Privacy Policy

May Mobility, Inc. Privacy Policy

This Privacy Notice details May Mobility, Inc.'s ("May Mobility" or “we,” “us,” or “our”) personal information collection, use, disclosure, and other processing that occurs when you interact with us or use our transportation and mobility services. This includes processing that occurs during your in-vehicle experience, when you visit our website, www.maymobility.com (the "Site"), in the course of our commercial relationship with you, when you use our mobile application (the "Mobile App"), and when you apply for employment with us.

Please note the following important notes regarding our services:

Our vehicles collect video recordings inside and outside of the vehicle, together with the vehicle's precise geolocation, at all times that they are operational. If you have an account with us, such data may be associated with you and/or your ride with us.

YOUR USE OF OUR TRANSPORTATION SERVICES OR OUR VEHICLES SIGNIFIES YOUR CONSENT TO THE DATA COLLECTION AND OTHER PROCESSING DETAILED HERE, INCLUDING COLLECTION OF THE VEHICLE'S PRECISE GEOLOCATION DURING TRANSPORTATION SERVICES AND THE COLLECTION OF EXTERNAL AND INTERNAL VIDEO RECORDING DURING TRIPS. For more information regarding our collection and use of personal information at different points of our interactions with you, please see the detailed sections regarding Your In-Vehicle Experience, Our Mobile App, and Our Site in Section 1, below.

If you are looking for details regarding additional rights you may have as a resident of California, Connecticut, Colorado, Nevada, Utah, or Virginia, please review the information corresponding to the state of your residence in Section 5, below, identifying state-specific rights and disclosures.

This Privacy Notice provides details regarding the following:

1. Personal information We Collect And How We Use It: May Mobility directly and indirectly collects personal information from you that includes profile and contact information, transaction information, precise geolocation, video, and transaction information. May Mobility uses this data in a number of ways, as detailed below.
   1. Your In-Vehicle Experience. When you travel in one of our vehicles, we collect various data about you and the vehicle, including the vehicle's precise geolocation, speed, internal and external video recordings, and other sensor data. We also collect technical information from the vehicle including vehicle sensor, diagnostic and other performance information.
   2. Our Site And Commercial Relationship With You. When you visit our Site, we collect various data about you, including profile and contact information, device information, and account and security information. We also collect personal data about you throughout the course of any commercial relationship established with you, such as account information, information regarding your use of our services, customer service information, and preferences.
   3. Our Mobile App. When you use our Mobile App, we collect personal information about you, including your contact information, your device's precise geolocation, your device and browser type, Mobile App use details, and IP address.
   4. Job Applicants. When you apply for a job with May Mobility, we collect personal information from you that you provide to us, including your name, e-mail address, phone number, location, work authorization status, employment, educational, and other information you may include on your resume or other application materials. With your permission we may also obtain information regarding your driving record and information such as your driver's license number.
2. Our Sharing Of Your Personal Information: May Mobility may disclose personal information collected with its service providers, business and University research partners, and certain governmental entities, as detailed below. May Mobility may share deidentified, anonymized or aggregated information for any legitimate business purpose.
3. Data Retention: May Mobility retains personal information in accordance with applicable laws.
4. Data Security: May Mobility takes the security of your personal information seriously and has implemented reasonable safeguards to protect it.
5. Your Privacy Rights: Jurisdiction-Specific Disclosures: If you are a resident of California, Connecticut, Colorado, Nevada, Utah, or Virginia, you have additional privacy rights and are entitled to additional disclosures contained the following subsections.
   1. Summary of Rights: Residents Of California, Colorado, Connecticut, Utah, and Virginia.
   2. California Disclosures.
   3. Nevada Disclosures and Right To Limit Processing.
   4. Your Privacy Choices.
6. International Data Transfers: May Mobility's Mobile App is operated in the U.S., but it may transfer data to other locations. By using our Site, services and Mobile App or otherwise providing us with your personal information, you agree to such international transfers.
7. Children’s Data: May Mobility does not knowingly collect personal information from children under the age of 13.
8. Changes To This Notice: We will contact you or post a conspicuous notice if we make any material changes to this Privacy Notice.
9. Contact Us: May Mobility can be reached by mail, telephone, or e-mail as detailed below.

1. PERSONAL INFORMATION WE COLLECT AND HOW WE USE IT

We collect and use personal information for a number of purposes, from providing our services to continuously improving them, such as increasing the usability of May Mobility vehicles and identifying opportunities to make your journey more convenient and even safer. The information we collect, and how that information is used, depends on how you interact with us, the services you use, and the choices you make. This data also depends on the type of relationship we have with you (e.g., consumer, individual/personal customer, commercial customer, business partner). We collect personal information about you from different sources and in various ways, including:

• Directly from you. Through your relationship with us, such as when you provide data to us directly on our website, via email, or through your online or offline/in-person interactions with us.

• Indirectly from you. From your use of our products, services, mobile applications, or software.

• From third-party sources. From your colleagues, employer, representatives of business customers, business partners, service providers, business information and research companies, and public sources, including public forums and social media or networking sites.

Below, we describe the personal information we collect, how we use it, and the privacy choices available to you for (A) your in-vehicle experience, (B) our website, (C) our Mobile App, and (D) the process of applying for employment with May Mobility.

A. YOUR IN-VEHICLE EXPERIENCE.

May Mobility may collect and use the following types of personal information in connection with your trips in our vehicles.

What We Collect and How We Use It

Type Of Personal information Collected	Examples	How We Use It
Location Information	Precise geolocation of our vehicle before, during, and after your trip, which could be associated with your name and e-mail address obtained through our commercial relationship with you.	To operate our services, including picking you up in our vehicles and ensuring that you are dropped off in the proper location; to create a high quality user experience by facilitating efficient and accurate service; and to enhance the safety and security of our services for you.
Video Recording - Internal	Internal vehicle camera data may include video and images of the interior cabin of our vehicle, including of our passengers.	Internal camera video is used by us to improve operations, vehicle and user safety, maintenance, and customer support. If you have an account with us, when you are taking a ride this data may be associated with you or your ride.
Video Recording - External	External vehicle camera data may include video and images of the driving environment, road markings and signage, people near the vehicles, license plates of other vehicles, or other similar, publicly visible personal details.	External video images are used to provide transportation services to you, and to continually develop and improve the quality and safety of our services, for example through mapping and contextual behavior development. External video images may incidentally capture pedestrians and license plate numbers. We do not specifically analyze, process separately, or associate this data with any identifiable individuals or vehicles. However, if you have an account with us, when you are hailing and taking a ride this data may be associated with you or your ride.
Vehicle Sensor Information	Autonomy data, including vehicle sensor data from LiDAR and radar sensors, microphones, and audio and video recordings.	To provide vehicle features and services, and to train and improve our vehicle technologies, which increases safety for all vehicles, drivers, and pedestrians.
Usage Data	Trip history, in-vehicle interface use, wait times, and other actions you take when interfacing with our services.	To provide and improve our services to you.
Additional Trip Information	Route information, timestamps regarding the timing of your rides.	To operate our services, to improve our services.

B. OUR SITE AND COMMERCIAL RELATIONSHIP WITH YOU.

May Mobility may collect, use, and disclose personal information gathered in connection with your relationship and interactions with us, as described below. This information includes identifying and contact information, customer service information, preferences, and device information, which may be collected through automatic information collection technologies.

What We Collect and How We Use It

Type Of Personal information Collected	Examples	How We Use It
Profile and Contact Information	Name, e-mail telephone number.	To communicate with you regarding our services, or to provide information that you request of us.
Access, Usage, and Device Information	Details regarding your use of the Site, including viewing time, features used, your device type, operating system and version, device unique identifier, internet protocol (IP) address and corresponding approximate location, browser type and version.	To improve our Site and to deliver a better and more personalized experience for our users.
Customer Service Information	Call records and recordings, logs and copies of your interactions, correspondence and other messages or communications, including your feedback, questions, and comments.	To communicate with you and to provide customer support.
Preferences	Communication preferences, language, time zone, or other regional identifiers.	To create a more personalized user experience.
Survey Information (if you choose to participate)	If you choose to provide it and in accordance with law, information such as age, gender, language, ethnicity, household size, employment, and education.	Providing this information to us is optional and is not required to use our Site or our services. However, if you choose to do so, we use the information to improve our Site and services and to provide a more personalized experience to you.

We may also use personal information that we collect from you for the following purposes:

• To provide our products and services, in support of our commercial relationship. For example, we will use your information to facilitate your travel with us, to communicate updates regarding your travel with us, and to ask for feedback about our service or related events.
• To Send You Promotional Materials. We use your information to fulfill your requests, including, but not limited to, requests to receive promotional materials such as newsletters or other information regarding May Mobility services or events. You may opt out by following the instructions included in our communications or by contacting us at [email protected].
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including the Site's Terms of Use.
• To fulfill the purpose for which you provide it. For example, if you provide us with your location for the purpose of connecting with one of our vehicles, we will use it for that purpose. Similarly, if you provided us with your contact information for the purpose of obtaining customer support, we will use it to respond to your inquiries, including to investigate and address your concerns, monitor and improve our responses, or otherwise act consistent with the purpose for which you provided your personal information.
• To enable ongoing vehicle and feature reliability improvements, such as to analyze the operation, performance and use of May Mobility vehicles and to identify and address bugs or improvement opportunities.
• To analyze and use for legitimate business or legal purposes, such as to detect and address fraud and prevent and address security threats. Additionally, we may use your information if we are required to in responding to a law enforcement request and as required by applicable law, court order, or governmental regulations.

We use certain technologies for automatic information collection. For instance, we use cookies and other technologies to automatically collect certain information about your equipment, browsing actions, and patterns when you use our Site. We use this information to personalize your experience on the Site and/or to improve the security, design, and/or function of the Site. Note: we do not use this information for behavioral advertising or share this information for behavioral advertising.

Our use of these technologies to automatically collect information includes:

• Site. When you visit the Site, May Mobility automatically collects certain technical information from your browser, such as the IP address used to connect your computer to the internet, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other data about your visit to the Site.
• Cookies. Cookies are data files created when you visit a website and those files are stored locally (on your device). When visiting the Site, we may use both session Cookies (which expire once you close your web browser) and persistent Cookies (which stay on your computer until you delete them) to make your experience on the Site more personal and interactive. Information collected may include websites you visited before browsing the Site, pages you viewed on the Site, number of times you accessed the Site, how long you spent on the Site, and other web traffic data. You may be able to disable the use of Cookies (or disallow the use of Cookies on specific websites) by adjusting your web browser settings. May Mobility’s Site is hosted by a third-party platform, Cloudflare, Inc.. For more information about the Cloudflare platform and their privacy policy, please visit https://www.cloudflare.com/privacypolicy/.
• Other Tracking Tools. In addition to, or in conjunction with Cookies, we may use other tracking tools to improve users’ experiences on the Site. For example, pixel tags (also known as clear GIFs, web bugs, or web beacons) may be used to track the online movements of users of the Site. Pixel tags and similar tools may also be used in our emails to track whether an email was read or forwarded to someone else.
• Web Analytics Tools. We may use web analytics tools to understand usage patterns, traffic analysis, and to improve our Site. These tools include:
  • Google Analytics, including advertising features such as demographics and interest reporting to collect anonymized data about the gender, age, and interests of visitors to the Site. You can read Google’s security and privacy policies for Google Analytics at https://policies.google.com/technologies/partner-sites?hl=en-US. You may opt out of having your data used by Google Analytics by accessing Google’s Ads Settings, Ad Settings for mobile apps, or any other available means.
  • hotjar, which enables us to collect information regarding website users' use tendencies, patterns, and feedback, facilitating our continual development and improvement of our website and services. hotjar's privacy policy can be found at https://www.hotjar.com/legal/p...;If you do not agree with our policies and practices as described herein, do not visit the Site.

C. OUR MOBILE APP.

The Mobile App provides an interface to make your experience traveling with May Mobility simple. The app permits you to find a May mobility vehicle and then schedule, track, and complete your travel with us. In doing so, May Mobility collects and uses personal information gathered in connection with your access and use of the Mobile App as described below. This information includes identifying and contact information, Mobile App access and usage information, your precise geolocation, purchase information, user content data, and device information, including information collected through automatic information collection technologies. The Mobile App was developed in conjunction with Via Transportation Inc. who also processes the data of Mobile App users for purposes of providing its development services in connection with the Mobile App. Via Transportation Inc.'s privacy notice is available at https://ridewithvia.com/privacy/.

What We Collect and How We Use It

Type Of Personal information Collected	Examples	How We Use It
Profile and Contact Information	Name, e-mail, telephone number.	To communicate with you, such as to provide you with the Mobile App and its contents, updates, and any other services or information relating to your use of our services or that you request of us.
Access, Usage, and Device Information	Details regarding your access and use of the Mobile App, including viewing time, features used, transactions you conduct through the Mobile App, your device type, operating system and version, device unique identifier, internet protocol (IP) address, browser type and version, and other similar log file data.	To improve our Mobile App and to deliver a better and more personalized experience for our users.
Precise Geolocation	Your device's location, in connection with your use of our services.	To provide core functionality and services for the app, such as using your location to enable you to find and connect with your trip vehicle and to complete your trip.
Transaction Information	The location and frequency of your transactions.	To provide our services to you as requested, and to provide a better and more personalized experience for you.

When you download, access, and use our Mobile App, it may use technology to automatically collect:

• Usage Details. When you access and use the Mobile App, we may automatically collect certain details of your access to and use of the Mobile App, including traffic data, location data, logs, and other communication data and the resources that you access and use on or through the Mobile App.
• Device Information. We may collect information about your mobile device and internet connection, including the device's unique device identifier, IP address, operating system, browser type, mobile network information, and the device's telephone number.
• Stored Information and Files. The Mobile App also may access metadata and other information associated with other files stored on your device. This may include, for example, photographs, audio and video clips, personal contacts, and address book information.
• Location Information. This Mobile App collects real-time information about the location of your device.

You may opt out at any time by disabling location services on your mobile device, but doing so may affect the functionality of the Mobile App and our ability to provide our services to you.

Information Collection and Tracking Technologies

The technologies we use for automatic information collection may include:

• Cookies (or mobile cookies). A cookie is a small file placed on your smartphone. It may be possible to refuse to accept mobile cookies by activating the appropriate setting on your smartphone. However, if you select this setting you may be unable to access certain parts of our App.
• Web Beacons. Pages of the App may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages [or opened an email] and for other related app statistics (for example, recording the popularity of certain app content and verifying system and server integrity).

If you do not agree with our policies and practices as described herein, do not download, register with, or use the Mobile App.

D. JOB APPLICANTS.

We collect and process various types of personal information from you if you apply for a job with us, including:

Type Of Personal information Collected	Examples	How We Use It
Profile and Contact Information	Name, e-mail, telephone number address.	To communicate with you, such as to provide you with the Mobile App and its contents, updates, and any other services or information relating to your use of our services or that you request of us.
Educational and professional background	Your work history, academic and professional qualifications, educational records, references, and interview notes.	To assess your potential employment with us.
Employment details	Your current employment information, including job title, position, hire dates, and compensation, in addition to any previous employment information.	To assess your potential employment with us.
Demographic data	If you choose to provide it, your race, gender, ethnic origin, marital status, disability, and veteran or military status, consistent with applicable laws.	To keep aggregated and/or deidentified records regarding our workforce history.
Driving record information	Driving record history, driver's license number.	To assess your potential employment with us.

2. OUR SHARING OF YOUR PERSONAL INFORMATION

We share personal information with our affiliates and with the categories of third parties set forth below for legitimate business purposes, which also includes when you direct us to share it with others, or as necessary to complete your transactions or provide the products or services you have requested or authorized.

We may share the above information with the following third parties:

• Technology Service Providers. Software, IT and cloud service providers we use to support our business. In particular, as Via Transportation Inc. processes the data of Mobile App users, you may wish to review Via Transportation Inc.'s privacy notice, available at https://ridewithvia.com/privacy/. We may also share your information with our selected partners in order to conduct business, including conducting audits, performing industry analysis, and evaluating the results of marketing efforts. We may also share your information with customer relationship management, consultants, financial, legal and other similar providers we use to support our business. When you provide information as described above, we may also share your information with selected partners (e.g., email newsletter providers) to provide you the requested information.
• Third Party Advertising. Third-party marketing service providers and advertising companies who may use Cookies and other technology to collect information and track browsing activity over time and across third party websites. Other websites may refer traffic or link to our Site and deliver targeted advertisements to you. We do not control these third party technologies, and their use is governed by the privacy policies of third parties using such technologies.
• With Other Third Parties. Other third parties when legally required to do so, such as at the request of governmental authorities conducting an investigation or to verify or enforce compliance with policies governing the Site and applicable laws. In addition, we may disclose user information if we believe disclosure is necessary to protect the rights, property or safety of May Mobility or any of our respective affiliates, business partners, customers or others.
• Corporate Transactions. Parties in connection with, during, or upon completion of a merger, acquisition, asset sale, or other business transaction that involves some, or all, of May Mobility’s assets, data you have provided to May Mobility may be transferred to a successor/purchaser as part of a transaction.

We may share de-identified information in accordance with applicable law without restriction with third parties for advertising, promotional, or other marketing purposes.

3. DATA RETENTION

We will retain your personal information in accordance with applicable laws, including any period required to satisfy any legal, accounting, or similar requirements, to resolve disputes, or as otherwise requested by you.

We may anonymize or de-identify your personal information so that it cannot be reasonably associated with or used to identify you. Unless applicable law requires otherwise, we reserve the right to retain and use such information for any legitimate business purpose without your consent or additional notice to you.

4. DATA SECURITY

We use reasonable administrative, technical and physical security to protect the personal information we retain and to help ensure that it is used in accordance with this Privacy Policy. We protect and process your personal information consistent with our Data Classification Policy, which takes into account the risks and legal requirements associated with various types of data, including personal information. We will retain your personal information for the period necessary to fulfill the purposes outlined in this Privacy Policy unless longer retention is required by law or for auditing purposes.

Should you have further questions or concerns about our security measures, please contact us using the information below.

5. YOUR PRIVACY RIGHTS: JURISDICTION-SPECIFIC DISCLOSURES

A. SUMMARY OF RIGHTS: RESIDENTS OF CALIFORNIA, COLORADO, CONNECTICUT, UTAH, AND VIRGINIA.

If you are a consumer residing in California, Colorado, Connecticut, Utah, or Virginia, you have the rights identified and explained below. You can exercise these rights by contacting us with a verifiable request by calling us at 888-714-5210, emailing us at [email protected], or writing to us by mail at 650 Avis Dr., Ann Arbor, MI 48108. You can also contact us by the same means with any questions you may have regarding these rights and how to exercise them. We will not discriminate against you for exercising any of your rights. Additional California-specific disclosures appear in Section 5(B), below.

• Right of access and data portability. (CA/VA/CO/CT/UT).
  • If you are a resident of California, Colorado, Connecticut, Utah, or Virginia, you have the right to request that we disclose certain information to you about our collection and use of your personal information and to obtain such data in a transmissible form.
• Right of deletion. (CA/VA/CO/CT/UT).
  • If you are a resident of California, Colorado, Connecticut, Utah, or Virginia, you have the right to request that we delete your personal information, subject to limitations, exceptions, or requirements contained in applicable law. You can exercise this right by contacting us with a verifiable request through one of the contact methods identified above. We will ask you to verify your identity before we accommodate your request in accordance with applicable law. Once we receive and confirm your request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

• Right of rectification. (CA/VA/CO/CT).
  • If you are a resident of California, Colorado, Connecticut, or Virginia, you have the right to request that we correct your personal information, subject to limitations, exceptions or requirements contained within the applicable law. We will ask you to verify your identity before we accommodate your request, in accordance with applicable law. Upon receipt and verification of your request to correct inaccurate personal information, we will use commercially reasonable efforts to correct your personal information as directed by you, pursuant to the law and applicable regulations.

• Right to restrict processing. (CA/VA/CO/CT/UT).
  • Data sales or sharing for the purpose of targeted advertising.
    • California, Colorado, Connecticut, Utah, and Virginia consumers have the right to opt-out of sales of their personal information, or disclosures of their personal information to third parties for the purpose of targeted advertising. As stated in Section 5(B), May Mobility does not sell your personal information. If you do not want May Mobility to use the information we collect or that you provide to us to deliver advertisements according to our advertisers’ target-audience preferences, you may opt out by contacting us with a verifiable request through one of the contact methods identified above.
  • Processing of sensitive personal information.
    • California and Utah consumers have the right to opt-out of May Mobility’s processing of their sensitive data as that term is defined in the law. To opt out of this processing, contact us with a verifiable request through one of the contact methods identified above.

• Right to restrict automated decision-making or profiling. (CA/VA/CO/CT).
  • If you are a resident of California, Colorado, Connecticut or Virginia, you have the right to opt-out of May Mobility’s collection of personal information for the purposes of profiling or automated decision-making (as these terms are present and defined in applicable law). This may include using automated decision-making technology to evaluate you, create a profile of you, and make predictions about your future behavior.

• Right to appeal. (VA/CO/CT).
  • Colorado, Connecticut, and Virginia consumers (as defined by the applicable law) have the right to appeal the denial of a rights request under the relevant law. The right to appeal can be exercised by contacting us with a verifiable request through one of the contact methods identified above.

B. CALIFORNIA DISCLOSURES.

If you are a California resident, in addition to the rights identified and described in the prior section (Summary Of Rights, Section 5(A)), you are entitled to additional disclosures and information. We provide the additional information and disclosures below in accordance with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 ("CPRA") and any terms defined in the CPRA have the same meaning when used in this Notice.

We have collected the following categories of personal information from or about consumers within the last twelve (12) months:

Category	Examples	Collected
Identifiers	A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, driver's license number, passport number or other similar identifiers.	Yes
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))	A name, signature, Social Security number, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.	Yes
Protected classification characteristics under California or federal law	Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).	Yes
Commercial information	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	No
Biometric information	Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.	No
Internet or other similar network activity	Browsing history, information on a consumer's interaction with a website, application, or advertisement.	Yes
Geolocation data	Physical location or movement.	Yes
Sensory data	Audio, electronic, visual, thermal, olfactory, or similar information.	No
Professional or employment-related information	Current or past job history or performance evaluations (for May Mobility job candidates).	Yes
Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99))	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records (for May Mobility job candidates).	Yes
Inferences drawn from other personal information	Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	No
Sensitive Information	Government identifiers (social security, driver's license, state identification card, or passport number); Complete account access credentials (usernames, account numbers, or card numbers combined with required access/security code or password); Precise geolocation; Racial or ethnic origin; Religious or philosophical beliefs; Union membership; Genetic data; Mail, email, or text messages contents; Unique identifying biometric information; Health, sex life, or sexual orientation information.	Ye

• Use of Personal Information. We use the categories of personal information shown above as described in Section 1 of this Notice (“Personal information We Collect and How We Use It”).
  

• Sharing Personal Information. We may share your personal information with the categories of service providers or third parties set forth in Section 2 of this Notice (“Our Sharing of Your Personal information”). In the preceding twelve (12) months, May Mobility has disclosed each of the personal information categories identified above that it has collected (indicated with a "Yes" in the third column) for a business purpose.
• Sales of Personal Information. In the preceding twelve (12) months, May Mobility has not sold personal information nor has it sold personal information of minors under the age of 16.
• Rights Requests: Procedures.
  • Right to Access. You may request that we send to you:
    • The categories or specific pieces of personal information we collected about you.
    • The categories of sources for the personal information we collected about you.
    • Our business or commercial purpose for collecting or selling that personal information.
    • The categories of third parties with whom we share that personal information.
    • Disclose to you the specific pieces of personal information we collected about you (also called a data portability request).
    • Disclose to you if we sold, shared, or otherwise disclosed your personal information for a business purpose, separately disclosing:
      • Sales, identifying the personal information categories that each category of recipient purchased;
      • Sharing, identifying the personal information categories that we shared with each category of recipient; and
      • Disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.
    • Disclose to you if we used automated decision-making technology to evaluate or create a profile of you, and provide information about the logic involved in such decision-making processes, including descriptions of the likely outcome.
  • Right to Delete. We may deny your deletion request if retaining the information is necessary for us, or our service provider(s), to:
    • Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you.
    • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
    • Debug products to identify and repair errors that impair existing intended functionality.
    • Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
    • Comply with applicable law, e.g., the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
    • Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
    • Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
    • Comply with a legal obligation.
    • Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
  • Additional Rights: As explained above in the Summary Of Rights (Section 5(A)), California residents may also exercise their right of rectification, right to opt-out of data sales (though May Mobility does not sell your personal information), right to opt out of sharing personal information for the purpose of targeted advertising, right to opt out of processing sensitive personal information, and right to restrict automated decision-making
• Who can exercise your data privacy rights: Only you, or someone legally authorized to act on your behalf, may make a consumer rights request based on one of the California rights identified above (please see the Summary Of Rights, Section 5(A), for a further explanation of those rights). You can designate an authorized agent to make a request under the CCPA on your behalf if: (1) the authorized agent is a natural person or a business entity registered with the Secretary of State of California; and (2) you sign a written declaration that you authorize the authorized agent to act on your behalf.

If you use an authorized agent to submit a request to exercise your rights, please have the authorized agent take the following steps in addition to the steps described above:

• Mail a copy of your signed written declaration authorizing the authorized agent to act on your behalf to [email protected]; and

• Provide any information we request in our response to your email to verify your identity. The information requested will depend on your prior interactions with us and the sensitivity of the personal information at issue.

If you provide an authorized agent with power of attorney pursuant to Probate Code sections 4121 to 4130, it may not be necessary to perform these steps and we will respond to any request from such authorized agent in accordance with the CCPA.

You may only submit a request to know twice within a 12-month period. Your request must provide sufficient information about you (which may include personal information such as your name and other personal identifiers) and your relationship, if any, with us that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative and describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. We will only use personal information provided in the request to verify the requestor's identity or authority to make it.

• Do Not Track Disclosure. Do Not Track (“DNT”) is a privacy preference that you can set in your web browsers, which allows you to opt out of tracking by websites and online services. We do not currently recognize or respond to DNT signals. For more information about DNT, please see www.eff.org/issues/do-not-track.
• Financial Incentives. We may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably relate to your personal information's value and contain written terms that describe the program's material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.
• Non-Discrimination. We will not discriminate against you for exercising any of your privacy rights.

C. NEVADA DISCLOSURES AND RIGHT TO LIMIT PROCESSING.

If you are a resident of Nevada, you have the right to opt-out of the sale of certain personal information to third parties who intend to license or sell that personal information. Please note that we do not currently sell your personal information as sales are defined in Nevada Revised Statutes Chapter 603A. If you have any questions, please contact us as set forth below.

D. YOUR PRIVACY CHOICES.

We provide additional choices below in connection with the personal information we collect. These choices are determined by applicable law and are described below.

• Location Information. Your mobile device may allow you to disable location tracking. If you choose to do so, it could affect the functionality of the Mobile App, including our ability to provide transportation services to you.
• Cookies. Most browsers accept Cookies until you change your browser settings. If you do not wish for the Site to collect your information using Cookies, you can typically disable the use of Cookies (or disallow the use of Cookies on specific websites) by changing your browser settings. However, if you remove or reject our Cookies, it could affect how the Site works for you. Please note you must separately opt out in each browser and on each device.
• Opt Out of Analytics Tools. You may opt out of having your data used by Google Analytics via Google’s Ads Settings, Ad Settings for mobile apps, or any other available means. Please visit policies.google.com/technologies/partner-sites and our Additional Data Collection section of our Privacy Policy for more information.
• “Do Not Track.” Do Not Track (“DNT”) is a privacy preference that you can set in your web browsers, which allows you to opt out of tracking by websites and online services. Please note that we do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers. For more information about DNT, please see eff.org/issues/do-not-track.
• Email and Telephone Communications. If you receive an unwanted email from us, you can use the unsubscribe link found at the bottom of the email to opt out of receiving future emails. Note that you will continue to receive transaction-related emails regarding products or services you have requested. We may also send you certain non-promotional communications regarding us and our services, and you will not be able to opt out of those communications (e.g., communications regarding our services or updates to our Terms or this Notice). We process requests to be placed on do-not-mail, do-not-phone, and do-not-contact lists as required by applicable law.
• Text/SMS Messages. You may opt out of receiving text messages from us by following the instructions in the text message you have received from us or by contacting us at [email protected].
• Push Notifications. Your mobile device may allow you to disable push notifications. If you choose to do so, it could affect the functionality of the Mobile App.
• Updating Personal information. You have the ability to update your personal information at any time by calling us at 888-714-5210, emailing us at [email protected], or writing to us by mail at 650 Avis Dr., Ann Arbor, MI 48108.

6. INTERNATIONAL DATA TRANSFERS

May Mobility is based in the United States, and its Site is controlled and operated from the United States. However, information collected about you may be collected, stored and processed anywhere we engage service providers, including outside of the United States. When we transfer and process information about you, we will protect it as described in this Privacy Policy. By using the Site and our services, you consent to the transfer of information to countries outside of your country of residence, where it will be subject to the laws of the jurisdiction(s) where it is transferred or stored, which may provide for different data protection rules than in your country.

7. CHILDREN’S DATA

May Mobility’s products and services are not directed to children under 13 (or other age as required by local law), and we do not knowingly collect personal information from children without parental consent. For instance, although video recordings of children may occur in the interior of one of our vehicles, notice of such recording is conspicuously posted within our vehicles, and a parent's choice to proceed with our services is considered consent to such recording. Moreover, minor children are not permitted to use our services without an adult, and we take no action to attempt to discern the identity of minor children riding with a primary accountholder or otherwise generate personally identifiable information of minors. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us as set forth below. If we become aware that we have collected the personal information of a child as these terms are defined under applicable law, we will take steps to promptly delete such information.

8. CHANGES TO THIS NOTICE

It is our policy to post any changes we make to this Notice on our Site. If we make material changes to how we treat our users' personal information, we will notify you by email to the primary email address specified in your account or through a notice on the Site home page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Site and this Notice to check for any changes. Your continued use of our Site or any products, services, or solutions following the posting of changes constitutes your acceptance of such changes.

Effective Date: October 3, 2022

Last Reviewed: October 3, 2022

9. CONTACT US

If you have any questions or concerns about our processing of your personal information or this Notice, or would like to exercise your privacy rights, please contact us as specified below:

By mail: 650 Avis Dr., Ann Arbor, MI 48108

By telephone: 888-714-5210

By e-mail: [email protected]