Privacy Notice
1. Scope & Introduction
BrighterConnect LLC ("BrighterConnect," "we," "us," or "our") operates a technology platform that connects passengers ("Riders") with independent transportation providers ("Drivers") in the state of Maryland. This Privacy Notice describes how we collect, use, disclose, and protect personal information when you:
- Visit our website at brighterconnectrides.com
- Use the BrighterConnect mobile application (iOS or Android)
- Book, offer, or complete rides through our platform
- Create an account as a Rider, Driver, or guest
- Contact our support or safety team
- Apply to become a Driver on the platform
This policy applies to all users of BrighterConnect, including website visitors, Riders, Drivers, and guests who book rides without creating an account. BrighterConnect does not provide transportation services directly; we facilitate connections between Riders and independent Drivers.
2. Information We Collect
We collect different categories of information depending on how you interact with BrighterConnect.
2.1 Account & Profile Information
When you create an account, we collect your full name, email address, phone number, and a password. Drivers also provide a profile photo.
2.2 Contact Information
Phone number (required for all users — used for SMS verification and ride-related communications), email address (optional for guest bookings, required for account holders).
2.3 Location Data
Riders: We collect your pickup and drop-off addresses when you request a ride. We may also collect your device's precise location (with your permission) to auto-detect your pickup address.
Drivers: When you are online and available to accept rides, we collect your precise GPS location continuously to match you with nearby Riders and to enable real-time ride tracking. Location collection stops when you go offline. During an active ride, location data is shared with the Rider for trip tracking.
2.4 Ride & Trip Data
Pickup and drop-off locations, route taken, distance, duration, fare breakdown, payment status, ride status history, cancellation records, and ratings/reviews.
2.5 Payment Information
Riders: Credit or debit card details are collected and processed by our payment processor, Stripe. BrighterConnect does not store full card numbers on our servers.
Drivers: Bank account and identity information for Stripe Connect payouts. BrighterConnect does not store bank account numbers directly.
2.6 Driver Onboarding & Compliance Documents
Driver's license (front and back), vehicle registration, insurance certificate, vehicle inspection report (if required), and profile photo. These documents are stored securely and used solely for eligibility verification and regulatory compliance.
2.7 Background Check Data (Drivers Only)
Social Security Number (encrypted at rest, transmitted securely, and used solely for background verification through Checkr), date of birth, and address history. SSN data is purged from our systems after the background check is initiated; the check itself is processed by Checkr under their own privacy policy.
2.8 Communications & Support Data
Messages exchanged between Riders and Drivers during a ride (through our in-app messaging system), support requests, safety reports, incident reports, lost item reports, and any correspondence with our team.
2.9 Device & Technical Information
Device type, operating system, browser type and version, IP address, mobile carrier information, unique device identifiers, and app version. This data is collected automatically when you use our website or app.
2.10 Analytics & Usage Data
Pages visited, features used, buttons clicked, session duration, referral source, and general interaction patterns. We use Google Analytics (GA4) with IP anonymization enabled on our website. See Section 5 for details and opt-out instructions.
2.11 Push Notification Tokens
If you enable push notifications, we store a Firebase Cloud Messaging (FCM) token associated with your device. This token is used solely to deliver ride alerts, document status updates, and other platform notifications. You can disable notifications through your device settings at any time.
3. Sources of Information
We receive personal information from the following sources:
- Directly from you: Account registration, ride bookings, document uploads, support requests, and profile updates.
- Your device: Location data, device identifiers, and technical information collected automatically by our website and app.
- Analytics tools: Google Analytics (GA4) provides anonymized website usage data.
- Payment processors: Stripe provides transaction confirmation, payment status, and payout information.
- Background check providers: Checkr provides background verification results for Drivers.
- Mapping services: Google Maps Platform provides geocoding, routing, and address data.
- Other users: Ratings and reviews submitted by Riders about Drivers, and vice versa.
4. How We Use Information
We use the information we collect for the following purposes:
4.1 Platform Operations
- Create and manage your account
- Verify your identity and phone number (via SMS OTP)
- Match Riders with nearby available Drivers
- Calculate fares and process payments
- Enable real-time ride tracking
- Process Driver payouts
- Facilitate in-ride messaging between Riders and Drivers
4.2 Driver Onboarding & Compliance
- Verify driver eligibility documents
- Conduct background checks through Checkr
- Monitor document expiration dates
- Enforce vehicle and insurance requirements
4.3 Safety & Trust
- Investigate safety incidents and support requests
- Detect and prevent fraud, abuse, and unauthorized access
- Enforce our Terms of Service
- Maintain ride event audit trails for dispute resolution
- Detect stale driver locations and stuck rides
4.4 Communications
- Send ride status updates, receipts, and driver assignment notifications (SMS and push)
- Send OTP verification codes
- Send password reset links
- Send document approval/rejection notifications
- Send weekly earnings reports to Drivers
- Respond to support inquiries
Note: BrighterConnect does not currently send marketing or promotional emails. All communications are transactional or operational.
4.5 Analytics & Improvement
- Understand how users interact with our website and app
- Identify and fix technical issues (via Sentry error monitoring, with personal data collection disabled)
- Improve ride matching, fare calculation, and platform features
- Generate aggregated, anonymized reports for business operations
4.6 Legal & Regulatory
- Comply with applicable laws, regulations, and legal processes
- Respond to lawful requests from law enforcement or government agencies
- Enforce our agreements and protect our legal rights
- Maintain records required for tax, insurance, and transportation compliance
7. Third-Party Service Providers
The following providers receive personal information from BrighterConnect solely to perform the services described:
| Provider | Data Categories | Purpose |
|---|---|---|
| Stripe | Payment card details, bank account info (Drivers), transaction amounts | Payment processing, Driver payouts via Stripe Connect |
| Twilio | Phone number | SMS verification (OTP codes), ride status notifications |
| Google Maps Platform | Addresses, GPS coordinates | Address autocomplete, geocoding, route calculation, distance/duration estimation |
| Firebase (Google) | Device push tokens | Push notifications for ride offers, document updates, payout alerts |
| Checkr | Name, SSN (encrypted), date of birth, address | Driver background verification |
| Sentry | Error context only (PII collection disabled) | Application error monitoring and stability |
| Google Analytics (GA4) | Anonymized page views, device type, session data | Website usage analytics (IP anonymization enabled; respects DNT/GPC) |
| Resend | Email address | Transactional emails (receipts, password resets, operational reports) |
Each provider operates under its own privacy policy. We encourage you to review their policies for details about how they handle your data.
8. Data Retention
We retain personal information only as long as necessary for the purposes described in this policy, or as required by law.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account information | While account is active + 30 days after deletion request | Service delivery; deletion processing time |
| Ride/trip records | 3 years | Dispute resolution, insurance claims, legal compliance |
| Payment/transaction records | 7 years | Tax, financial reporting, and regulatory requirements |
| Driver documents | While account is active + 30 days after deletion | Regulatory compliance; deleted with account |
| Background check data | SSN purged after check initiation; report per Checkr policy | One-time verification |
| Support/safety records | 5 years | Legal, insurance, and safety compliance |
| Analytics data (GA4) | 14 months (Google's default) | Website improvement |
| Push notification tokens | Until revoked or account deleted | Notification delivery |
When data is no longer needed, it is either deleted or anonymized so it can no longer be associated with you.
9. Security
We implement reasonable administrative, technical, and physical safeguards to protect your personal information, including:
- HTTPS/TLS encryption for all data transmitted between your device and our servers
- Encrypted storage for sensitive data including passwords (bcrypt hashed) and SSNs (AES encrypted at rest)
- PCI-compliant payment processing through Stripe (we never store full card numbers)
- Role-based access controls for internal administrative systems
- Rate limiting on authentication endpoints to prevent brute-force attacks
- Webhook signature validation for all third-party integrations
- Single-device session enforcement — logging in on a new device automatically invalidates previous sessions
- Automatic session timeout after 15 minutes of inactivity
- Stripe webhook event deduplication to prevent duplicate processing
- Application error monitoring with personal data collection disabled
No method of electronic transmission or storage is 100% secure. While we strive to use commercially reasonable means to protect your personal information, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for any activity that occurs under your account.
10. Your Privacy Rights & Choices
Depending on your location, you may have certain rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Deletion: Request deletion of your personal information. You can do this through the app (Settings > Delete Account), through our website at brighterconnectrides.com/delete-my-data, or by emailing privacy@brighterconnectrides.com.
- Correction: Request correction of inaccurate personal information by contacting support.
- Opt out of analytics: Disable Google Analytics via browser settings, Do Not Track, Global Privacy Control, or the GA Opt-out Add-on.
- Push notifications: Disable through your device settings at any time.
- Location services: Revoke location permissions through your device or browser settings. Note: Drivers must have location enabled to go online.
- SMS communications: Reply STOP to any BrighterConnect SMS to unsubscribe. Reply START to re-subscribe.
- Account closure: You may close your account at any time through the app or by contacting support.
We will respond to verifiable requests within 30 days. We will not discriminate against you for exercising your privacy rights.
11. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
11.1 Categories of Personal Information Collected
In the preceding 12 months, we have collected the following categories of personal information as defined by the CCPA:
- Identifiers (name, email, phone number, IP address)
- Personal information under Cal. Civ. Code 1798.80(e) (name, address, phone)
- Geolocation data (GPS coordinates for ride matching)
- Internet/electronic network activity (website usage, app interactions)
- Professional information (driver status, vehicle information)
- Sensitive personal information (SSN for background checks, precise geolocation)
11.2 Sale and Sharing
BrighterConnect does not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use advertising pixels or retargeting technologies.
11.3 Your California Rights
- Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected.
- Right to Delete: Request deletion of personal information we have collected.
- Right to Correct: Request correction of inaccurate personal information.
- Right to Opt Out of Sale/Sharing: Since we do not sell or share personal information for behavioral advertising, there is no sale or sharing to opt out of.
- Right to Limit Use of Sensitive Personal Information: You may request that we limit our use of sensitive personal information (such as SSN or precise location) to what is necessary to provide the service.
- Right to Non-Discrimination: We will not deny service, charge different prices, or provide a different quality of service because you exercised your privacy rights.
11.4 How to Submit a Request
To exercise your California privacy rights, you may:
- Email privacy@brighterconnectrides.com
- Use our data deletion request form
- Call (443) 653-4776
We will verify your identity before processing any request. You may also designate an authorized agent to make a request on your behalf.
11.5 Global Privacy Control
We recognize and honor the Global Privacy Control (GPC) signal. When detected, our website does not load Google Analytics tracking.
12. International Users
BrighterConnect currently operates in the state of Maryland, United States. Our servers and service providers are located in the United States. If you access our platform from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.
If you are located in the European Economic Area (EEA) or United Kingdom, we process your data on the basis of contractual necessity (to provide the ride service you requested), legitimate interest (to improve and secure our platform), and consent (for analytics, where applicable). You may contact us to exercise rights of access, rectification, erasure, restriction, portability, or objection.
13. Children's Privacy
BrighterConnect is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided personal information to us, please contact us at privacy@brighterconnectrides.com and we will take steps to delete such information.
14. Changes to This Policy
We may update this Privacy Notice from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Update the "Last Updated" date at the top of this notice
- Update the version number
- Notify registered users via email or in-app notification for material changes
- Post the updated notice on our website
Your continued use of BrighterConnect after changes are posted constitutes acceptance of the updated policy. We encourage you to review this notice periodically.
15. Contact Us
For questions, concerns, or requests regarding this Privacy Notice or your personal information:
BrighterConnect LLC
Email: privacy@brighterconnectrides.com
Phone: (443) 653-4776
Website: brighterconnectrides.com
Data Deletion: brighterconnectrides.com/delete-my-data
Privacy Choices: brighterconnectrides.com/your-privacy-choices