Privacy Policy
Legal Document

Privacy Policy

Effective date July 23, 2024
Last updated August 21, 2024
Version 1.1
Region United States
§ 01

Overview

Welcome to Rig Rescue. This Privacy Policy explains how Rig Rescue ("we," "our," or "us") collects, uses, discloses, and protects information about you when you use our mobile application and related web platform (collectively, the "Service").

Rig Rescue is an on-demand mechanic service platform that connects truck and vehicle owners with nearby certified mechanics. The Service is available to Drivers, Fleet Managers, Shop Owners, Mechanics, and platform Administrators (collectively, "Users").

Plain language summary: We collect your location to match you with nearby mechanics. We collect payment information to process service transactions. We collect profile and identity information to verify Users on the platform. We do not sell your personal data to third parties or use it for advertising.

By downloading, accessing, or using the Rig Rescue app or web platform, you agree to the collection and use of information as described in this Policy. If you do not agree with the terms of this Policy, please do not use the Service.

§ 02

Who we are

Rig Rescue is operated by Robert Hartman ("Company," "we," "us"). For the purposes of applicable data protection law, the Company is the data controller responsible for your personal information.

Platform name Rig Rescue
Operator Robert Hartman
Target region United States
Contact email privacy@rigrescue.com
Website https://rigrescue.com
§ 03

Information we collect

The information we collect depends on your role within the platform. We collect information you provide directly, information generated by your use of the Service, and information from third-party services you connect.

Category Data collected Who it applies to
Identity & profile Full name, email address, phone number, profile photo, role (Driver / Mechanic / Fleet Manager / Shop Owner) All users
Account credentials Email address, hashed password, assigned login URL (for Fleet Managers and Shop Owners) All users
Precise location Real-time GPS coordinates (foreground and background), location history associated with active bookings Drivers, Mechanics
Vehicle information Truck/unit details, damage descriptions, uploaded photos of damages Drivers
Financial information Payment method details (processed and tokenized by Stripe — see §7), transaction history, wallet balance, budget allocations Drivers, Fleet Managers, Shop Owners
Communications In-app chat messages between Drivers, Mechanics, Fleet Managers, Shop Owners, and Admin All users
Reviews & ratings Star ratings and written reviews submitted after job completion Drivers (submit), Mechanics (receive)
Business information Shop name, mechanic roster, hourly rates, parts inventory data, order history Shop Owners
Fleet information Driver roster, driver budget allocations, job completion records Fleet Managers
Device & usage data Device type, OS version, app version, crash reports, feature usage analytics, IP address, push notification tokens All users
Photos and media: When you submit an emergency service booking, you may upload photos of vehicle damage. These images are stored securely and shared only with the mechanics who respond to your booking request and the platform administrator.
§ 04

How we use your data

We use the information we collect for the following purposes:

Purpose Legal basis
To provide the Service — matching Drivers with nearby Mechanics, facilitating bookings, and processing payments Performance of a contract
To verify identity and approve user profiles before platform access is granted Performance of a contract; legal obligation
To enable real-time location tracking so Drivers can find mechanics and Fleet Managers can track their drivers Performance of a contract; legitimate interest
To facilitate in-app communications between all user roles Performance of a contract
To send transactional notifications — booking confirmations, payment receipts, status updates Performance of a contract
To enable Fleet Managers to manage budgets, driver rosters, and job history Performance of a contract; legitimate interest
To enable Shop Owners to manage mechanics, inventory, and order fulfilment Performance of a contract; legitimate interest
To resolve disputes, investigate fraud, and enforce our Terms of Service Legal obligation; legitimate interest
To improve platform performance, fix bugs, and develop new features Legitimate interest
To comply with applicable laws, regulations, and lawful requests from authorities Legal obligation

We do not use your personal data for advertising or marketing to third parties, and we do not sell your data to data brokers or advertising networks.

§ 05

Sharing your data

We do not sell, rent, or trade your personal information. We share data only in the limited circumstances described below.

Between Users When a Driver submits a service booking, their location, vehicle details, and damage photos are shared with Mechanics within the service radius. When a Mechanic's quote is accepted, both parties receive each other's profile information and contact details for the purpose of completing the job.
Fleet Managers Fleet Managers can view real-time location data, booking history, and wallet balances of the Drivers registered under their account. By registering under a Fleet Manager, you consent to this oversight.
Shop Owners Shop Owners can view the location, booking activity, and ratings of the Mechanics registered under their account.
Platform Admin Our platform administrators can access all user accounts and transaction data for the purpose of platform management, dispute resolution, and compliance.
Service providers We share data with trusted third-party providers who help us operate the platform — including Stripe (payments), Google Firebase (infrastructure, authentication, push notifications), and email service providers. These providers are contractually bound to use your data only as directed by us.
Legal requirements We may disclose your information if required by law, subpoena, court order, or in response to lawful requests by public authorities.
Business transfers In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. We will provide notice before your data becomes subject to a different privacy policy.
§ 06

Location data

Precise, real-time location data is central to how Rig Rescue works. We collect location data in the following ways:

Foreground location Background location GPS (precise) Network-based location
Drivers Your precise location is shared with nearby Mechanics when you create an emergency service booking, and with your Fleet Manager at all times while the app is running. Location is used to calculate distances and route mechanics to your position.
Mechanics Your precise location is used to show you nearby service requests within your configured radius. Your location is also shared with Drivers whose bookings you have accepted, and with your Shop Owner while the app is running.
Background location We collect location data while the app is in the background so that Mechanics can receive incoming booking requests without the app open, and so Fleet Managers can monitor their fleets in real time. You can revoke background location permission at any time in your device settings, though this will limit platform functionality.
Important: Location data associated with completed bookings is retained as part of the job record for the duration described in §8 (Data Retention). You can request deletion of historical location data by contacting us at privacy@rigrescue.com.
§ 07

Payments

All payment processing on the Rig Rescue platform is handled by Stripe, Inc., a PCI-DSS Level 1 certified payment processor. We do not store your full card number, CVC, or bank account details on our servers.

When you add a payment method, your card details are transmitted directly to Stripe and tokenized. We receive and store only a token reference and the last four digits of your card for display purposes.

Driver payments Payments are initiated by Drivers when a job is marked as completed. Funds are held by Stripe and released to the Shop Owner when the Mechanic marks the job complete.
Shop Owners Shop Owners must complete Stripe merchant onboarding to receive payments. Stripe may collect additional identity and banking information directly during this process, subject to Stripe's own privacy policy.
Fleet budgets Fleet Manager budget allocations are tracked within our platform wallet system. Budget allocation history and transaction records are retained as part of fleet management records.

Stripe's privacy policy is available at stripe.com/privacy. By making or receiving payments through Rig Rescue, you also agree to Stripe's terms of service.

§ 08

Communications

We send you communications that are necessary for the operation of the Service and, where you have opted in, optional updates and announcements.

Communication type Channel Can opt out?
Booking confirmations and status updates Push notification, in-app No — service-critical
Payment receipts and transaction records Push notification, email No — service-critical
New booking requests (Mechanics) Push notification No — service-critical
Budget update requests (Fleet Managers) Push notification, in-app No — service-critical
Platform-wide announcements and feature updates Push notification, email Yes — manage in Settings
Account approval notifications Email, in-app No — service-critical

In-app chat messages between Users are not read by us except as necessary for dispute resolution or when required by law.

§ 09

Data retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Below are the specific retention periods for different categories of data:

Data category Retention period
Account profile information Duration of account + 30 days after deletion request
Completed booking records 7 years (for financial and legal compliance)
Payment transaction records 7 years (PCI-DSS and tax compliance)
Real-time location data (active sessions) Duration of active booking only
Location history (associated with job records) 7 years as part of the job record
In-app chat messages 2 years after the associated booking is closed
Photos uploaded with bookings Duration of account + 90 days after deletion
Reviews and ratings Indefinite (part of public trust and safety record)
Device and usage analytics 24 months

Upon account deletion, we will anonymize or delete your personal data within 30 days, except where retention is required by law or needed to resolve outstanding disputes.

§ 10

Your rights

Depending on your location, you may have the following rights regarding your personal data. We honor these rights for all Users in the United States, including rights established under the California Consumer Privacy Act (CCPA) and similar state laws.

Access You have the right to request a copy of the personal information we hold about you, including what categories of data we have collected and how we have used it.
Correction You have the right to request that we correct inaccurate or incomplete personal information. You can update most profile information directly within the app.
Deletion You have the right to request that we delete your personal data. We will comply within 30 days, subject to our legal obligation to retain certain records (e.g., financial transaction records for 7 years).
Portability You have the right to receive a machine-readable copy of your personal data that you have provided to us.
Opt-out of sale We do not sell your personal data. There is nothing to opt out of in this regard.
Non-discrimination Exercising any of the above rights will not result in discriminatory treatment, a lower level of service, or different pricing.
Withdraw consent Where we rely on your consent to process data (e.g., background location access), you can withdraw consent at any time in your device settings. Withdrawal may limit certain platform features.

To exercise any of these rights, email us at privacy@rigrescue.com with the subject line "Privacy Rights Request." We will verify your identity before processing the request and respond within 45 days.

§ 11

Children's privacy

Rig Rescue is a professional service platform intended for use by adults in a commercial trucking context. The Service is not directed to, and we do not knowingly collect personal information from, children under the age of 13 (or under 16 where required by applicable law).

If we become aware that we have collected personal information from a child under the applicable age without verified parental consent, we will take immediate steps to delete that information. If you believe a child has provided us with their information, please contact us at privacy@rigrescue.com.

§ 12

Security

We take the security of your personal data seriously. Rig Rescue implements industry-standard technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction.

SSL / TLS encryption OAuth 2.0 authentication PCI-DSS compliant payments Encrypted data at rest Role-based access control Automated monitoring Regular security patches Disaster recovery plan

All data transmitted between the app and our servers is encrypted using SSL/TLS. Authentication is handled via industry-standard OAuth protocols. Payment data is processed exclusively through Stripe's PCI-DSS Level 1 certified environment.

Please note: No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify affected users as required by law.

The Service targets 99.9% uptime. We maintain documented backup and recovery procedures to ensure data protection in the event of a system failure.

§ 13

Third-party services

Rig Rescue integrates with the following third-party services to deliver core functionality. Each provider operates under its own privacy policy.

Provider Purpose Data shared
Stripe, Inc. Payment processing and merchant onboarding Payment method details, transaction amounts, Shop Owner identity
Google Firebase Backend infrastructure, real-time database, authentication, push notifications (FCM) Device tokens, user IDs, app usage data
Google Maps Platform Interactive map view, location geocoding, mechanic proximity display Location coordinates during active sessions
Apple Push Notification Service (APNs) Push notifications on iOS devices Device tokens, notification payloads
SMTP provider (email) Transactional emails — account approvals, booking receipts Email address, name, notification content
Apple App Store / Google Play Store App distribution and in-app purchase infrastructure App Store account data per respective platform policies

We are not responsible for the privacy practices of third-party services. We encourage you to review their respective privacy policies before using the Service.

§ 14

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

  • Update the "Last updated" date at the top of this page.
  • Send a push notification or email to all registered users describing the nature of the changes.
  • Where required by law, obtain renewed consent before applying the changes to your data.

Your continued use of the Service after changes take effect constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you should discontinue use of the Service and request account deletion.

§ 15

Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please reach out to us using the contact details below.

Privacy & Data Inquiries

Subject "Privacy Rights Request" or "Privacy Policy Inquiry"
Response time Within 45 days of receiving your request
Platform rigrescue.com
If you are a California resident and wish to exercise rights under the CCPA, please specify "CCPA Request" in your subject line. We will verify your identity and respond within the timeframes required by California law.