This Policy is a legally binding agreement between you (“User”, “you” or “your”) and Nexlit Inc. (“Nexlit Inc.”, “we”, “us” or “our”). If you are entering into this agreement on behalf of a business or other legal entity, you represent that you have the authority to bind such entity to this agreement, in which case the terms “User”, “you” or “your” shall refer to such entity. If you do not have such authority, or if you do not agree with the terms of this agreement, you must not accept this agreement and may not access and use the Website and Services. By accessing and using the Website and Services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Policy. This Policy does not apply to the practices of companies that we do not own or control, or to individuals that we do not employ or manage.
You can access and use the Website and Services without telling us who you are or revealing any information by which someone could identify you as a specific, identifiable individual. If, however, you wish to use some of the features offered on the Website, you may be asked to provide certain Personal Information (for example, your name and e-mail address).
We receive and store any information you knowingly provide to us when you create an account, publish content, make a purchase, or fill any forms on the Website. When required, this information may include the following:
Some of the information we collect is directly from you via the Website and Services. However, we may also collect Personal Information about you from other sources such as social media platforms and our joint partners. Personal Information we collect from other sources may include demographic information, such as age and gender, device information, such as IP addresses, location, such as city and state, and online behavioral data, such as information about your use of social media websites, page view information and search results and links.
You can choose not to provide us with your Personal Information, but then you may not be able to take advantage of some of the features on the Website. Users who are uncertain about what information is mandatory are welcome to contact us.
We do not knowingly collect any Personal Information from children under the age of 13. If you are under the age of 13, please do not submit any Personal Information through the Website and Services. If you have reason to believe that a child under the age of 13 has provided Personal Information to us through the Website and Services, please contact us to request that we delete that child’s Personal Information from our Services.
We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce this Policy by instructing their children never to provide Personal Information through the Website and Services without their permission. We also ask that all parents and legal guardians overseeing the care of children take the necessary precautions to ensure that their children are instructed to never give out Personal Information when online without their permission.
We act as a data controller and a data processor in terms of the GDPR when handling Personal Information, unless we have entered into a data processing agreement with you in which case you would be the data controller and we would be the data processor.
Our role may also differ depending on the specific situation involving Personal Information. We act in the capacity of a data controller when we ask you to submit your Personal Information that is necessary to ensure your access and use of the Website and Services. In such instances, we are a data controller because we determine the purposes and means of the processing of Personal Information and we comply with data controllers’ obligations set forth in the GDPR.
We act in the capacity of a data processor in situations when you submit Personal Information through the Website and Services. We do not own, control, or make decisions about the submitted Personal Information, and such Personal Information is processed only in accordance with your instructions. In such instances, the User providing Personal Information acts as a data controller in terms of the GDPR.
In order to make the Website and Services available to you, or to meet a legal obligation, we may need to collect and use certain Personal Information. If you do not provide the information that we request, we may not be able to provide you with the requested products or services. Any of the information we collect from you may be used for the following purposes:
Processing your Personal Information depends on how you interact with the Website and Services, where you are located in the world and if one of the following applies: (i) you have given your consent for one or more specific purposes; this, however, does not apply, whenever the processing of Personal Information is subject to California Consumer Privacy Act or European data protection law; (ii) provision of information is necessary for the performance of an agreement with you and/or for any pre-contractual obligations thereof; (iii) processing is necessary for compliance with a legal obligation to which you are subject; (iv) processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in us; (v) processing is necessary for the purposes of the legitimate interests pursued by us or by a third party.
Note that under some legislations we may be allowed to process information until you object to such processing by opting out, without having to rely on consent or any other of the legal bases. In any case, we will be happy to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Information is a statutory or contractual requirement, or a requirement necessary to enter into a contract.
In case of Services requiring payment, you may need to provide your credit card details or other payment account information, which will be used solely for processing payments. We use third-party payment processors (“Payment Processors”) to assist us in processing your payment information securely.
Payment Processors adhere to the latest security standards as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. Sensitive and private data exchange happens over a SSL secured communication channel and is encrypted and protected with digital signatures, and the Website and Services are also in compliance with strict vulnerability standards in order to create as secure of an environment as possible for Users. We will share payment data with the Payment Processors only to the extent necessary for the purposes of processing your payments, refunding such payments, and dealing with complaints and queries related to such payments and refunds.
Please note that the Payment Processors may collect some Personal Information from you, which allows them to process your payments (e.g., your email address, address, credit card details, and bank account number) and handle all the steps in the payment process through their systems, including data collection and data processing. The Payment Processors’ use of your Personal Information is governed by their respective privacy policies which may or may not contain privacy protections as protective as this Policy. We suggest that you review their respective privacy policies.
You are able to delete certain Personal Information we have about you. The Personal Information you can delete may change as the Website and Services change. When you delete Personal Information, however, we may maintain a copy of the unrevised Personal Information in our records for the duration necessary to comply with our obligations to our affiliates and partners, and for the purposes described below. If you would like to delete your Personal Information or permanently delete your account, you can do so on the settings page of your account on the Website.
Depending on the requested Services or as necessary to complete any transaction or provide any Service you have requested, we may share your information with our affiliates, contracted companies, and service providers (collectively, “Service Providers”) we rely upon to assist in the operation of the Website and Services available to you and whose privacy policies are consistent with ours or who agree to abide by our policies with respect to Personal Information. We will not share any personally identifiable information with third parties and will not share any information with unaffiliated third parties.
Service Providers are not authorized to use or disclose your information except as necessary to perform services on our behalf or comply with legal requirements. Service Providers are given the information they need only in order to perform their designated functions, and we do not authorize them to use or disclose any of the provided information for their own marketing or other purposes.
We may also disclose any Personal Information we collect, use or receive if required or permitted by law, such as to comply with a subpoena or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
We will retain and use your Personal Information for the period necessary to enforce our agreements, resolve disputes, and unless a longer retention period is required or permitted by law up to a maximum of 60 months.
We may use any aggregated data derived from or incorporating your Personal Information after you update or delete it, but not in a manner that would identify you personally. Once the retention period expires, Personal Information shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification, and the right to data portability cannot be enforced after the expiration of the retention period.
Depending on your location, data transfers may involve transferring and storing your information in a country other than your own. However, this will not include countries outside the European Union and European Economic Area. If any such transfer takes place, you can find out more by checking the relevant sections of this Policy or inquire with us using the information provided in the contact section.
If you are a resident of the European Economic Area (“EEA”), you have certain data protection rights and we aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Information. If you wish to be informed what Personal Information we hold about you and if you want it to be removed from our systems, please contact us. In certain circumstances, you have the following data protection rights:
(i) You have the right to withdraw consent where you have previously given your consent to the processing of your Personal Information. To the extent that the legal basis for our processing of your Personal Information is consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.
(ii) You have the right to learn if your Personal Information is being processed by us, obtain disclosure regarding certain aspects of the processing, and obtain a copy of your Personal Information undergoing processing.
(iii) You have the right to verify the accuracy of your information and ask for it to be updated or corrected. You also have the right to request us to complete the Personal Information you believe is incomplete.
(iv) You have the right to object to the processing of your information if the processing is carried out on a legal basis other than consent. Where Personal Information is processed for the public interest, in the exercise of an official authority vested in us, or for the purposes of the legitimate interests pursued by us, you may object to such processing by providing a ground related to your particular situation to justify the objection. You must know that, however, should your Personal Information be processed for direct marketing purposes, you can object to that processing at any time without providing any justification. To learn whether we are processing Personal Information for direct marketing purposes, you may refer to the relevant sections of this Policy.
(v) You have the right, under certain circumstances, to restrict the processing of your Personal Information. These circumstances include: the accuracy of your Personal Information is contested by you and we must verify its accuracy; the processing is unlawful, but you oppose the erasure of your Personal Information and request the restriction of its use instead; we no longer need your Personal Information for the purposes of processing, but you require it to establish, exercise or defend your legal claims; you have objected to processing pending the verification of whether our legitimate grounds override your legitimate grounds. Where processing has been restricted, such Personal Information will be marked accordingly and, with the exception of storage, will be processed only with your consent or for the establishment, to exercise or defense of legal claims, for the protection of the rights of another natural, or legal person or for reasons of important public interest.
(vi) You have the right, under certain circumstances, to obtain the erasure of your Personal Information from us. These circumstances include: the Personal Information is no longer necessary in relation to the purposes for which it was collected or otherwise processed; you withdraw consent to consent-based processing; you object to the processing under certain rules of applicable data protection law; the processing is for direct marketing purposes; and the personal data have been unlawfully processed. However, there are exclusions of the right to erasure such as where processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation; or for the establishment, to exercise or defense of legal claims.
(vii) You have the right to receive your Personal Information that you have provided to us in a structured, commonly used, and machine-readable format and, if technically feasible, to have it transmitted to another controller without any hindrance from us, provided that such transmission does not adversely affect the rights and freedoms of others.
(viii) You have the right to complain to a data protection authority about our collection and use of your Personal Information. If you are not satisfied with the outcome of your complaint directly with us, you have the right to lodge a complaint with your local data protection authority. For more information, please contact your local data protection authority in the EEA. This provision is applicable provided that your Personal Information is processed by automated means and that the processing is based on your consent, on a contract which you are part of, or on pre-contractual obligations thereof.
Consumers residing in California are afforded certain additional rights with respect to their Personal Information under the California Consumer Privacy Act (“CCPA”). If you are a California resident, this section applies to you.
In addition to the rights as explained in this Policy, California residents who provide Personal Information as defined in the statute to obtain Services for personal, family, or household use are entitled to request and obtain from us, once a calendar year, information about the categories and specific pieces of Personal Information we have collected and disclosed.
Furthermore, California residents have the right to request deletion of their Personal Information or opt-out of the sale of their Personal Information which may include selling, disclosing, or transferring Personal Information to another business or a third party for monetary or other valuable consideration. To do so, simply contact us. We will not discriminate against you if you exercise your rights under the CCPA.
Any requests to exercise your rights can be directed to us through the contact details provided in this document. Please note that we may ask you to verify your identity before responding to such requests. Your request must provide sufficient information that allows us to verify that you are the person you are claiming to be or that you are the authorized representative of such person. If we receive your request from an authorized representative, we may request evidence that you have provided such an authorized representative with power of attorney or that the authorized representative otherwise has valid written authority to submit requests on your behalf.
You must include sufficient details to allow us to properly understand the request and respond to it. We cannot respond to your request or provide you with Personal Information unless we first verify your identity or authority to make such a request and confirm that the Personal Information relates to you.
Our Website and Services use “cookies” to help personalize your online experience. A cookie is a text file that is placed on your hard disk by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you, and can only be read by a web server in the domain that issued the cookie to you. If you choose to decline cookies, you may not be able to fully experience the features of the Website and Services.
Some browsers incorporate a Do Not Track feature that signals to websites you visit that you do not want to have your online activity tracked. Tracking is not the same as using or collecting information in connection with a website. For these purposes, tracking refers to collecting personally identifiable information from consumers who use or visit a website or online service as they move across different websites over time. The Website and Services do not track its visitors over time and across third-party websites. However, some third-party websites may keep track of your browsing activities when they serve you content, which enables them to tailor what they present to you. For a description of Do Not Track protocols for browsers and mobile devices or to learn more about the choices available to you, visit internetcookies.com
We may display online advertisements and we may share aggregated and non-identifying information about our customers that we or our advertisers collect through your use of the Website and Services. We do not share personally identifiable information about individual customers with advertisers. In some instances, we may use this aggregated and non-identifying information to deliver tailored advertisements to the intended audience.
We offer electronic newsletters to which you may voluntarily subscribe at any time. We are committed to keeping your e-mail address confidential and will not disclose your email address to any third parties except as allowed in the information use and processing section. We will maintain the information sent via e-mail in accordance with applicable laws and regulations.
In compliance with the CAN-SPAM Act, all e-mails sent from us will clearly state who the e-mail is from and provide clear information on how to contact the sender. You may choose to stop receiving our newsletter or marketing emails by following the unsubscribe instructions included in these emails or by contacting us. However, you will continue to receive essential transactional emails.
The Website and Services contain links to other resources that are not owned or controlled by us. Please be aware that we are not responsible for the privacy practices of such other resources or third parties. We encourage you to be aware when you leave the Website and Services and to read the privacy statements of each and every resource that may collect Personal Information.
We secure information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We maintain reasonable administrative, technical, and physical safeguards in an effort to protect against unauthorized access, use, modification, and disclosure of Personal Information in our control and custody. However, no data transmission over the Internet or wireless network can be guaranteed.
Therefore, while we strive to protect your Personal Information, you acknowledge that (i) there are security and privacy limitations of the Internet which are beyond our control; (ii) the security, integrity, and privacy of any and all information and data exchanged between you and the Website and Services cannot be guaranteed; and (iii) any such information and data may be viewed or tampered with in transit by a third party, despite best efforts.
As the security of Personal Information depends in part on the security of the device you use to communicate with us and the security you use to protect your credentials, please take appropriate measures to protect this information.
In the event we become aware that the security of the Website and Services has been compromised or Users’ Personal Information has been disclosed to unrelated third parties as a result of external activity, including, but not limited to, security attacks or fraud, we reserve the right to take reasonably appropriate measures, including, but not limited to, investigation and reporting, as well as notification to and cooperation with law enforcement authorities. In the event of a data breach, we will make reasonable efforts to notify affected individuals if we believe that there is a reasonable risk of harm to the User as a result of the breach or if notice is otherwise required by law. When we do, we will post a notice on the Website, send you an email.
We reserve the right to modify this Policy or its terms related to the Website and Services at any time at our discretion. When we do, we will revise the updated date at the bottom of this page. We may also provide notice to you in other ways at our discretion, such as through the contact information you have provided.
An updated version of this Policy will be effective immediately upon the posting of the revised Policy unless otherwise specified. Your continued use of the Website and Services after the effective date of the revised Policy (or such other act specified at that time) will constitute your consent to those changes. However, we will not, without your consent, use your Personal Information in a manner materially different than what was stated at the time your Personal Information was collected.
You acknowledge that you have read this Policy and agree to all its terms and conditions. By accessing and using the Website and Services and submitting your information you agree to be bound by this Policy. If you do not agree to abide by the terms of this Policy, you are not authorized to access or use the Website and Services.
When you use GigtoGo, you trust us with your personal data. We’re committed to keeping that trust. That starts with helping you understand our privacy practices.
This notice describes the personal data we collect, how it’s used and shared, and your choices regarding this data. We recommend that you read this along with our privacy overview, which highlights key points about our privacy practices.
Download previous version
This notice applies to users of GigtoGo’s services anywhere in the world, including users of GigtoGo’s apps, websites, features, or other services.
This notice describes how GigtoGo and its affiliates collect and use personal data. This notice applies to all users of our apps, websites, features, or other services anywhere in the world. This notice specifically applies to:
Riders: individuals who request or receive transportation, including those who receive transportation requested by another individual
Drivers: individuals who provide transportation to Riders individually or through partner transportation companies
Order recipients: individuals who request or receive food, or other products and services for delivery or pick-up, including via GigtoGo, and including individuals who use guest checkout
Delivery persons: individuals who provide delivery services, including via GigtoGo,
This notice also governs GigtoGo’s other collections of personal data in connection with its services. For example, we may collect the contact information of individuals who use accounts owned by GigtoGo for Business customers, or of owners or employees of restaurants or other merchants; personal data of those who start but do not complete applications to be drivers or delivery persons; or other personal data in connection with our mapping technology and features.
All those subject to this notice are referred to as “users” in this notice.
In addition, please note the following:
For users in Argentina: The Public Information Access agency, in its role of Regulating Body of Law 25.326, is responsible for receiving complaints and reports presented by any data subjects who believe their rights have been impacted by a violation of the local data protection regulation.
For users in Brazil: Please see here for information regarding GigtoGo’s privacy practices required under Brazil’s General Data Protection Law (Lei Geral de Proteção de Dados - LGPD).
For California users: Information regarding GigtoGo’s privacy practices related to the California Consumer Privacy Act (CCPA) is available here.
For users in Colombia: This notice also applies for the lessors and lessees. For the purposes of this notice, lessors will be considered drivers and lessees will be considered riders.
For users in Mexico: Please see here for information regarding GigtoGo’s privacy practices required under Mexico’s Mexican Personal Data Protection Law (Ley Federal de Protección de Datos Personales en Posesión de los Particulares).
For users in South Korea: Please see here for information about GigtoGo affiliate UT LLC's privacy practices.
For Guest Users: The personal data of those who order or receive trips, deliveries or order pick-ups via partner websites or apps (such as when ordering from a restaurant or other merchant), or arranged by other account owners (collectively “Guest Users”) is used solely to provide such trips, deliveries, or other services requested through a third party, and for purposes of safety and security, customer support, research and development, enabling communication between users, and in connection with legal proceedings and requirements, each as described in “How we use personal data” below. Guest User personal data may be shared with third parties for these purposes. Such data may be associated with, and accessible by, the owner of that account. This specifically includes Guest Users who receive rides/deliveries ordered by owners of GigtoGo Health, GigtoGo Central, GigtoGo Direct or GigtoGo for Business accounts, or who receive rides or deliveries ordered by friends, family members or others.
Our practices are subject to applicable laws in the places in which we operate. This means that we engage in the practices described in this notice in a particular country or region only if permitted under the laws of those places. Please contact us here or through the addresses below with any questions regarding our practices in a particular region.
GigtoGo operates, and processes personal data, globally. The exercise of data protection rights can be directed at any controller mentioned above, preferably via the designated channels, and will be handled by GigtoGo as a group. We may also transfer such data to countries other than the one where our users live or use GigtoGo’s services. We do so to fulfill our agreements with users, such as our Terms & Conditions, or based on users’ prior consent, adequacy decisions for the relevant countries, or other transfer mechanisms as may be available under applicable law, such as the Standard Contractual Clauses.
Questions, comments, and complaints about GigtoGo’s data practices can be submitted here. You may also use this form to submit a question to GigtoGo’s Data Protection Officer. https://www.nexlit.com/contact-us
Data collections and uses
A. The data we collect
GigtoGo collects personal data:
provided by users to GigtoGo, such as during account creation
created during use of our services, such as location, app usage, and device data
from other sources, such as other users or account owners, business partners, vendors, insurance and financial solution providers, and governmental authorities
The following personal data is collected by or on behalf of GigtoGo:
1. Data provided by users. This includes:
User profile and checkout information: We collect data when users place orders (including using guest checkout) or create or update their GigtoGo accounts. This may include their name, email, phone number, login name and password, address, profile picture, payment, or banking information (including related payment verification information), driver’s license and other government identification documents (which may indicate document numbers as well as birth date, gender, and photo). This also includes vehicle or insurance information of drivers and delivery persons, emergency contact information, user settings, and evidence of health or fitness to provide services using GigtoGo apps.
This also includes gender and/or occupation (when required for certain GigtoGo services or programs, such as GigtoGo Cash or features that enable women to provide services or receive services to/from other women).
We may use the photos submitted by users to verify their identities, such as through facial verification technologies. For more information, please see the section titled “How we use personal data.”
Background check and identity verification (drivers and delivery persons): This may include information such as driver history or criminal record (where permitted by law), license status, known aliases and prior addresses, and right to work. This information may be collected by an authorized vendor on GigtoGo’s behalf. We also verify the identities of riders, and of order recipients who request alcohol orders.
Demographic data: We may collect demographic data about users, including through user surveys. In some countries, we may also receive demographic data about users from third parties.
We may also infer demographic data from other data collected from users. For example, where necessary to enable features that allow women to provide or receive services from other women, we may infer gender using their first name. In such cases, we enable users to change their gender, if necessary, via in-app settings.
User content: We collect the data submitted by users when they contact GigtoGo customer support (including at GigtoGo Greenlight Hubs, or via videoconferencing tools), provide ratings or compliments for other users, restaurants, or merchants, or otherwise contact GigtoGo. This may include feedback, photographs or other recordings collected by users, including audio or video recordings (such as from dashcams) submitted by users in connection with customer support. This also includes metadata relating to the method you use to communicate with GigtoGo.
Travel information: We collect travel itinerary information, including the times and dates of upcoming flight, lodging or car rental reservations, from users of our GigtoGo Travel feature. We collect such information: (i) when users manually input their information into an GigtoGo Travel itinerary; or (2) if authorized by users to access their Gmail accounts, from travel-related email confirmations. If so authorized, GigtoGo will only access users’ Gmail accounts to collect travel itinerary information to enable the GigtoGo Travel feature, and will adhere to Google’s API Services User Data Policy, including the limitations on use of data collected from users’ Gmail accounts.
2. Data created during use of our services. This includes:
Location data (driver and delivery person): We collect drivers’ and delivery persons’ precise or approximate location data, including to enable rides and deliveries, to enable ride/delivery tracking and safety features, to prevent and detect fraud, and to satisfy legal requirements. GigtoGo collects this data when the GigtoGo app is running in the foreground (app open and on-screen) or background (app open but not on-screen) of their mobile device.
Location data (riders and order recipients). We collect riders’, and order recipients’ precise or approximate location data to enable and enhance use of our apps, including to improve rider and order pickups, facilitate deliveries, enable safety features, and prevent and detect fraud. Please see our Rider Location Help page for detailed information on how we use this data.
We collect such data from users’ mobile devices if they enable us to do so. (See “Choice and transparency” below for information on how riders, and order recipients can enable location data collection). GigtoGo collects such data from the time a ride, or order is requested until it is finished (and may indicate such collection via an icon or notification on your mobile device depending on your device’s operating system), and any time the app is running in the foreground (app open and on-screen) of their mobile device.
Riders and order recipients may use the GigtoGo apps without enabling GigtoGo to collect precise location data from their mobile devices. However, this may affect features in the GigtoGo apps. For example, a rider who has not enabled location data collection will have to manually enter their pickup address.
Transaction information: We collect transaction information related to the use of our services, including the type of services requested or provided, order details, payment transaction information (such as a restaurant’s or merchant's name and location and amount of transaction), delivery information, date and time the service was provided, amount charged, distance traveled, and payment method. Additionally, if someone uses your promotion code, we may associate your name with that person.
Usage data: We collect data about how users interact with our services. This includes data such as access dates and times, app features or pages viewed, app crashes and other system activity, and type of browser. We may also collect data regarding the third-party sites or services used before interacting with our services, which we use for marketing. (Please see "How We Use Data" below for more information on how we market our services to users).
In some cases, we collect this data through cookies, pixels, tags, and similar tracking technologies that create and maintain unique identifiers. To learn more about these technologies, please see our Cookie Notice.
Device data: We may collect data about the devices used to access our services, including the hardware models, device IP address or other unique device identifiers, operating systems and versions, software, preferred languages, advertising identifiers, device motion data, and mobile network data.
Communications data: We enable users to communicate with each other and GigtoGo through GigtoGo’s mobile apps and websites. For example, we enable drivers and riders, and delivery persons and order recipients, to call, text, or send other files to each other (generally without disclosing their telephone numbers to each other). To provide this service, GigtoGo receives some data regarding the calls, texts, or other communications, including the date and time of the communications and the content of the communications. GigtoGo may also use this data for customer support services (including to resolve disputes between users), for safety and security purposes, to improve our services and features, and for analytics.
Safety recordings: In certain jurisdictions, and where it’s permitted by law, users can record the audio and/or video of their trips through an in-app feature or using a dashcam. In app recordings are encrypted and stored on users’ devices and are only shared with GigtoGo if submitted to customer support by the users in connection with safety incidents. Please see here for more information.
3. Data from other sources. These include:
Users participating in our referral programs. For example, when a user refers to another person, we receive the referred person’s personal data from that user.
GigtoGo account owners who request services for or on behalf of other users, or who enable such users to request or receive services through their accounts. This includes owners of GigtoGo for Business accounts.
users or others providing information in connection with claims or disputes.
GigtoGo business partners through which users create or access their GigtoGo account, such as payment providers, social media services, or apps or websites that use GigtoGo’s APIs or whose APIs GigtoGo uses.
GigtoGo business partners in connection with debit or credit cards issued by a financial institution in partnership with GigtoGo to the extent disclosed in the terms and conditions for the card.
vendors who help us verify users’ identity, background information, and eligibility to work, or who screen users in connection with sanctions, anti-money laundering, or know-your-customer requirements
insurance, vehicle, or financial services providers for drivers and/or delivery persons
partner transportation companies (for drivers or delivery persons who use our services through an account associated with such a company)
publicly available sources
marketing service providers or data resellers whose data GigtoGo uses for marketing or research
law enforcement officials, public health officials, and other government authorities
GigtoGo may combine the data collected from these sources with other data in its possession.
B. How we use personal data
GigtoGo uses personal data to enable reliable and convenient transportation, delivery, and other products and services. We also use such data:
to enhance the safety and security of our users and services
for customer support
for research and development
to enable communications between users
to send marketing and non-marketing communications to users
in connection with legal proceedings
GigtoGo does not sell or share user personal data with third parties for their direct marketing, except with users’ consent.
We use personal data we collect:
1. To provide our services. GigtoGo uses data to provide, personalize, maintain, and improve our services.
This includes using data to:
enable transportation and delivery services (such as using location data to facilitate a rider or order pickup or delivery), features that involve data sharing (such as fare splitting, ETA sharing, and ratings and compliments), and accessibility features to facilitate use of our services by those with disabilities
track and share the progress of rides or deliveries
create GigtoGo travel itineraries and offer related services, such as rides to the airport, rental car reservations, or food deliveries.
personalize users’ accounts. We may, for example, present an GigtoGo, user with personalized restaurant or food recommendations based on their prior orders. Please see the section of this notice titled “Choice and transparency” to learn how to object to this use of personal data.
facilitate insurance, vehicle, invoicing, or financing solutions
perform necessary operations to maintain our services, including to troubleshoot software bugs and operational problems; to conduct data analysis, testing, and research; and to monitor and analyze usage and activity trends.
2. Safety and security. We use personal data to help maintain the safety, security, and integrity of our services and users. This includes:
verifying users' identity and eligibility to provide transportation or deliveries, including through reviews of background checks, where permitted by law, to help prevent use of our services by unsafe drivers and/or riders.
In certain regions, this includes GigtoGo’s Real-Time ID Check feature, which prompts drivers and delivery persons to share a selfie before going online to help ensure that the driver or delivery person using the app matches the GigtoGo account we have on file. We may also use this feature to complete other actions on your account, such as verifying change of bank account information or regaining account access.
Where permitted by law, we may also use selfies to verify that users are wearing masks, helmets, or other safety gear through the use of object verification technology, where permitted by law.
In addition, where permitted by law, we may use facial recognition technology to process user profile photographs, identification photographs, or other user-submitted photographs for the sole purpose of preventing identity-borrowing or use of our services by unauthorized drivers or delivery people.
using data from drivers’ or delivery persons’ devices to detect unsafe driving behavior such as speeding or harsh braking and acceleration, and to inform them of safer driving practices. We also use data from delivery persons’ devices to verify the type of vehicles they used to provide deliveries.
using device, location, user profile, usage, and other data to prevent, detect, and combat fraud. This includes identifying fraudulent accounts or uses of our services, preventing use of our services by unauthorized drivers or delivery persons, verifying user identities in connection with certain payment methods, and preventing and combating unauthorized access to users’ accounts.
using user ratings, reported incidents, and other feedback to encourage compliance with our Community Guidelines and as grounds for deactivating users with low ratings or who otherwise violated such guidelines in certain countries.
sharing username, location, phone number, vehicle details and other relevant information with third-party companies that support the management and de-escalation of interpersonal conflicts that may occur between users while on a trip or in the process of making a delivery.
using ratings, usage, and other data to prevent matching of riders and drivers for whom there is higher risk of conflict (for instance, because one user previously gave the other a one-star rating).
3. Customer support. GigtoGo uses the information we collect (which may include call recordings) to provide customer support, including to investigate and address user concerns and to monitor and improve our customer support responses and processes.
4. Research and development. We may use personal data for testing, research, analysis, product development, and machine learning to improve the user experience. This helps us make our services more convenient and easier-to-use, enhance the safety and security of our services, and develop new services and features.
5. Enabling communications between users. For example, a driver may message or call a rider to confirm a pick-up location, a rider may contact a driver to retrieve a lost item, or a restaurant or delivery person may call an order recipient with information about their order.
6. Marketing. GigtoGo may use personal data to market our services to our users. This includes sending users communications about GigtoGo services, features, promotions, sweepstakes, studies, surveys, news, updates, and events. We may do so through various methods, including email, text messages, push notifications, in app communications and ads, and ads on third party platforms.
We may also inform users about products and services offered by GigtoGo partners. For example, we may provide recommendations, promotions, or ads for GigtoGo partners based on users’ past orders. Although we inform users about products and services offered by GigtoGo partners, we do not sell users’ personal data to, or share it with, such partners or others for purposes of their own direct marketing or advertising, except with users’ consent.
We may use the data we collect, including in combination with advertising partners’ data, to personalize and improve the marketing communications (including ads) that we send on and off GigtoGo’s apps and websites, including based on user location, use of GigtoGo’s services, and user preferences and settings. For example, we share user data (such as hashed email address, usage information, and device or user identifiers) with Facebook and TikTok to personalize and improve our ads for GigtoGo’s services.
For information about how to opt out of certain marketing communications (including ads) from GigtoGo and its advertising partners, please see the section titled “Marketing choices.”
We may also send users communications regarding elections, ballots, referenda, and other political and notice processes that relate to our services. For example, GigtoGo has notified some users by email of ballot measures or pending legislation relating to GigtoGo’s services in those users’ areas.
GigtoGo performs the above activities on the grounds that they are necessary for purposes of GigtoGo’s legitimate interests in informing users about GigtoGo services and features or those offered by GigtoGo partners, or on the basis of user consent. See the sections titled “Choice and transparency” and “Marketing choices” for information on your choices regarding GigtoGo’s use of your data for marketing.
7. non-marketing communications. GigtoGo may use personal data to generate and provide users with receipts; inform them of changes to our terms, services, or policies; or send other communications that aren’t for the purpose of marketing the services or products of GigtoGo or its partners.
8. Legal proceedings and requirements. We may use personal data to investigate or address claims or disputes relating to use of GigtoGo’s services, to satisfy requirements under applicable laws, regulations, or operating licenses or agreements, or pursuant to legal process or governmental request, including from law enforcement.
GigtoGo performs the above activities on the grounds that they are necessary for purposes of GigtoGo’s legitimate interests in investigating and responding to claims and disputes relating to use of GigtoGo’s services and features, and/or necessary for compliance with applicable legal requirements.
9. Automated decision-making
We use personal data to make automated decisions relating to use of our services. This includes:
enabling dynamic pricing, in which the price of a ride, or the delivery fee for GigtoGo, orders, is determined based on constantly varying factors such as the estimated time and distance, the predicted route, estimated traffic, and the number of riders and drivers using GigtoGo at a given moment.
matching available drivers and delivery persons to users requesting services. Users can be matched based on availability, proximity, and other factors such as likelihood to accept a trip based on their past behavior or preferences. Please see here for further information about our matching process.
determining user ratings, and deactivating users with low ratings. In the European Union or where otherwise required by law, such deactivation occurs only after human review and/or the possibility to appeal. For more information about how ratings are determined and used, please see here for rider ratings, here for driver ratings, and here for delivery person ratings. Please also see the section below titled “Ratings look-up” for further information.
flagging users who are identified as having engaged in fraud, unsafe activity, or other activities that may harm GigtoGo, its users, and others. In some cases, such as when a user is determined to be abusing GigtoGo’s referral program or has submitted fraudulent documents, such behavior may result in automatic deactivation, or in the European Union or where otherwise required by law, deactivation after human review.
using driver location information, and communications between riders and drivers, to identify cancellation fees earned or induced through fraud. For example, if we determine by using such information that a driver is delaying a rider pickup to induce a cancellation, we will not charge the rider a cancellation fee and will adjust the amounts paid to the driver to omit such a fee. To object to such an adjustment, please contact GigtoGo customer support.
Using driver data (such as location, rating, and gender) and rider data (such as rating, origin and destination) to help avoid pairings of users that may result in increased risk of conflict.
Click the links in this section for more information about these processes. To object to a deactivation resulting from these processes, please contact GigtoGo customer support.
C. Cookies and third-party technologies
remembering user preferences and settings
determining the popularity of content
delivering and measuring the effectiveness of advertising campaigns
analyzing site traffic and trends, and generally understanding the online behaviors and interests of people who interact with our services
D. Data sharing and disclosure
Some of GigtoGo’s services and features require that we share personal data with other users or at a user’s request. We may also share such data with our affiliates, subsidiaries, and partners, for legal reasons or in connection with claims or disputes.
GigtoGo may share personal data:
1. With other users
This includes sharing:
riders’ first name, rating, and pickup and/or dropoff locations with drivers
riders’ first name with other riders in a carpool trip. Riders in carpool trips may also see the dropoff location of the other riders.
order recipients’ first name, delivery address, and order information with the restaurant or merchant and, for order deliveries, with the delivery person. We may also share ratings and feedback, or other information to the extent required by law, with the restaurant or merchant and, for order deliveries, the delivery person.
for drivers and delivery persons, we may share data with the rider(s), order recipient(s) and restaurants or merchants, including name and photo; vehicle make, model, color, license plate, and vehicle photo; location (before and during trip); average rating provided by users; total number of trips; period of time since they signed up to be a driver or delivery person; contact information (if permitted by applicable laws); and driver or delivery person profile, including compliments and other feedback submitted by past users.
We also provide riders and order recipients with receipts containing information such as a breakdown of amounts charged, driver or delivery person first name, photo, and route map. We also include other information on those receipts if required by law.
for those who participate in GigtoGo’s referral program, we share certain personal data of referred users, such as trip count, with the user who referred them, to the extent relevant to determining the referral bonus.
2. At the user’s request
This includes sharing data with:
Other people at the user’s request. For example, we share a user’s ETA and location with a friend when requested by that user, or a user’s trip information when they split a fare with a friend.
GigtoGo business partners. For example, if a user requests a service through a partnership or promotional offering made by a third party, GigtoGo may share certain data with those third parties. This may include, for example, other services, platforms, apps, or websites that integrate with our APIs; vehicle suppliers or services; those with an API or service with which we integrate; or restaurants, merchants or other GigtoGo business partners and their users in connection with promotions, contests, or specialized services.
Emergency services: We offer features that enable users to share their data with police, fire, and ambulance services in the event of an emergency or after certain incidents. For more information, please see the sections below titled “Choice and Transparency” and “Emergency Data Sharing”.
3. With the general public
Questions or comments from users submitted through public forums such as GigtoGo blogs and GigtoGo social media pages may be viewable by the public, including any personal data included in the questions or comments submitted by a user.
4. With the GigtoGo account owner
If a user requests transportation or places an order using an account owned by another party, we may share their order or trip information, including location data, with the owner of that account. This occurs, for example, when:
a rider uses their employer’s GigtoGo for Business profile, such as when they take trips arranged through GigtoGo Central
a driver or delivery person uses an account owned by or associated with an GigtoGo partner transportation company or restaurant
a rider takes a trip arranged by a friend or under a Family Profile
a delivery person acts as a substitute (UK only)
5. With GigtoGo subsidiaries and affiliates
We share personal data with our subsidiaries and affiliates to help us provide our services or conduct data processing on our behalf. For example, GigtoGo processes and stores such data in the United States on behalf of its international subsidiaries and affiliates.
6. With GigtoGo service providers and business partners
GigtoGo provides personal data to vendors, consultants, marketing partners, research firms, and other service providers or business partners. These include:
payment processors and facilitators
background check and identity verification providers
cloud storage providers
social media companies, including Facebook and TikTok, in connection with GigtoGo’s use of their tools in GigtoGo’s apps and websites (see Facebook’s and TikTok’s privacy policies for information on their collection and use of data)
Marketing partners and marketing platform providers, including social media advertising services, advertising networks, third-party data providers, and other service providers to reach or better understand our users and measure advertising effectiveness
research partners, including those performing surveys or research projects in partnership with GigtoGo or on GigtoGo’s behalf
vendors that assist GigtoGo to enhance the safety and security of GigtoGo apps and services
consultants, lawyers, accountants, and other professional service providers
insurance and financing partners
providers of bike and scooters that can be rented through GigtoGo apps, such as Lime
restaurants, grocery stores and other merchants from whom order recipients place orders, as well as partners and/or their point-of-sale providers, including for order fulfillment, delivery, communications and marketing purposes
third-party vehicle suppliers, including fleet and rental partners
7. For legal reasons or in the event of a dispute
GigtoGo may share users’ personal data if we believe it’s required by applicable law, regulation, operating license or agreement, legal process, or governmental request, or where the disclosure is otherwise appropriate due to safety or similar concerns.
This includes sharing personal data with law enforcement officials, public health officials, other government authorities, airports (if required by the airport authorities as a condition of operating on airport property), or other third parties as necessary to enforce our Terms of Service, user agreements, or other policies; to protect GigtoGo’s rights or property or the rights, safety, or property of others; or in the event of a claim or dispute relating to the use of our services. In the event of a dispute relating to use of another person’s credit card, we may be required by law to share your personal data, including trip or order information, with the owner of that credit card.
For more information, please see GigtoGo’s Guidelines for Law Enforcement Authorities - United States, Guidelines for Law Enforcement Authorities - Outside the US, and Guidelines for Third Party Data Requests and Service of Legal Documents.
This also includes sharing personal data with others in connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or into another company.
8. With consent
GigtoGo may share a user’s personal data other than as described in this notice if we notify the user and they consent to the sharing.
E. Data retention and deletion
GigtoGo retains user data for as long as necessary for the purposes described above.
Users may request deletion of their accounts at any time. GigtoGo may retain user data after a deletion request due to legal or regulatory requirements or for reasons stated in this policy.
GigtoGo retains user data for as long as necessary for the purposes described above. This means that we retain different categories of data for different periods of time depending on the type of data, the category of user to whom the data relates, and the purposes for which we collected the data.
Users may request deletion of their account at any time through the Settings > Privacy menus in the GigtoGo app, or through GigtoGo’s website (riders and order recipients here; drivers and delivery persons here; guest checkout users here).
Following an account deletion request, GigtoGo deletes the user’s account and data, unless they must be retained due to legal or regulatory requirements, for purposes of safety, security, and fraud prevention, or because of an issue relating to the user’s account such as an outstanding credit or an unresolved claim or dispute. Because we are subject to legal and regulatory requirements relating to drivers and delivery persons, this generally means that we retain their account and data for a minimum of 7 years after a deletion request. For riders and order recipients, their data is generally deleted within 90 days of a deletion request, except where retention is necessary for the above reasons.
Choice and transparency
GigtoGo enables users to access and/or control data that GigtoGo collects, including through:
in-app ratings pages
GigtoGo also enables users to request access to or copies of their data, changes or updates to their accounts, or deletion of their accounts, or that GigtoGo restricts its processing of user personal data.
A. Privacy settings
The Settings > Privacy menu in the GigtoGo app allows riders and order recipients to set or update their preferences regarding location data collection and sharing, emergency data sharing, and notifications.
Location data collection (riders and order recipients)
Riders and order recipients can enable/disable GigtoGo to collect location data from their mobile devices through their device settings, which can be accessed via the Settings > Privacy > Location menu.
Share Live Location (Riders)
Riders can enable/disable GigtoGo to share their real-time location data from their mobile devices with their drivers through their device settings, which can be accessed via the settings > Privacy > Location menu.
Emergency Data Sharing
Riders may enable GigtoGo to share real-time location data from their mobile devices with emergency police, fire, and ambulance services. Such data may include approximate location at the time the emergency call was placed; the car’s make, model, color, and license plate information; the rider’s name and phone number; pickup and drop off locations; and the driver’s name.
Riders may enable/disable this feature via the settings > Privacy > Location menu, or the Safety Center.
Drivers and delivery persons can also enable/disable Emergency Data Sharing via the App settings > Emergency Data Sharing menu, or the Safety Toolkit.
Notifications: account and trip updates
GigtoGo provides users with trip status notifications and updates related to activity on their account. These notifications are a necessary part of using the GigtoGo app and cannot be disabled. However, users may choose the method by which they receive these notifications through the settings > Privacy menu.
Notifications: discounts and news
Users may enable GigtoGo to send push notifications about discounts and news from GigtoGo. Push notifications may be enabled or disabled through the Settings > Privacy menus in the GigtoGo app.
Communications from restaurants and merchants
Users may opt-in to receive communications from certain restaurants while placing an order in the GigtoGo ,app. Those who opt-in may choose to cease receiving such communications through the settings > Account > Data Sharing menus in the GigtoGo ,app.
B. Device permissions
Most mobile device platforms (iOS, Android, etc.) have defined certain types of device data that apps cannot access without the device owner’s permission, and these platforms have different methods for how that permission can be obtained. Please check the available settings on your device or check with your provider.
C. In-app ratings pages
After every trip, drivers and riders are able to rate each other on a scale from 1 to 5. An average of those ratings is associated with a user’s account and is displayed to other users for whom they provide or receive services. For example, rider ratings are available to drivers from whom they request transportation, and driver ratings are available to their riders.
This 2-way system holds everyone accountable for their behavior. Accountability helps create a respectful, safe environment for drivers and riders.
Riders can see their average rating in the main menu of the GigtoGo app.
Drivers can see their average rating after tapping their profile photo in the GigtoGo Driver app.
Delivery persons may also be rated by order recipients, restaurants and merchants. Click here for more information.
D. Marketing choices
Users may opt out of certain marketing communications (including ads) and use of their data for marketing in the following ways:
Ad settings: These settings enable users to choose whether their data is shared with GigtoGo’s advertising partners to deliver personalized ads, and/or to measure the effectiveness of such ads.
Marketing emails and messages: To opt out of receiving marketing emails from GigtoGo, or for instructions on how to set your preferences regarding whether to receive marketing SMS or push notifications from GigtoGo, click here. Users may also opt out of receiving emails and other messages from GigtoGo by following the unsubscribe instructions in those messages. We may still send users who have opted out of non-promotional communications, such as receipts for rides or information about their account.
Cookies and related technologies: For information on how to opt out of personalized ads using cookies and related technologies, please see our Cookie Notice.
GigtoGo ,ads: GigtoGo ,users can opt out of certain personalized ads from GigtoGo’s advertising partners here. Users who opt out may still see ads, but they will be less relevant.
E. User personal data requests
GigtoGo provides users with a variety of ways to learn about, control, and submit questions and comments about GigtoGo’s handling of their personal data.
Accessing data: Users can access data including their profile data and trip or order history through the GigtoGo apps or via GigtoGo’s website. Users can also use our Explore Your Data feature to view an online summary of information about their account, such as number of trips or orders, rating, rewards status, and number of days since they’ve been an GigtoGo user. Users can also request access to their data here.
Receiving data: Users can request a copy of their personal data using our Download Your Data tool. For an overview of the data available through that tool, please click here. Users may also request a copy of their data here.
Changing or updating data: Users can edit the name, phone number, email address, payment method, and photo associated with their account through the Settings menu in GigtoGo’s apps or driver portal. Users may also request to update or correct their data here.
Deleting data: Users may request deletion of their account at any time through the settings > Privacy menus in the GigtoGo app, or through GigtoGo’s website (riders and order recipients here; drivers and delivery persons here).
Objections, restrictions, and complaints: Users may request that we stop using all or some of their personal data, or that we limit our use of their data. This includes objecting to our use of personal data that is based on GigtoGo’s legitimate interests. GigtoGo may continue to process data after such objection or request to the extent required or permitted by law.
In addition, depending on their location, users may have the right to file a complaint relating to GigtoGo’s handling of their personal data with the data protection authority in their country.
If you have any questions regarding the information we may hold about you or if you wish to exercise your rights, you may use the following data subject request form to submit your request:
If you have any other questions, concerns, or complaints regarding this Policy, we encourage you to contact us using the details below:
We will attempt to resolve complaints and disputes and make every reasonable effort to honor your wish to exercise your rights as quickly as possible and in any event, within the timescales provided by applicable data protection laws.
This document was last updated on Sept 23, 2022