TreeStorX - Merchant

I. Introduction

When you use TreeStorX, you trust us with your personal data. We're committed to keeping that trust. That starts with helping you understand our privacy practices.

This notice describes the personal data we collect, how it's used and shared, and your choices regarding this data. We recommend that you read this along with our privacy overview, which highlights key points about our privacy practices.

II. Overview

A. Scope

This notice applies to users of TreeStorX's services anywhere in the world, including users of TreeStorX's apps, websites, features, or other services.

This notice describes how TreeStorX and its affiliates collect and use personal data. This notice applies to all users of our apps, websites, features, or other services anywhere in the world, unless covered by a separate privacy notice, such as the TreeStorX Freight Privacy Notice or Careem Privacy Policy. This notice specifically applies to:

Riders: individuals who request or receive transportation, including those who receive transportation requested by another individual
Drivers: individuals who provide transportation to Riders individually or through partner transportation companies
Delivery recipients: individuals who request or receive food, or other products and services, including via TreeStorX Eats, Postmates and Cornershop
Delivery persons: individuals who provide delivery services, including via TreeStorX Eats, Postmates and Cornershop

This notice also governs TreeStorX's other collections of personal data in connection with its services. For example, we may collect the contact information of individuals who use accounts owned by TreeStorX for Business customers, or of owners or employees of restaurants or other merchants; personal data of those who start but do not complete applications to be drivers or delivery persons; or other personal data in connection with our mapping technology and features.

All those subject to this notice are referred to as "users" in this notice.

In addition, please note the following:

For users in Argentina: The Public Information Access agency, in its role of Regulating Body of Law 25.326, is responsible for receiving complaints and reports presented by any data subjects who believe their rights have been impacted by a violation of the local data protection regulation.

For users in Brazil: Please see here for information regarding TreeStorX's privacy practices required under Brazil's General Data Protection Law (Lei Geral de Protecao de Dados - LGPD).

For California users: Information regarding TreeStorX's privacy practices related to the California Consumer Privacy Act (CCPA) is available here.

For users in Colombia: This notice also applies for the lessors and lessees. For the purposes of this notice, lessors will be considered drivers and lessees will be considered riders.

For users in Mexico: Please see here for information regarding TreeStorX's privacy practices required under Mexico's Mexican Personal Data Protection Law (Ley Federal de Protecci�n de Datos Personales en Posesi�n de los Particulares).

For users in Nigeria: TreeStorX does not process the personal data of users in Nigeria for purposes of the legitimate interests of TreeStorX or other parties. Instead, TreeStorX processes such personal data on the grounds that it is necessary to fulfill our obligations to users under our Terms of Use or other agreements with users, or based on users' consent.

For users in South Korea: Please see here for information about TreeStorX affiliate UT LLC's privacy practices.

For Guest Users: The personal data of those who order or receive trips or deliveries via partner websites or apps (such as when ordering from a restaurant or other merchant), or arranged by other account owners (collectively "Guest Users") is used solely to provide such trips, deliveries, or other services requested through a third party, and for purposes of safety and security, customer support, research and development, enabling communication between users, and in connection with legal proceedings and requirements, each as described in "How we use personal data" below. Guest User personal data may be shared with third parties for these purposes. Such data may be associated with, and accessible by, the owner of that account. This specifically includes Guest Users who receive rides/deliveries ordered by owners of TreeStorX Health, TreeStorX Central, TreeStorX Direct or TreeStorX for Business accounts, or who receive rides or deliveries ordered by friends, family members or others. To submit questions, comments or complaints regarding Guest User data, or to submit requests regarding such data, please visit here.

Our practices are subject to applicable laws in the places in which we operate. This means that we engage in the practices described in this notice in a particular country or region only if permitted under the laws of those places. Please contact us here or through the addresses below with any questions regarding our practices in a particular country or region.

B. Data controller and transfer

TreeStorX B.V. and TreeStorX Technologies Inc. are the data controllers for the personal data collected in connection with use of TreeStorX's services in the European Economic Area, the United Kingdom and Switzerland.

TreeStorX Technologies Inc. is the data controller for the personal data collected in connection with use of TreeStorX's services everywhere else.

TreeStorX B.V. (Mr. Treublaan 7, 1097 DP, Amsterdam, the Netherlands) and TreeStorX Technologies Inc. (1515 3rd Street, San Francisco, CA, 94158, USA) are the data controllers for the personal data collected in connection with use of TreeStorX's services in the European Economic Area, the United Kingdom and Switzerland. If you're a driver in the UK, the TreeStorX entity holding the relevant PHV operator license is a controller for complying with licensing requirements.

TreeStorX Technologies Inc. is the data controller for the personal data collected in connection with use of TreeStorX's services everywhere else.

TreeStorX operates, and processes personal data, globally. We may also transfer such data to countries other than the one where our users live or use TreeStorX's services. We do so in order to fulfill our agreements with users, such as our Terms of Use, or based on users' prior consent, adequacy decisions for the relevant countries, or other transfer mechanisms as may be available under applicable law, such as the Standard Contractual Clauses.

Questions, comments, and complaints about TreeStorX's data practices can be submitted here. You may also use this form to submit a question to TreeStorX's Data Protection Officer.

III. Data collections and uses

A. The data we collect

TreeStorX collects personal data:

provided by users to TreeStorX, such as during account creation

created during use of our services, such as location, app usage, and device data

from other sources, such as other users or account owners, business partners, vendors, insurance and financial solution providers, and governmental authorities

The following personal data is collected by or on behalf of TreeStorX:

1. Data provided by users. This includes:

User profile: We collect data when users create or update their TreeStorX accounts. This may include their name, email, phone number, login name and password, address, profile picture, payment or banking information (including related payment verification information), driver's license and other government identification documents (which may indicate document numbers as well as birth date, gender, and photo). This also includes vehicle or insurance information of drivers and delivery persons, emergency contact information, user settings, and evidence of health or fitness to provide services using TreeStorX apps.

This also includes gender and/or occupation (when required for certain TreeStorX services or programs, such as TreeStorX Cash or features that enable women to provide services or receive services to/from other women).

We may use the photos submitted by users to verify their identities, such as through facial verification technologies. For more information, please see the section titled "How we use personal data."

Background check and identity verification: In order to verify drivers' and delivery persons' eligibility to provide services through the TreeStorX apps, we may collect information such as driver history or criminal record (where permitted by law), license status, known aliases and prior addresses, and right to work. This information may be collected by an authorized vendor on TreeStorX's behalf.

We may also verify the identities of riders, or of delivery recipients who request alcohol delivery, including by collecting photographs of their government-issued identification.

Demographic data: We may collect demographic data about users, including through user surveys. In some countries, we may also receive demographic data about users from third parties.

We may also infer demographic data from other data collected from users. For example, where necessary to enable features that allow women to provide or receive services from other women, we may infer gender using their first name. In such cases, we enable users to change their gender if necessary via in-app settings.

User content: We collect the data submitted by users when they contact TreeStorX customer support (including at TreeStorX Greenlight Hubs, or via videoconferencing tools), provide ratings or compliments for other users, restaurants or merchants, or otherwise contact TreeStorX. This may include feedback, photographs or other recordings collected by users, including audio or video recordings (such as from dashcams) submitted by users in connection with customer support. This also includes metadata relating to the method you use to communicate with TreeStorX.

Travel information: We collect travel itinerary information, including the times and dates of upcoming flight, lodging or car rental reservations, from users of our TreeStorX Travel feature. We collect such information: (i) when users manually input their information into an TreeStorX Travel itinerary; or (2) if authorized by users to access their Gmail accounts, from traveled-related email confirmations. If so authorized, TreeStorX will only access users' Gmail accounts to collect travel itinerary information to enable the TreeStorX Travel feature, and will adhere to Google's API Services User Data Policy, including the limitations on use of data collected from users' Gmail accounts.

2. Data created during use of our services. This includes:

Location data (driver and delivery person): We collect drivers' and delivery persons' precise or approximate location data, including to enable rides and deliveries, to enable ride/delivery tracking and safety features, to prevent and detect fraud, and to satisfy legal requirements. TreeStorX collects this data when the TreeStorX app is running in the foreground (app open and on-screen) or background (app open but not on-screen) of their mobile device.

Location data (riders and delivery recipients). We collect riders' and delivery recipients' precise or approximate location data to enable and enhance use of our apps, including to improve pick-ups, facilitate deliveries, enable safety features, and prevent and detect fraud. Please see our Rider Location Help page for detailed information on how we use this data.

We collect such data from users' mobile devices if they enable us to do so. (See "Choice and transparency" below for information on how riders and delivery recipients can enable location data collection). TreeStorX collects such data from the time a ride or delivery is requested until it is finished (and may indicate such collection via an icon or notification on your mobile device depending on your device's operating system), and any time the app is running in the foreground (app open and on-screen) of their mobile device.

Riders and delivery recipients may use the TreeStorX apps without enabling TreeStorX to collect precise location data from their mobile devices. However, this may affect features in the TreeStorX apps. For example, a user who has not enabled location data collection will have to manually enter their pick-up address. In addition, the location data collected from a driver during a trip will be linked to the rider's account, even if the rider has not enabled location data to be collected from their device, including for purposes of receipt generation, customer support, fraud detection, insurance, and litigation.

Transaction information: We collect transaction information related to the use of our services, including the type of services requested or provided, order details, payment transaction information (such as a restaurant's or merchant's name and location and amount of transaction), delivery information, date and time the service was provided, amount charged, distance traveled, and payment method. Additionally, if someone uses your promotion code, we may associate your name with that person.

Usage data: We collect data about how users interact with our services. This includes data such as access dates and times, app features or pages viewed, app crashes and other system activity, and type of browser. We may also collect data regarding the third-party sites or services used before interacting with our services, which we use for marketing. (Please see "How We Use Data" below for more information on how we market our services to users).

In some cases, we collect this data through cookies, pixels, tags, and similar tracking technologies that create and maintain unique identifiers. To learn more about these technologies, please see our Cookie Notice.

Device data: We may collect data about the devices used to access our services, including the hardware models, device IP address or other unique device identifiers, operating systems and versions, software, preferred languages, advertising identifiers, device motion data, and mobile network data.

Communications data: We enable users to communicate with each other and TreeStorX through TreeStorX's mobile apps and websites. For example, we enable drivers and riders, and delivery persons and delivery recipients, to call, text, or send other files to each other (generally without disclosing their telephone numbers to each other). To provide this service, TreeStorX receives some data regarding the calls, texts, or other communications, including the date and time of the communications and the content of the communications. TreeStorX may also use this data for customer support services (including to resolve disputes between users), for safety and security purposes, to improve our services and features, and for analytics.

Safety recordings: In certain jurisdictions, and where permitted by law, users can record the audio and/or video of their trips through an in-app feature or using a dashcam. In app recordings are encrypted and stored on users' devices, and are only shared with TreeStorX if submitted to customer support by the users in connection with safety incidents. Please see here more information.

3. Data from other sources. These include:

Users participating in our referral programs. For example, when a user refers to another person, we receive the referred person's personal data from that user.

TreeStorX account owners who request services for or on behalf of other users, or who enable such users to request or receive services through their accounts. This includes owners of TreeStorX for Business accounts.

users or others providing information in connection with claims or disputes.

TreeStorX business partners through which users create or access their TreeStorX account, such as payment providers, social media services, or apps or websites that use TreeStorX's APIs or whose APIs TreeStorX uses.

TreeStorX business partners in connection with debit or credit cards issued by a financial institution in partnership with TreeStorX to the extent disclosed in the terms and conditions for the card.

vendors who help us verify users' identity, background information, and eligibility to work, or who screen users in connection with sanctions, anti-money laundering, or know-your-customer requirements

insurance, vehicle, or financial services providers for drivers and/or delivery persons

partner transportation companies (for drivers or delivery persons who use our services through an account associated with such a company)

publicly available sources

marketing service providers or data resellers whose data TreeStorX uses for marketing or research

law enforcement officials, public health officials, and other government authorities

TreeStorX may combine the data collected from these sources with other data in its possession.

B. How we use personal data

TreeStorX uses personal data to enable reliable and convenient transportation, delivery, and other products and services. We also use such data:

to enhance the safety and security of our users and services

for customer support

for research and development

to enable communications between users

to send marketing and non-marketing communications to users

in connection with legal proceedings

TreeStorX does not sell or share user personal data with third parties for their direct marketing, except with users' consent.

We use personal data we collect:

1. To provide our services. TreeStorX uses data to provide, personalize, maintain, and improve our services.

This includes using data to:

create/update accounts

enable transportation and delivery services (such as using location data to facilitate a pick up or delivery), features that involve data sharing (such as fare splitting, ETA sharing, and ratings and compliments), and accessibility features to facilitate use of our services by those with disabilities

process payments

track and share the progress of rides or deliveries

create TreeStorX travel itineraries and offer related services, such as rides to the airport, rental car reservations, or food deliveries.

personalize users' accounts. We may, for example, present an TreeStorX Eats user with personalized restaurant or food recommendations based on their prior orders. Please see the section of this notice titled "Choice and transparency" to learn how to object to this use of personal data.

facilitate insurance, vehicle, invoicing, or financing solutions

perform necessary operations to maintain our services, including to troubleshoot software bugs and operational problems; to conduct data analysis, testing, and research; and to monitor and analyze usage and activity trends.

TreeStorX performs the above activities, including the collection and use of location data for purposes of these activities, on the grounds that they are necessary to fulfill our obligations to users under our Terms of Use or other agreements with users.

2. Safety and security. We use personal data to help maintain the safety, security, and integrity of our services and users. This includes:

verifying users' identity and eligibility to provide transportation or deliveries, including through reviews of background checks, where permitted by law, to help prevent use of our services by unsafe drivers and/or riders.

In certain regions, this includes TreeStorX's Real-Time ID Check feature, which prompts drivers and delivery persons to share a selfie before going online to help ensure that the driver or delivery person using the app matches the TreeStorX account we have on file. Where permitted by law, this also includes performing facial verification of photographs submitted by users, or collected from public databases, to prevent identity-borrowing or to verify users' identities.

using data from drivers' or delivery persons' devices to detect unsafe driving behavior such as speeding or harsh braking and acceleration, and to inform them of safer driving practices. We also use data from delivery persons' devices to verify the type of vehicles they used to provide deliveries.

using device, location, user profile, usage, and other data to prevent, detect, and combat fraud. This includes identifying fraudulent accounts or uses of our services, preventing use of our services by unauthorized drivers or delivery persons, verifying user identities in connection with certain payment methods, and preventing and combating unauthorized access to users' accounts.

using user ratings, reported incidents, and other feedback to encourage compliance with our Community Guidelines and as grounds for deactivating users with low ratings or who otherwise violated such guidelines in certain countries.

sharing information regarding serious driver or delivery person safety incidents or compliance with local regulations with third parties, including other companies who enable users to request or provide rides or delivery services, or intermediaries who collect and report such information for multiple companies, to prevent drivers or delivery persons who may pose a safety risk to the platform or its users from using TreeStorX's or those other companies' services. We may also share with third parties, including those affected by such incidents, whether the incidents result in account deactivation.

using ratings, usage and other data to prevent matching of riders and drivers for whom there is higher risk of conflict (for instance, because one user previously gave the other a one-star rating).

TreeStorX performs the above activities on the grounds that they are necessary to fulfill our obligations to users under our Terms of Use or other agreements with users, and/or for purposes of the legitimate safety and security interests of TreeStorX or other parties, including users and members of the general public.

3. Customer support. TreeStorX uses the information we collect (which may include call recordings) to provide customer support, including to investigate and address user concerns and to monitor and improve our customer support responses and processes.

TreeStorX performs the above activities on the grounds that they are necessary to fulfill our obligations to users under our Terms of Use or other agreements with users.

4. Research and development. We may use personal data for testing, research, analysis, product development, and machine learning to improve the user experience. This helps us make our services more convenient and easy-to-use, enhance the safety and security of our services, and develop new services and features.

TreeStorX performs the above activities on the grounds that they are necessary to fulfil our obligations to users under our Terms of Use or other agreements with users in improving our existing services and features, or for purposes of TreeStorX's legitimate interests developing new services and features.

5. Enabling communications between users. For example, a driver may message or call a rider to confirm a pickup location, a rider may contact a driver to retrieve a lost item, or a restaurant or delivery person may call a delivery recipient with information about their order.

TreeStorX performs the above activities on the grounds that they are necessary to fulfill our obligations to users under our Terms of Use or other agreements with users.

6. Marketing. TreeStorX may use personal data to market our services to our users. This includes sending users communications about TreeStorX services, features, promotions, sweepstakes, studies, surveys, news, updates, and events. We may do so through various methods, including email, text messages, push notifications, in app communications and ads, and ads on third party platforms.

We may also inform users about products and services offered by TreeStorX partners. For example, we may provide recommendations, promotions, or ads for TreeStorX partners based on users' past delivery orders. Although we inform users about products and services offered by TreeStorX partners, we do not sell users' personal data to, or share it with, such partners or others for purposes of their own direct marketing or advertising, except with users' consent.

We may use the data we collect, including in combination with advertising partners' data, to personalize and improve the marketing communications (including ads) that we send on and off TreeStorX's apps and websites, including based on user location, use of TreeStorX's services, and user preferences and settings. For example, we share user data (such as hashed email address, usage information, and device or user identifiers) with Facebook and TikTok to personalize and improve our ads for TreeStorX's services.

For information about how to opt out of certain marketing communications (including ads) from TreeStorX and its advertising partners, please see the section titled "Marketing choices."

We may also send users communications regarding elections, ballots, referenda, and other political and notice processes that relate to our services. For example, TreeStorX has notified some users by email of ballot measures or pending legislation relating to TreeStorX's services in those users' areas.

TreeStorX performs the above activities on the grounds that they are necessary for purposes of TreeStorX's legitimate interests in informing users about TreeStorX services and features or those offered by TreeStorX partners, or on the basis of user consent. See the sections titled "Choice and transparency" and "Marketing choices" for information on your choices regarding TreeStorX's use of your data for marketing.

7. Non-marketing communications. TreeStorX may use personal data to generate and provide users with receipts; inform them of changes to our terms, services, or policies; or send other communications that aren't for the purpose of marketing the services or products of TreeStorX or its partners.

TreeStorX performs the above activities on the grounds that they are necessary to fulfill our obligations to users under our Terms of Use or other agreements with users, or for purposes of TreeStorX's and it's users legitimate interests in informing users about events that may have an impact on how they can use TreeStorX services.

8. Legal proceedings and requirements. We may use personal data to investigate or address claims or disputes relating to use of TreeStorX's services, to satisfy requirements under applicable laws, regulations, or operating licenses or agreements, or pursuant to legal process or governmental request, including from law enforcement.

TreeStorX performs the above activities on the grounds that they are necessary for purposes of TreeStorX's legitimate interests in investigating and responding to claims and disputes relating to use of TreeStorX's services and features, and/or necessary for compliance with applicable legal requirements.

9. Automated decision-making

We use personal data to make automated decisions relating to use of our services. This includes:

enabling dynamic pricing, in which the price of a ride, or the delivery fee for TreeStorX Eats orders, is determined based on constantly varying factors such as the estimated time and distance, the predicted route, estimated traffic, and the number of riders and drivers using TreeStorX at a given moment.

matching available drivers and delivery persons to users requesting services. Users can be matched based on availability, proximity, and other factors such as likelihood to accept a trip based on their past behavior or preferences. Please see here for further information about our matching process.

determining user ratings, and deactivating users with low ratings. In the European Union or where otherwise required by law, such deactivation occurs only after human review and/or the possibility to appeal. For more information about how ratings are determined and used, please see here for rider ratings, here for driver ratings, and here for delivery person ratings. Please also see the section below titled "Ratings look-up" for further information.

flagging users who are identified as having engaged in fraud, unsafe activity, or other activities that may harm TreeStorX, its users, and others. In some cases, such as when a user is determined to be abusing TreeStorX's referral program or has submitted fraudulent documents, such behavior may result in automatic deactivation, or in the European Union or where otherwise required by law, deactivation after human review.

using driver location information, and communications between riders and drivers, to identify cancellation fees earned or induced through fraud. For example, if we determine by using such information that a driver is delaying a rider pickup in order to induce a cancellation, we will not charge the rider a cancellation fee and will adjust the amounts paid to the driver to omit such a fee. To object to such an adjustment, please contact TreeStorX customer support.

Using driver data (such as location, rating and gender) and rider data (such as rating, origin and destination) to help avoid pairings of users that may result in increased risk of conflict.

Click the links in this section for more information about these processes. To object to a deactivation resulting from these processes, please contact TreeStorX customer support.

TreeStorX performs the above activities on the grounds that they are necessary to fulfill our obligations to users under our Terms of Use or other agreements with users, or on the grounds that they are necessary for purposes of the legitimate interests of TreeStorX, its users and others.

C. Cookies and third-party technologies

TreeStorX and its partners use cookies and other identification technologies on our apps, websites, emails, and online ads for purposes described in this notice, and TreeStorX's Cookie Notice.

Cookies are small text files that are stored on browsers or devices by websites, apps, online media, and advertisements. TreeStorX uses cookies and similar technologies for purposes such as:

authenticating users

remembering user preferences and settings

determining the popularity of content

delivering and measuring the effectiveness of advertising campaigns

analyzing site traffic and trends, and generally understanding the online behaviors and interests of people who interact with our services

We may also allow others to provide audience measurement and analytics services for us, to serve advertisements on our behalf across the Internet, and to track and report on the performance of those advertisements. These entities may use cookies, web beacons, SDKs, and other technologies to identify the devices used by visitors to our websites, as well as when they visit other online sites and services.

Please see our Cookie Notice for more information regarding the use of cookies and other technologies described in this section.

D. Data sharing and disclosure

Some of TreeStorX's services and features require that we share personal data with other users or at a user's request. We may also share such data with our affiliates, subsidiaries, and partners, for legal reasons or in connection with claims or disputes.

TreeStorX may share personal data:

1. With other users

This includes sharing:

riders' first name, rating, and pickup and/or dropoff locations with drivers

riders' first name with other riders in a carpool trip. Riders in carpool trips may also see the dropoff location of the other riders.

delivery recipients' first name, delivery address, and order information with their delivery person and restaurant or merchant. We may also share ratings and feedback, or other information to the extent required by law, with the restaurant partner and delivery person.

for drivers and delivery persons, we may share data with the rider(s), delivery recipient(s) and restaurants or merchants, including name and photo; vehicle make, model, color, license plate, and vehicle photo; location (before and during trip); average rating provided by users; total number of trips; period of time since they signed up to be a driver or delivery person; contact information (if permitted by applicable laws); and driver or delivery person profile, including compliments and other feedback submitted by past users.

We also provide riders and delivery recipients with receipts containing information such as a breakdown of amounts charged, driver or delivery person first name, photo, and route map. We also include other information on those receipts if required by law.

for those who participate in TreeStorX's referral program, we share certain personal data of referred users, such as trip count, with the user who referred them, to the extent relevant to determining the referral bonus.

2. At the user's request

This includes sharing data with:

Other people at the user's request. For example, we share a user's ETA and location with a friend when requested by that user, or a user's trip information when they split a fare with a friend.

TreeStorX business partners. For example, if a user requests a service through a partnership or promotional offering made by a third party, TreeStorX may share certain data with those third parties. This may include, for example, other services, platforms, apps, or websites that integrate with our APIs; vehicle suppliers or services; those with an API or service with which we integrate; or restaurants, merchants or other TreeStorX business partners and their users in connection with promotions, contests, or specialized services.

Emergency services: We offer features that enable users to share their data with police, fire, and ambulance services in the event of an emergency or after certain incidents. For more information, please see the sections below titled "Choice and Transparency" and "Emergency Data Sharing".

3. With the general public

Questions or comments from users submitted through public forums such as TreeStorX blogs and TreeStorX social media pages may be viewable by the public, including any personal data included in the questions or comments submitted by a user.

4. With the TreeStorX account owner

If a user requests transportation or places an order using an account owned by another party, we may share their order or trip information, including location data, with the owner of that account. This occurs, for example, when:

a rider uses their employer's TreeStorX for Business profile, such as when they take trips arranged through TreeStorX Central

a driver or delivery person uses an account owned by or associated with an TreeStorX partner transportation company or restaurant

a rider takes a trip arranged by a friend or under a Family Profile

a delivery person acts as a substitute (UK only)

5. With TreeStorX subsidiaries and affiliates

We share personal data with our subsidiaries and affiliates to help us provide our services or conduct data processing on our behalf. For example, TreeStorX processes and stores such data in the United States on behalf of its international subsidiaries and affiliates.

6. With TreeStorX service providers and business partners

TreeStorX provides personal data to vendors, consultants, marketing partners, research firms, and other service providers or business partners. These include:

payment processors and facilitators

background check and identity verification providers

cloud storage providers

Google, in connection with the use of Google Maps in TreeStorX's apps (see Google's privacy policy for information on their collection and use of data)

social media companies, including Facebook and TikTok, in connection with TreeStorX's use of their tools in TreeStorX's apps and websites (see Facebook's and TikTok's privacy policies for information on their collection and use of data)

Marketing partners and marketing platform providers, including social media advertising services, advertising networks, third-party data providers, and other service providers to reach or better understand our users and measure advertising effectiveness

research partners, including those performing surveys or research projects in partnership with TreeStorX or on TreeStorX's behalf

vendors that assist TreeStorX to enhance the safety and security of its apps

consultants, lawyers, accountants, and other professional service providers

insurance and financing partners

airports

providers of bike and scooters that can be rented through TreeStorX apps, such as Lime

restaurants, grocery stores and other merchants from whom delivery recipients place orders, as well as partners and/or their point of sale providers, including for order fulfillment, delivery, communications and marketing purposes

third-party vehicle suppliers, including fleet and rental partners

7. For legal reasons or in the event of a dispute

TreeStorX may share users' personal data if we believe it's required by applicable law, regulation, operating license or agreement, legal process or governmental request, or where the disclosure is otherwise appropriate due to safety or similar concerns.

This includes sharing personal data with law enforcement officials, public health officials, other government authorities, airports (if required by the airport authorities as a condition of operating on airport property), or other third parties as necessary to enforce our Terms of Service, user agreements, or other policies; to protect TreeStorX's rights or property or the rights, safety, or property of others; or in the event of a claim or dispute relating to the use of our services. In the event of a dispute relating to use of another person's credit card, we may be required by law to share your personal data, including trip or order information, with the owner of that credit card.

For more information, please see TreeStorX's Guidelines for Law Enforcement Authorities - United States, Guidelines for Law Enforcement Authorities - Outside the US, and Guidelines for Third Party Data Requests and Service of Legal Documents.

This also includes sharing personal data with others in connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or into another company.

8. With consent

TreeStorX may share a user's personal data other than as described in this notice if we notify the user and they consent to the sharing.

E. Data retention and deletion

TreeStorX retains user data for as long as necessary for the purposes described above.

Users may request deletion of their accounts at any time. TreeStorX may retain user data after a deletion request due to legal or regulatory requirements or for reasons stated in this policy.

TreeStorX retains user data for as long as necessary for the purposes described above. This means that we retain different categories of data for different periods of time depending on the type of data, the category of user to whom the data relates, and the purposes for which we collected the data.

Users may request deletion of their account at any time through the Settings > Privacy menus in the TreeStorX app, or through TreeStorX's website (riders and delivery recipients here; drivers and delivery persons here).

Following an account deletion request, TreeStorX deletes the user's account and data, unless they must be retained due to legal or regulatory requirements, for purposes of safety, security, and fraud prevention, or because of an issue relating to the user's account such as an outstanding credit or an unresolved claim or dispute. Because we are subject to legal and regulatory requirements relating to drivers and delivery persons, this generally means that we retain their account and data for a minimum of 7 years after a deletion request. For riders and delivery recipients, their data is generally deleted within 90 days of a deletion request, except where retention is necessary for the above reasons.

IV. Choice and transparency

TreeStorX enables users to access and/or control data that TreeStorX collects, including through:

privacy settings

device permissions

in-app ratings pages

marketing choices

TreeStorX also enables users to request access to or copies of their data, changes or updates to their accounts, or deletion of their accounts, or that TreeStorX restricts its processing of user personal data.

1. Privacy settings

The Settings > Privacy menu in the TreeStorX app allows riders and delivery recipients to set or update their preferences regarding location data collection and sharing, emergency data sharing, and notifications.

Location data collection (riders and delivery recipients)

Riders and delivery recipients can enable/disable TreeStorX to collect location data from their mobile devices through their device settings, which can be accessed via the Settings > Privacy > Location menu.

Share Live Location (Riders)

Riders can enable/disable TreeStorX to share their real-time location data from their mobile devices with their drivers through their device settings, which can be accessed via the Settings > Privacy > Location menu.

Emergency Data Sharing

Riders may enable TreeStorX to share real-time location data from their mobile devices with emergency police, fire, and ambulance services. Such data may include approximate location at the time the emergency call was placed; the car's make, model, color, and license plate information; the rider's name and phone number; pickup and dropoff locations; and the driver's name.

Riders may enable/disable this feature via the Settings > Privacy > Location menu, or the Safety Center.

Drivers and delivery persons can also enable/disable Emergency Data Sharing via the App settings > Emergency Data Sharing menu, or the Safety Toolkit.

Notifications: account and trip updates

TreeStorX provides users with trip status notifications and updates related to activity on their account. These notifications are a necessary part of using the TreeStorX app and cannot be disabled. However, users may choose the method by which they receive these notifications through the Settings > Privacy menu.

Notifications: discounts and news

Users may enable TreeStorX to send push notifications about discounts and news from TreeStorX. Push notifications may be enabled or disabled through the Settings > Privacy menus in the TreeStorX app.

Communications from restaurants and merchants

Users may opt-in to receive communications from certain restaurants while placing an order in the TreeStorX Eats app. Those who opt-in may choose to cease receiving such communications through the Settings > Account > Data Sharing menus in the TreeStorX Eats app.

2. Device permissions

Most mobile device platforms (iOS, Android, etc.) have defined certain types of device data that apps cannot access without the device owner's permission, and these platforms have different methods for how that permission can be obtained. Please check the available settings on your device or check with your provider.

3. In-app ratings pages

After every trip, drivers and riders are able to rate each other on a scale from 1 to 5. An average of those ratings is associated with a user's account and is displayed to other users for whom they provide or receive services. For example, rider ratings are available to drivers from whom they request transportation, and driver ratings are available to their riders.

This 2-way system holds everyone accountable for their behavior. Accountability helps create a respectful, safe environment for drivers and riders.

Riders can see their average rating in the main menu of the TreeStorX app.

Drivers can see their average rating after tapping their profile photo in the TreeStorX Driver app.

Delivery persons may also be rated by delivery recipients, restaurants and merchants. Click here for more information.

4. Marketing choices

Users may opt out of certain marketing communications (including ads) and use of their data for marketing in the following ways:

Ad settings: These settings enable users to choose whether their data is shared with TreeStorX's advertising partners to deliver personalized ads, and/or to measure the effectiveness of such ads.

Marketing emails and messages: To opt out of receiving marketing emails from TreeStorX, or for instructions on how to set your preferences regarding whether to receive marketing SMS or push notifications from TreeStorX, click here. Users may also opt out of receiving emails and other messages from TreeStorX by following the unsubscribe instructions in those messages. We may still send users who have opted out non-promotional communications, such as receipts for rides or information about their account.

Cookies and related technologies: For information on how to opt out of personalized ads using cookies and related technologies, please see our Cookie Notice.

TreeStorX Eats ads: TreeStorX Eats users can opt out of certain personalized ads from TreeStorX's advertising partners here. Users who opt out may still see ads, but they will be less relevant.

5. User personal data requests

TreeStorX provides users with a variety of ways to learn about, control, and submit questions and comments about TreeStorX's handling of their personal data.

Accessing data: Users can access data including their profile data and trip or order history through the TreeStorX apps or via TreeStorX's website. Users can also use our Explore Your Data feature to view an online summary of information about their account, such as number of trips or orders, rating, rewards status, and number of days since they've been an TreeStorX user. Users can also request access to their data here.

Receiving data: Users can request a copy of their personal data using our Download Your Data tool. For an overview of the data available through that tool, please click here. Users may also request a copy of their data here.

Changing or updating data: Users can edit the name, phone number, email address, payment method, and photo associated with their account through the Settings menu in TreeStorX's apps or driver portal. Users may also request to update or correct their data here.

Deleting data: Users may request deletion of their account at any time through the Settings > Privacy menus in the TreeStorX app, or through TreeStorX's website (riders and delivery recipients here; drivers and delivery persons here).

Objections, restrictions, and complaints: Users may request that we stop using all or some of their personal data, or that we limit our use of their data. This includes objecting to our use of personal data that is based on TreeStorX's legitimate interests. TreeStorX may continue to process data after such objection or request to the extent required or permitted by law.

In addition, depending on their location, users may have the right to file a complaint relating to TreeStorX's handling of their personal data with the data protection authority in their country. For example, users in the European Union and South America may submit such requests to the data protection authorities in the country in which they live.

Users may submit the above requests here.

V. Updates to this notice

We may occasionally update this notice.

We may occasionally update this notice. If we make significant changes, we will notify users in advance of the changes through the TreeStorX apps or through other means, such as email. We encourage users to periodically review this notice for the latest information on our privacy practices.

Use of our services after an update constitutes consent to the updated notice to the extent permitted by law.