PRIVACY POLICY
Last updated February 06, 2025

This Privacy Notice for Waypoint Transit, Inc. (“we”, “us”, or “our”) describes how and why we might access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”), including when you:

• Visit our website at http://www.waypointtransit.com or any website of ours that links to this Privacy Notice
• Engage with us in other related ways, including any sales, marketing, or events

If you have questions or concerns, reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for deciding how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at support@waypointtransit.com.

SUMMARY OF KEY POINTS

This summary provides key points from our Privacy Notice. You can find out more details about any of these topics by referring to the table of contents below.

What personal information do we process?
When you visit, use, or navigate our Services, we may process personal information based on your interactions, the choices you make, and the products and features you use.
Learn more about personal information you disclose to us.
Do we process any sensitive personal information?
Some information (such as your racial or ethnic origins, sexual orientation, and religious beliefs) may be considered “special” or “sensitive” in certain jurisdictions. We do not process sensitive personal information.
Do we collect any information from third parties?
We do not collect any information from third parties.
How do we process your information?
We process your information to provide, improve, and administer our Services, communicate with you, enhance security and prevent fraud, and comply with the law. With your consent, we may process your information for other purposes as well.
Learn more about how we process your information.
In what situations and with which parties do we share personal information?
We may share information in specific situations and with certain third parties.
Learn more about when and with whom we share your personal information.
How do we keep your information safe?
We have established organizational and technical measures to protect your personal information. However, no method of electronic transmission or storage is 100% secure, so we cannot guarantee that hackers or unauthorized parties won’t be able to defeat our security measures.
Learn more about how we keep your information safe.
What are your rights?
Depending on your location, you may have certain rights regarding your personal information.
Learn more about your privacy rights.
How do you exercise your rights?
The easiest way to exercise your rights is by submitting a data subject access request or by contacting us. We will consider and act upon your request in accordance with applicable data protection laws.
Want to learn more about what we do with any information we collect?
Review the Privacy Notice in full.

WHAT INFORMATION DO WE COLLECT?
HOW DO WE PROCESS YOUR INFORMATION?
WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
HOW LONG DO WE KEEP YOUR INFORMATION?
HOW DO WE KEEP YOUR INFORMATION SAFE?
DO WE COLLECT INFORMATION FROM MINORS?
WHAT ARE YOUR PRIVACY RIGHTS?
CONTROLS FOR DO-NOT-TRACK FEATURES
DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
DO WE MAKE UPDATES TO THIS NOTICE?
HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us
In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you:

Express an interest in obtaining information about us or our products and Services.
Participate in activities on the Services.
Contact us directly.

Personal Information Provided by You:
The type of personal information we collect depends on your interactions with us and the Services, including but not limited to:

Names
Email addresses

Sensitive Information:
We do not process sensitive information.

All personal information provided must be true, complete, and accurate. You are responsible for notifying us of any changes to your personal information.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, secure our Services, prevent fraud, and comply with legal obligations. With your consent, we may also process your information for other purposes.

We process your personal information for reasons including:

Responding to inquiries / offering support:
To respond to your inquiries and address any issues you might have with our Services.
Evaluating and improving our Services:
To identify usage trends, assess the effectiveness of our marketing, and enhance your overall experience.

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share your information in specific situations and with certain third parties.

Examples:

Business Transfers:
We may share or transfer your information in connection with any merger, sale of company assets, financing, or acquisition of part or all of our business.

4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use:

Cookies, web beacons, pixels, and similar tracking tools to gather information when you interact with our Services.
Online tracking technologies to maintain service security, prevent crashes, fix bugs, save your preferences, and support basic site functions.

Third parties and service providers may also use tracking technologies on our Services for analytics and advertising purposes (such as tailoring ads to your interests or sending shopping cart reminders).
If these technologies are considered a “sale” or “sharing” of your personal information under applicable laws, you may opt out as described under section 10.

Specific details on cookies and your options can be found in our Cookie Notice.

5. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We retain your information only as long as necessary to fulfill the purposes outlined in this Privacy Notice unless required otherwise by law.

We keep your personal information only for as long as needed for:

The purposes described in this Privacy Notice.
Compliance with legal obligations (e.g., tax, accounting, or other legal requirements).

When no longer necessary, we will either delete or anonymize your information. If deletion isn’t immediately possible (for example, due to backup storage), we will store it securely and isolate it from further processing until deletion is feasible.

6. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through appropriate organizational and technical security measures.

We have implemented reasonable technical and organizational safeguards designed to protect your personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee that unauthorized third parties will never defeat our security measures.
Your use of our Services is at your own risk, and you should only access the Services within a secure environment.

7. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly:

Collect personal information from children under 18.
Solicit data from or market to children under 18.
Sell personal information collected from minors.

By using our Services, you represent that you are at least 18 or that you are the parent/guardian of a minor and consent to their use of our Services. If we learn that we have collected personal information from a child under 18, we will deactivate the account and take steps to promptly delete that data.
If you believe we have collected data from a minor, please contact us at support@waypointtransit.com.

8. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on your location, you may have the right to review, change, or terminate your account and to control how your personal information is processed.

Your rights may include:

Right to know whether we are processing your personal data.
Right to access your personal data.
Right to correct inaccuracies in your data.
Right to request deletion of your personal data.
Right to obtain a copy of your personal data.
Right to non-discrimination for exercising your rights.
Right to opt out of processing for targeted advertising, the sale of personal data, or profiling that produces legal or similarly significant effects.

Additional rights may apply depending on your state’s law (for example, rights under California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia).

How to Exercise Your Rights:
To exercise these rights, you can submit a data subject access request, email us at support@waypointtransit.com, or refer to the contact details provided below.
If you use an authorized agent, additional verification may be required.

Appeals:
If we decline your request, you may appeal by emailing us at support@waypointtransit.com. We will explain our decision in writing. If your appeal is denied, you may contact your state attorney general.

California “Shine The Light” Law:
California residents can request, once a year and free of charge, details about personal information disclosed to third parties for direct marketing purposes. Requests should be submitted in writing using the contact details in section 12.

9. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers, mobile operating systems, and mobile applications include a Do-Not-Track (“DNT”) feature. However, there is no uniform standard for recognizing or implementing DNT signals. Consequently, we do not currently respond to DNT signals.
California law requires us to explain our position on DNT signals. Until a standard is adopted, we will not honor DNT signals.

10. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: If you reside in certain U.S. states, you may have additional rights regarding your personal information, including the right to request access, correction, deletion, or to withdraw consent.

Categories of Personal Information We Collect (in the past 12 months):

A. Identifiers
Examples: Real name, alias, postal address, telephone or mobile number, unique personal and online identifiers, IP address, email address, account name.
Collected: NO

B. Personal Information as defined in the California Customer Records statute
Examples: Name, contact information, education, employment, employment history, financial information.
Collected: NO

C. Protected Classification Characteristics
Examples: Gender, age, date of birth, race/ethnicity, national origin, marital status, and other demographic data.
Collected: NO

D. Commercial Information
Examples: Transaction details, purchase history, financial details, payment information.
Collected: NO

E. Biometric Information
Examples: Fingerprints, voiceprints.
Collected: NO

F. Internet or Other Similar Network Activity
Examples: Browsing history, search history, online behavior, interest data, interactions with websites and ads.
Collected: NO

G. Geolocation Data
Example: Device location.
Collected: NO

H. Audio, Electronic, Sensory, or Similar Information
Examples: Images, audio, video or call recordings related to our business activities.
Collected: NO

I. Professional or Employment-Related Information
Examples: Business contact details for providing Services, job title, work history, professional qualifications.
Collected: NO

J. Education Information
Examples: Student records, directory information.
Collected: NO

K. Inferences Drawn from Collected Personal Information
Examples: Profiles or summaries about an individual’s preferences and characteristics.
Collected: NO

L. Sensitive Personal Information
Collected: NO

We may also collect other personal information when you interact with us in person, online, by phone, or by mail (e.g., when receiving customer support, participating in surveys or contests, or facilitating the delivery of our Services).

Sources of Personal Information:
Learn more in section 1, “WHAT INFORMATION DO WE COLLECT?”

How We Use and Share Personal Information:
Learn more in section 2, “HOW DO WE PROCESS YOUR INFORMATION?” and section 3, “WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?”

Sharing with Third Parties:
We may disclose your personal information to our service providers under written contracts. We do not sell or share personal information for a business or commercial purpose and do not intend to do so in the future.

Your Rights

You have rights under certain U.S. state data protection laws, including:

Right to know whether we process your personal data.
Right to access your personal data.
Right to correct inaccuracies in your personal data.
Right to request deletion of your personal data.
Right to obtain a copy of your personal data.
Right to non-discrimination for exercising your rights.
Right to opt out of processing your personal data for targeted advertising, sale, or profiling.

Depending on your state, you may also have additional rights such as:

Right to obtain a list of third parties with whom we have shared your personal data.
Right to review how your personal data has been profiled.
Right to limit the use and disclosure of sensitive personal data.
Right to opt out of collection via voice or facial recognition features.

How to Exercise Your Rights:
Contact us by submitting a data subject access request, emailing support@waypointtransit.com, or using the contact details provided below.
If you use an authorized agent, additional identity verification may be required.

Request Verification:
We will verify your identity using the information you provide to ensure you are the person about whom we maintain data.

California “Shine The Light” Law:
California residents may request, once a year and free of charge, details about personal information disclosed to third parties for direct marketing purposes. Submit such requests in writing using the contact information in section 12.

11. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we update this notice as necessary to comply with relevant laws.

We may update this Privacy Notice periodically. The “Revised” date at the top will indicate the latest update. If material changes are made, we may notify you by posting a notice on our website or directly sending you a notification. Please review this notice frequently.

12. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may contact us by:

Email: support@waypointtransit.com
Postal Mail:
Waypoint Transit, Inc.
[Address Placeholder]

13. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

You have the right to request access to, update, or delete your personal information, or to withdraw your consent for our processing of your personal data. These rights may be limited in some cases by law.

To make a request, please submit a data subject access request through our online form or by contacting us using the details provided in section 12.

End of Privacy Policy