Privacy Policy

MyPlacard (“MyPlacard,” “we,” “us,” or “our”) provides white-label dispatch software that independent black car and chauffeur operators (“Operators”) use to run their own rider apps, driver apps, and dispatch consoles. This Privacy Policy explains what information we collect through the MyPlacard platform, how we use it, and the choices you have.

This Policy applies whether you're a rider booking a trip (“Rider”), a driver using the driver app (“Driver”), or staff at an Operator using the dispatch console. If you're a Rider or Driver, you're interacting with a specific Operator's branded app, but the underlying platform, hosting, and data processing are MyPlacard's.

Each Operator is independently responsible for complying with the privacy and data protection laws that apply to their own business in the states where they operate and serve customers. This Policy describes MyPlacard's own practices as the platform provider — it doesn't substitute for an Operator's own legal obligations to the Riders and Drivers they serve.

Information We Collect

From Riders

• Name and phone number, provided at booking (with or without a full account)
• Email address and password, if you create a Rider account
• Pickup and drop-off addresses for each ride you book
• Your device's location, only if you tap “Use my current location” when entering a pickup address. The Rider app uses your position once to find the street address, which is filled in as your pickup address and saved with the ride like any address you type. We don't keep a record of that position itself
• Your live location, only if you turn on “Share my location with my driver” in the Rider app's Settings. It is off until you turn it on. Once your driver is on the way and within about a mile of your pickup, the app sends your position about every 30 seconds so your driver can find you, and it keeps doing so while you use other apps (your iPhone shows its blue location indicator while it does). It stops when your trip starts, when you tap Stop on the tracking screen, or when you turn the setting off. We keep only your latest position, show it only to your assigned Driver (it doesn't appear in the Operator's console), and delete it when your trip starts; anything left over is deleted within a day
• Notes you add for the driver, and, if you allow notifications in the Rider app, a device token that lets Apple deliver ride notifications to your phone
• The camera, only if you tap to scan an Operator's QR code in the Rider app. The image is read on your phone and isn't kept or sent to us
• If you ride on a company account, the company that pays for your rides: its administrators can see your name and what your trips cost
• Payment information, handled directly by our payment processor, Stripe — MyPlacard does not receive or store your full card number
• If you book a ride for someone else, that person's name and mobile phone number, and your confirmation that you have their permission to text them (see “People a Ride Is Booked For” below)
• Ride history, ratings, and comments you leave about a completed trip
• A referral code, if you were referred by another Rider, or your own referral code

People a Ride Is Booked For

A Rider can book a ride for another person, who then rides while the Rider pays. The Rider gives us the passenger's name and mobile phone number, and confirms they have the passenger's permission to text them. The passenger doesn't need an account, and we don't ask them for anything else. What happens with those details:

• We text the passenger a private link, then updates about their ride (driver assigned, driver on the way) and a notice if the ride is canceled. See “SMS Communications” below. A passenger can reply STOP to end the texts.
• The link opens a private page that shows the pickup, drop-off, stops and time, the name of the person who booked, and, once a driver is assigned, the driver's name, photo and vehicle and, while the car is on the way, where it is on a map. It shows no fare and no payment details, and the passenger can't change or cancel the ride from it. Anyone with the link can open it, so the passenger should treat it as private. It stops working 24 hours after the ride ends, or at once if the Rider changes the passenger's phone number.
• The passenger can choose to share their live location with their driver from that page, once the driver is on the way and within about a mile. On the web it only shares while the page is open. Only the driver sees it, only the latest position is kept, and it is deleted when the trip starts, as described above for Riders.
• The driver and the Operator see the passenger's name and phone number for that ride, so the driver can find and contact the person they are picking up, along with the name of the Rider who booked it. The Rider's own details (email, payment information, receipts) stay with the Rider.
• How long we keep it. On a completed trip the passenger's name and phone number are part of the saved trip record and follow the retention periods in “Data Retention” below. On a canceled ride they are removed after 90 days.

If a ride was booked for you and you would like your details removed, or you don't want these texts, reply STOP, or email us at the address under “Contact Us”.

From Visitors Who Ask for a Quote

Some Operators put a quote box on their own website. If you use one, you don't need an account. We receive the trip you describe (the pickup and drop-off addresses, the time you want, how many passengers, and the vehicle you choose), and we save the quote and its price for 24 hours so you can book it. To stop abuse, we also count requests by a scrambled (hashed) form of your internet address for a few days; we don't keep the address itself. If you ask us to email you the quote, we also receive your name, your email address and, if you give it, your phone number. We email you the quote with a link to book it, and we share these details with that Operator so they can follow up with you. We don't text you about a quote. A quote with no contact details is deleted 7 days after it expires; one with contact details is deleted 90 days after it expires. If you book from it, the booking is handled as described for Riders above.

From Drivers

• Name, phone number, email address, and driver's license number
• Chauffeur license and regulatory driver ID (for example, a TLC or CPUC identifier), where an Operator records them so they can appear on a trip's digital waybill
• Vehicle information associated with your account: make, model, year, license plate, state of registration, and commercial insurance details
• Real-time, continuous location while your driver app is set to “online,” not only while you're actively on a trip — this is required for dispatch and safety, and is the core reason the driver app is a native app rather than a website. We only ever store your most recent position, never a location history. The first time you go online, the app asks you to explicitly agree to this before it begins — a separate step from your phone's own location-permission prompt. On Android, this agreement screen also appears once on each device the app is installed on, and while you're online the app shows a persistent “You're online” notification — Android requires one for an app that keeps sharing location with the screen off. Location sharing stops when you go offline or sign out.
• A profile photo, which you can add, change or remove yourself in the driver app's Settings (you choose one from your photo library with your phone's photo picker and crop it), and which your Operator can also add or remove. Riders see it on their tracking screen once you are assigned to their trip, and your Operator sees it. It is stored privately: it can be opened only through a link that expires (about an hour for you and your Operator's staff, 15 minutes for a Rider), and only you, your Operator's staff and a Rider on a trip you are assigned to can get one
• A saved copy of your current trip's digital waybill, kept on your phone so it still works without a signal. It includes the passenger's details, and it is deleted from your phone when you sign out

From Operators

• Business and account information for staff who use the dispatch console
• Operating-authority details an Operator chooses to enter, such as its legal business name and regulatory permit or license number, used on each trip's digital waybill
• Payout and Stripe Connect account details — MyPlacard never holds or stores an Operator's Stripe login credentials, only the connected account identifier Stripe issues
• Branding assets (logo, colors) used to white-label the Rider and Driver apps

Collected automatically

• Standard session and authentication data needed to keep you signed in (a session cookie), managed through our authentication provider
• Basic technical information (such as device type, operating-system and app version, and crash, error, and performance-timing logs) used to keep the apps running reliably

MyPlacard does not use third-party advertising trackers, and we do not sell personal information to third parties.

How We Use Information

• To create and manage accounts, and to book, dispatch, and complete rides
• To process payments, tips, and refunds through Stripe, and to calculate and show Drivers' earnings
• To send transactional communications about a ride: booking confirmation, driver assigned, driver arriving, trip complete and changes to a reservation, by text message, email, or push notification in the Rider app (see “SMS Communications” below)
• To calculate fares, apply promo codes, and track referral relationships
• To show Operators their own drivers, vehicles, rides, and payout information
• To maintain the security and reliability of the platform

How We Share Information

We share information only as needed to operate the service, and never sell it. The main recipients are:

• The Operator you're riding or driving with — an Operator's dispatchers can see the rides, riders, and drivers on their own platform; they never see another Operator's data
• Stripe, to process payments, tips, and refunds
• Our SMS provider (Twilio), to deliver the transactional text messages described below
• Our email provider (Resend), to deliver account emails such as sign-up confirmations, password resets, and invitations, and ride receipts and company invoices. It receives the recipient's email address and the message content
• Apple, through its push notification service, to deliver ride notifications to the Rider app. It receives your device token and the text of the notification (for example, that your driver is on the way)
• Apple, through MapKit, to show maps, look up addresses (including finding the address for your position if you choose “Use my current location”), and give driving directions
• OpenFreeMap and OpenStreetMap, in the Android driver app, which shows its map using OpenFreeMap's free map service. Your phone requests map imagery directly from that service, so it receives your device's IP address and the area of the map you're viewing. We don't send it your name or account details
• Google, through the location services built into an Android phone, which work out the phone's position for the Android driver app. Google's handling of that is governed by its own privacy policy and your phone's settings
• The navigation app you choose (Apple Maps, Google Maps, Waze, or your phone's default maps app): when you tap Navigate, the pickup or drop-off address is passed to that app, which handles it under its own privacy policy
• Supabase, our database and infrastructure provider, which stores platform data on our behalf
• Our web hosting providers (Railway for the Operator console, IONOS for our website and the web Rider app), which serve those pages and handle the traffic to them
• Sentry, for error and performance monitoring in the Rider and Driver apps, the Operator console and our server functions — technical crash, error, and performance-timing data only, with personal information such as emails, phone numbers and card-number-shaped text automatically redacted before it's sent
• A Rider and their assigned Driver see each other's details as needed to complete a ride. The Driver sees the Rider's name and phone number (to call or text), the pickup and drop-off addresses, any notes, and, if the Rider chose to share it, the Rider's live location near the pickup. The Rider sees the Driver's name, photo, vehicle and license plate, and the Driver's live position on a map while the Driver is on the way and during the trip
• Anyone who scans a trip's digital waybill QR code, such as airport enforcement or an inspector. The page it opens shows the trip's live status, the operating company and its permit number, the driver's name and license and permit identifiers, the vehicle's plate, registration, and insurance details, the pickup and drop-off addresses, and the rider's first name and last initial only. It never shows a rider's phone number or the fare. The link works only for that one trip and stops showing any details 7 days after the trip ends

We may also disclose information if required by law, or to protect the safety of Riders, Drivers, Operators, or the public.

SMS Communications

If you provide a phone number, you may receive one-way, transactional text messages about your own ride: booking confirmation, driver assigned, driver arriving, and trip complete. If a Rider books a ride for someone else, we also text that passenger, at the number the Rider gave us, a private link to follow the ride, driver updates, and a notice if the ride is canceled. The Rider confirms at booking that they have the passenger's permission. We do not send marketing or promotional messages by text. Message frequency depends on your ride activity, and message and data rates may apply. Drivers and Operator staff also receive texts that carry an account link, such as an invitation or a password-reset link.

You can opt out of text messages at any time by replying STOP to any message, or opt back in by replying START. Reply HELP for assistance. Carrier delivery isn't guaranteed, and opting out of SMS does not remove you from other necessary account or service communications (for example, email).

Data Retention

While your account is active, we keep your information as needed to provide the service. If you delete your account (see “Your Choices and Rights” below), we immediately remove your name, email, phone number, and any saved payment details from your account (for Drivers, also your photo and license numbers) and revoke your login — we don't wait for a request deadline to do it. A Rider's shared location is never kept: it is deleted when the trip starts, and anything left over is deleted within a day. A Driver's photo is deleted when you remove it or delete your account.

Completed trips are kept longer. Passenger transportation is commonly subject to trip record-keeping expectations, for example a waybill that identifies the driver, the vehicle, the passenger, and the route. So the moment a trip is completed, we save a permanent copy of it exactly as it was that day: the rider's and driver's names, the rider's phone number (when a Rider booked for someone else, the passenger's name and phone number, and the booking Rider's name and phone number), the driver's license and permit identifiers, the vehicle and operating-company details, the pickup and drop-off addresses, and the trip's times, fare, and payout figures. Later changes to an account, a vehicle, or a payout rate do not change that copy. If you delete your account, this saved copy of a trip you were part of is not deleted with it: the names, phone number, and license and permit identifiers stay on file for 5 years after the trip, and then we remove them from the record.

After that, the trip's route, fare, fee, tax, tip, and refund figures stay on file, no longer linked to your name, for up to 7 years, matching standard accounting and tax record-keeping practice. We don't currently auto-delete an account that's simply gone unused rather than being actively deleted.

Website quotes. A quote asked for on an Operator's website, and any name, email and phone number left with it, is deleted 7 days after it expires if no contact details were left, and 90 days after it expires if they were.

Operator accounts. When an Operator's subscription ends, the Operator has 14 days to download its data, after which we may permanently delete it. We keep only a record of the Operator's company name, its billing identifiers and the dates, and a log of who downloaded its data and when. If the Operator subscribes again within the 14 days, the deletion is cancelled.

Your Choices and Rights

• You can review and update your account information through the Rider or Driver app
• You can remove a saved payment method at any time from your account
• You can opt out of SMS at any time by replying STOP
• Riders can turn location sharing on or off at any time in the Rider app's Settings, and stop it for a single trip with Stop on the tracking screen. Drivers can add, change or remove their photo in the driver app's Settings
• Riders can delete their own account directly in the app — in the iPhone app, tap the “...” menu and choose Delete account; in the web app, open Your journeys and choose Delete my account — no need to contact us. Drivers can do the same from Settings. This removes your personal details from your account immediately and revokes your login. It doesn't delete trips you've already completed: the saved record of each one keeps the personal details described under “Data Retention” above for 5 years, and its figures stay on file afterward without your name. If you can't open the app, see how to request deletion online
• You can also request access to, correction of, or deletion of your personal information by contacting us at the email below — useful for Operator staff accounts, or anything the in-app options above don't cover. Depending on where you live, you may have specific rights under laws such as the California Consumer Privacy Act; we honor verified requests consistent with applicable law

Notice for California Residents

If you live in California, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), gives you the rights described below. This section is our notice at collection and describes our practices over the past 12 months. It supplements the rest of this Policy.

What we collect, and why

These are the categories of personal information, as the CCPA names them, that we collect, with examples drawn from “Information We Collect” above:

• Identifiers — name, email address, phone number (including the name and number of a passenger a Rider books a ride for, and a website visitor who asks for a quote by email), account and user IDs, a device token for push notifications, and the IP address of a connection to our servers
• Customer records — pickup and drop-off addresses, a driver's license number, and payment details held by Stripe (we keep only a card's brand and last four digits and Stripe's identifiers, never the full card number)
• Commercial information — ride history, fares, tips, refunds, promo and referral codes, and an Operator's subscription
• Geolocation data — a driver's continuous location while online; a rider's location if they use “Use my current location” or turn on location sharing with their driver; and trip addresses
• Audio, electronic or visual information — a driver's profile photo
• Professional information — a driver's chauffeur license and regulatory ID, and vehicle and insurance details; an Operator's business and permit details
• Internet or other network activity — crash, error and performance-timing logs from the apps, the console and our servers
• Other information you give us — ratings, comments and notes for a driver

We collect it directly from you, from the Operator you ride or drive with (for example, when an Operator adds a driver or books for a rider), automatically from your device and the apps, and from our service providers such as Stripe. We do not intentionally collect information about characteristics protected under California or federal law, and we do not create profiles or inferences about you. We use the information for the purposes described under “How We Use Information”.

Sensitive personal information

Some of what we collect is “sensitive personal information” under the CCPA: a precise location (a driver's, and a rider's when they share it), a driver's license number, and the login details for your account. We use it only to provide the service you asked for — dispatching and completing rides, keeping riders and drivers safe, meeting trip-record requirements, and keeping your account secure — and not to infer characteristics about you. Because we use it only for those purposes, we don't offer a “Limit the Use of My Sensitive Personal Information” choice.

Who we disclose it to

We disclose personal information for the business purposes above to the recipients listed under “How We Share Information”: the Operator, the rider or driver on a trip, and the service providers that help us run the platform. In the past 12 months we have not sold personal information and have not shared it for cross-context behavioral advertising, and we do not knowingly sell or share the personal information of anyone under 16. Because we do neither, there is nothing to opt out of, and we use no advertising or cross-site tracking technologies, so a browser “Do Not Track” or Global Privacy Control signal does not change what we do. We do not disclose personal information to third parties for their own direct marketing.

How long we keep it

See “Data Retention” above. In short: we keep account information while your account is active and remove it when you delete the account, and we keep the saved record of a completed trip for 5 years with names and identifiers, and for up to 7 years without them.

Your California rights

• Know and access. Ask what personal information we have collected about you, where it came from, why, who it was disclosed to, and for a copy of it
• Delete. Ask us to delete the personal information we hold about you. Riders and drivers can do this in the app (see “Your Choices and Rights”). We may keep what the law lets or requires us to keep, such as the saved record of a completed trip, as described under “Data Retention”
• Correct. Ask us to correct inaccurate personal information. You can update most of it in the app
• Opt out of sale or sharing, and limit sensitive information. These rights apply to practices we don't have, as explained above
• No discrimination. We won't treat you differently for using these rights

How to make a request

Email legal@my-placard.com from the address on your account, or use the in-app deletion option. We will ask for details that let us match the request to your account, and may ask you to confirm you control it; for a request to know, we may need more than one match. You may use an authorized agent, who must show your written permission or a power of attorney, and we may still ask you to confirm the request with us. We aim to respond within 45 days; if we need more time we will tell you why, and may take up to 45 more. You can make a request to know up to twice in any 12 months, and it is free. If we hold your information on behalf of an Operator that decides how it is used, we may help that Operator respond, or tell you to contact them.

If you are a California resident, you may also ask us once a year, free of charge, which categories of personal information we disclosed to third parties for their direct marketing (California Civil Code section 1798.83). We make no such disclosures.

Children's Privacy

MyPlacard is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we will delete it.

Security

We use industry-standard safeguards to protect the information we hold, including encrypted connections and access controls that scope each Operator, Driver, and Rider to only their own data. No system is perfectly secure, and we can't guarantee absolute security of information transmitted to us.

Changes to This Policy

We may update this Privacy Policy from time to time. We'll update the “Last updated” date above, and for material changes, we'll provide additional notice where appropriate.

Contact Us

Questions about this Privacy Policy or your information can be sent to legal@my-placard.com.