Privacy
What we collect, why, and how long we keep it.
We collect the minimum needed to run a black-car service. We don't sell your data.
Last updated · 2026-05-30
What we collect
- Reservation details (pickup, destination, date, passengers).
- Customer contact (name, email, phone) — captured during phone confirmation.
- Payment data — processed securely by Stripe; we never store your full card number. Stripe retains a saved card to charge after your trip.
- Driver location during an active ride — only once live driver tracking launches; retained 14 days, then auto-purged.
- Anonymous product analytics via PostHog when enabled — page-level events, no PII.
What we don't do
- Sell your data, ever.
- Send marketing email without your explicit opt-in.
- Track you across other websites.
Who processes your data
We share data only with the vendors that run the service, each under their own privacy terms:
- Stripe — payment processing.
- Resend — transactional email (confirmations, sign-in links, quote replies).
- MongoDB Atlas — reservation & account storage.
- Google Maps Platform — address autocomplete.
- Cloudflare — bot protection on our forms.
- Railway — application hosting.
- PostHog — privacy-respecting, anonymous product analytics.
Retention
- Reservations: 7 years (tax + dispute resolution).
- Driver location: 14 days, then auto-purged via TTL index.
- Magic-link tokens: 10 minutes, then auto-purged via TTL index.
Your rights
Email us to request a copy of your data, a correction, or a deletion. We respond within 30 days.
This is a plain-language operating policy, not legal advice. We may update it; the current version always lives on this page, dated above.
Questions? Call 1-800-RIDEWONDER or email info@ridewonder.com.