browser “Do Not Track” settings are not necessarily legally equivalent to universal opt-out signals.

JoyRide will follow applicable law based on the user's jurisdiction and JoyRide's actual technology configuration.

27. U.S. DATA TRANSFERS

JoyRide is a U.S.-based marketplace and may process personal information within the United States.

JoyRide's service providers may process information in other states or countries depending on their infrastructure.

If JoyRide intentionally expands outside the United States, JoyRide may implement additional privacy notices and international data-transfer mechanisms where required.

28. THIRD-PARTY WEBSITES AND SERVICES

The Services may contain links or integrations to third-party services.

These may include:

• Payment services;
• Identity verification;
• Insurance;
• Mapping;
• Social-login providers;
• Communications providers;
• Analytics providers; and
• Other services.

JoyRide is not responsible for the privacy practices of independent third parties.

When you use a third-party service, that provider's privacy policy may apply directly to information it collects.

29. CHANGES TO THIS PRIVACY POLICY

JoyRide may update this Privacy Policy when:

• The Services change;
• Technology changes;
• Vendors change;
• Privacy laws change;
• JoyRide's information practices change; or
• Other circumstances require an update.

Updated versions will include a revised effective date.

If a change materially affects how JoyRide uses personal information and applicable law requires additional notice or consent, JoyRide will provide that notice or obtain that consent through an appropriate method.

30. CONTACT INFORMATION

JoyRide

Legal Entity: JoyRide

State of Formation: Georgia

Privacy Email:

privacy@drivejoyride.app

Customer Support:

hello@drivejoyride.app · https://www.drivejoyride.app/support

Mailing Address:

JoyRide Legal, State of Georgia, United States — physical mailing address available upon request at privacy@drivejoyride.app

Website:

https://www.drivejoyride.app

31. STATE-SPECIFIC AND MANDATORY DISCLOSURES

JoyRide may maintain supplemental privacy notices or state-specific disclosures where required.

These may include:

• California Notice at Collection;
• California privacy-rights disclosures;
• State-specific appeal procedures;
• Universal opt-out disclosures;
• Biometric-data notices;
• Sensitive-data notices;
• Data-breach notices;
• Other legally required disclosures.

If a state law grants a resident a right that differs from this general Privacy Policy, the applicable state law and required notice will control.

APPENDIX A — DATA CATEGORY / PURPOSE / RECIPIENT MATRIX

APPENDIX B — CURRENT PROCESSOR CATEGORIES

Privacy requests: privacy@drivejoyride.app · JoyRide Support · hello@drivejoyride.app