Accessibility & non-discrimination
Karts2Me
Karts2Me Privacy Policy
Last updated: October 5, 2026
Note before publishing: This document was drafted to accurately describe what Karts2Me's software actually does with data, based on the real system architecture. It has not been reviewed by an attorney. Privacy law varies significantly by state and country (California's CCPA, Europe's GDPR, and others each impose specific requirements), and this draft should be reviewed by a lawyer familiar with your jurisdiction before it's published as your real policy.
1. Who we are
Karts2Me ("Karts2Me," "we," "us") operates a platform connecting riders with shuttle cart, shuttle, and vehicle drivers at participating properties and events. This policy explains what information we collect through our rider, driver, and operator apps, and how we use it.
2. Information we collect
From riders
- Account information: name, email address, and password (stored in hashed form — we never see or store your plaintext password).
- Location information: the property or event you select, addresses you search for as a pickup or destination, and the coordinates of your chosen destination.
- Ride information: pickup and drop-off locations, fare amount, ride status, and ride history.
- Payment information: processed entirely by our payment processor, Stripe. We do not store your card number. We retain only the fare amount, payment status, and a Stripe-issued transaction reference.
From drivers
- Everything listed above for riders, plus:
- Vehicle category applications: the type of vehicle you're applying to drive.
- Identity verification: if you complete identity verification, this is handled entirely by Stripe Identity. Stripe collects your government-issued ID and a selfie directly — we never receive or store the document images themselves, only the verification result (verified / not verified).
- Payout information: to receive payouts, you connect a bank account through Stripe Connect. Stripe holds your bank account details; we store only a reference ID and whether payouts are enabled.
- Real-time location: when accepting a ride tied to a property with a defined boundary, your device's location is checked once, at the moment of acceptance, to confirm you're on the property. We do not continuously track driver location.
From operators
- Business name, branding preferences (display name, color), zone and pricing configuration, and event details you create.
Automatically collected
- Standard technical information collected by our hosting provider (Vercel) as part of normal web traffic, such as IP address and browser type.
- If you enable notifications, a push notification subscription token used to deliver ride updates to your device.
3. How we use this information
We use the information above to: - Create and manage your account - Match riders with available drivers and calculate routes and fares - Process payments and, for drivers and operators, payouts - Verify driver identity and vehicle category eligibility - Send ride-related notifications (by push notification or email) - Maintain the security of the platform and prevent fraud - Comply with legal and tax obligations
We do not sell your personal information, and we do not use your data for third-party advertising. Karts2Me does not run ads.
4. Who we share information with
We share information only as necessary to operate the service:
| Service provider | What they receive | Purpose |
|---|---|---|
| Stripe | Payment details, identity documents (drivers only), bank account details (drivers/operators receiving payouts) | Payment processing, identity verification, payouts |
| Supabase | Account and ride data | Database and authentication hosting |
| Vercel | Standard web traffic data | App hosting |
| Resend | Your email address | Delivering account emails (password resets, etc.) |
| OpenStreetMap (Nominatim) | Text of address searches you type | Converting addresses into map coordinates |
Drivers and riders involved in the same ride can see limited information about each other (such as a name and vehicle description) necessary to complete the ride, similar to other rideshare platforms.
We may also disclose information if required by law, subpoena, or to protect the safety of our users.
5. Data retention
We retain account and ride information for as long as your account is active, and for a reasonable period afterward as needed for legal, tax, and dispute-resolution purposes. You can request deletion of your account at any time (see Section 7). In-app deletion takes effect immediately.
6. Security
We use industry-standard measures to protect your information, including encrypted connections (HTTPS) for all data in transit, hashed password storage, and database access controls that restrict each user to their own data. No system is perfectly secure, and we cannot guarantee absolute security.
7. Your rights and choices
You can: - Access or correct your account information at any time by editing your profile. - Delete your account directly in the app (tap Delete account at the bottom of the home screen), or by emailing support@karts2me.com. Deletion removes your sign-in and personal details (name, phone, photo, notification subscriptions). Records we must keep for legal, tax, payment-dispute and safety reasons — such as ride, payment history — are retained without your name attached. You cannot delete your account while a ride is in progress. - Opt out of push notifications at any time through your device or browser settings.
If you are a California resident, you may have additional rights under the CCPA. If you are located in the European Economic Area, you may have additional rights under the GDPR. Contact us to exercise these rights.
8. Children's privacy
Karts2Me is not directed to, and should not be used by, anyone under the age of 18. We do not knowingly collect information from children.
9. Changes to this policy
We may update this policy from time to time. We'll update the "Last updated" date above when we do. Material changes will be communicated through the app or by email.
10. Contact us
Questions about this policy or your data can be sent to: support@karts2me.com
This policy describes Karts2Me's software and data practices as implemented. It is a draft prepared for legal review and has not yet been finalized by an attorney.