Privacy Policy
Last updated: August 19, 2024
Varonova Tech Inc. (publishers of RideWiz) respects your privacy. This Privacy Policy
describes Our policies and procedures on the collection, use and disclosure of Your
information when You use the Service and tells You about Your privacy rights and how
the law protects You. We use Your Personal data to provide and improve the Service.
By using the Service, You agree to the collection and use of information in accordance
with this Privacy Policy, and you represent that You are over 18 years of age.
RideWiz recognizes that using Our Service is a choice You make, and You can change
your mind at any time. If you need assistance with canceling Your subscription or
deleting Your Account, please reach out to support@ridewiz.ca.
Interpretation and Definitions
Interpretation
The words of which the initial letter is capitalized have meanings defined under the
following conditions. The following definitions shall have the same meaning regardless
of whether they appear in singular or in plural.
Definitions
For the purposes of this Privacy Policy:
Account means a unique account created for You to access our Service or parts
of our Service.
Affiliate means an entity that controls, is controlled by or is under common
control with a party, where "control" means ownership of 50% or more of the
shares, equity interest or other securities entitled to vote for election of directors
or other managing authority.
Application (May also be referred to as “App”) refers to the RideWiz mobile
application provided by the Company.
Company (referred to as either "the Company", “RideWiz”, "We", "Us" or "Our" in
this Agreement) refers to Varonova Tech Inc., 144 Pierella Drive, Belle River,
Ontario, N8L0Z4, Canada.
For the purpose of the GDPR, the Company is the Data Controller.
Cookies are small files that are placed on Your computer, mobile device or any
other device by a website, containing the details of Your browsing history on that
website among its many uses.
Device means any device that can access the Service such as a computer, a
cellphone or a digital tablet.
GDPR means the General Data Protection Regulation (EU) 2016/679
Personal Data or PII is any information that relates to an identified or identifiable
individual such as a name, an identification number, location data, online
identifier or to one or more factors specific to the physical, physiological, genetic,
mental, economic, cultural or social identity.
Service refers to the mobile Application or the Website or both.
Service Provider means any natural or legal person who processes the data on
behalf of the Company. It refers to third-party companies or individuals employed
by the Company to facilitate the Service, to provide the Service on behalf of the
Company, to perform services related to the Service or to assist the Company in
analyzing how the Service is used.
Usage Data refers to data collected automatically, either generated by the use of
the Service or from the Service infrastructure itself (for example, the duration of a
page visit).
Website refers to RideWiz, accessible from https://www.ridewiz.ca
You means the individual accessing or using the Service, or the company, or
other legal entity on behalf of which such individual is accessing or using the
Service, as applicable.
What User Data is Collected
Types of Data Collected, and How it is Collected
We strive to collect only the personal data that We need. The personal data
RideWiz collects depends on how You interact with the Service.
Submitted Information
As part of using the Services, We may ask You to submit certain information to us,
which includes Personal Data, that can be used to contact or identify You, or enhance
Your experience with Our Service. This may include, but not be limited to:
Name
Phone number
Email address
Vehicle (Make, Model, Type, Odometer readings)
Employer (The ride-share companies You drive for)
Transactional Data
No credit or debit card and bank login credentials are stored by RideWiz as We are a
read-only Service. We collect account balances and transaction history. All collections
are done through Plaid, a third-party Service Provider. You may choose to provide Your
bank login details through Plaid to view Your income and expenses through Our App. By
using our Service, You acknowledge and agree that the personal and financial
information You provide through Plaid is held in accordance with the Privacy Policy of
Plaid: https://plaid.com/legal/#Privacy-Policy
Automatically Collected Information
When You open the Website or use the Mobile Application, Our servers automatically
record Usage Data that Your browser or Device sends. This data may include
information such as Your Device’s IP address and location, browser and Device name
and version, operating system type and version, language preferences, the webpage
You were visiting before You came to the Services, pages of the Services that You visit,
the time spent on those pages, the information You search for on the Services, access
times and dates, and other statistics.
Location Based Information
Granting RideWiz access to location-based tracking through Your mobile Device and
App preferences allows Us to receive information regarding Your precise location (using
Your Device’s GPS antenna) when the App is running on Your Device. We also receive
information from the compass on Your mobile Device, including course, heading,
velocity and altitude.
Information from Third Party Social Media Services
RideWiz allows You to create an account and log in to use the Service through Google
or Facebook. Through creating an account with a Third Party Service, we may collect
Personal Data that is already associated with Your Third-Party Social Media Service's
account, such as Your name and Your email address.
Pictures and Other Information from Your Device’s Files and Photo Library
RideWiz allows You to upload photos of Your receipts for record keeping in a secure
cloud. We will only do so with Your permission, storing Your receipts with RideWiz is
optional.
Tracking Technologies and Cookies
We may use Cookies and similar tracking technologies to track the activity on Our
Service and store certain information. Tracking technologies used are beacons, tags,
and scripts to collect and track information and to improve and analyze Our Service.
The technologies We use may include:
Cookies or Browser Cookies: A cookie is a small file placed on Your Device.
You can instruct Your browser to refuse all Cookies or to indicate when a Cookie
is being sent. However, if You do not accept Cookies, You may not be able to use
some parts of our Service. Unless You have adjusted Your browser setting so
that it will refuse Cookies, our Service may use Cookies.
Web Beacons. Certain sections of our Service and our emails may contain small
electronic files known as web beacons (also referred to as clear gifs, pixel tags,
and single-pixel gifs) that permit the Company, for example, to count users who
have visited those pages or opened an email and for other related Website
statistics (for example, recording the popularity of a certain section and verifying
system and server integrity).
Please note that You have the ability to accept or decline Cookies. Most web browsers
automatically accept Cookies by default, but You can modify Your browser settings to
decline Cookies if You prefer. Also please note, some internet browsers may transmit
“do-not-track” signals to websites with which the browser communicates. The Service
does not currently respond to these “do-not-track” signals.
Our Service does not address anyone under the age of 13. We do not knowingly collect
personally identifiable information from children under 13. If We become aware that We
have collected Personal Data from a child under 13, we will quickly take steps to
remove their information from our servers.
How Your Data is Used
The Company may use Personal Data for the following general, lawful business
purposes; So long as they are not overridden by User’s own rights and interests:
To provide and maintain our Service, including to monitor the usage of our
Service and investigating any App crashes or errors.
To improve our products and services
To manage Your Account: to manage Your registration as a user of the Service.
The Personal Data You provide can give You access to different functionalities of
the Service that are available to You as a registered user.
For the performance of a contract: the development, compliance and
undertaking of the purchase contract for the products, items or services You have
purchased or of any other contract with Us through the Service.
To contact You: To contact You by email, telephone calls, SMS, or other
equivalent forms of electronic communication, such as a mobile Application's
push notifications regarding updates or informative communications related to
the functionalities, products or contracted Services, including the security
updates, when necessary or reasonable for their implementation.
To provide You with news, special offers and general information about other
goods, services and events which we offer that are similar to those that You have
already purchased or enquired about unless You have opted not to receive such
information.
To manage Your requests: To attend and manage Your requests to Us.
For analysis purposes: We may use Your information for other purposes, such
as data analysis, identifying usage trends, determining the effectiveness of our
promotional campaigns and to evaluate and improve our Service, products,
services, marketing and Your experience.
We may share Your personal information in the following situations. Otherwise,
we do not sell, rent, or lease PII and will not disclose Users’ PII to third parties
without Your permission. Any third-parties will take equally good care of Your
data as We do:
With Service Providers and trusted third-parties: We may share Your
personal information with Service Providers to monitor and analyze the use of
our Service, as well as third party Service Providers that provide other services to
us relating to our Services. The Service may use the Apple Maps Platform or
Google Maps Platform. To the extent Users’ PII is disclosed to Apple, the User
hereby consents to Apple’s use and collection of such PII pursuant to the then
current Apple Privacy Statement (available at
https://www.apple.com/legal/privacy/en-ww/ or a successor website). To the
extent Users’ PII is disclosed to Google, the User hereby consents to Google’s
use and collection of such PII pursuant to the then current Google Privacy Policy
(available at https://policies.google.com/privacy or a successor website).
For business transfers: We may share or transfer Your personal information in
connection with, or during negotiations of, any merger, sale of Company assets,
financing, or acquisition of all or a portion of Our business to another company.
With Affiliates: We may share Your information with Our Affiliates, in which case
we will require those Affiliates to honor this Privacy Policy. Affiliates include any
subsidiaries, joint venture partners or other companies that We control or that are
under common control with Us.
With business partners: We may share Your information with Our business
partners to offer You certain products, services or promotions.
Due to legal requirement: We may use and disclose information where we, in
good faith, believe that the law or legal process (such as a subpoena) requires us
to do so or in other circumstances where we believe it is necessary to protect the
rights or property of Varonova Tech Inc., our users and/or third parties.
How Your Data is Kept Secure
In-app sensitive data we collect about you like passwords and PII is either hashed or encrypted
at rest. In transit data between the front end and the backend is SSL/TLS Encrypted. The
backend is hosted completely on Amazon Web Services and uses various services and
safeguards to ensure the data is protected. Primarily, access to the VPC in which the database
and server are hosted is limited to encrypted traffic incoming from our app through HTTPS. The
verified traffic is directed to the server hosted in an EC2 instance of a public subnet of the Virtual
Private Cloud (VPC). https://aws.amazon.com/security/ Your data is stored or accessed from the
database which is hosted in a private subnet of the VPC and which can only be interfaced with
from inside the VPC by an authorized user. We employ logging and monitoring tools such as
Amazon Cloudwatch to ensure the health and integrity of our servers and security measures.
We will maintain reasonable safeguards to protect your PII. However, no security measures can
be guaranteed to be 100% effective and so we cannot guarantee the security of your PII. We
expressly disclaim any representation or warranty, whether express or implied, with respect to
ensuring, guaranteeing or otherwise offering any definitive promise of security in connection with
your personal information or usage information.
International Data Transfers
Your information, including Personal Data, may be transferred to and maintained on
computers located outside of Your state, province, country, or other governmental
jurisdiction where the data protection laws may differ than those from Your jurisdiction.
We ensure that adequate safeguards are in place for such transfers. RideWiz
complies with laws on the transfer of Personal Data between countries to help
ensure Your data is protected, wherever it may be.
Retention of Your Personal Data
Unless a longer retention period is required or permitted by law, We will only hold Your
Data on our systems for a maximum period of six (6) years to fulfill the purposes
outlined in this privacy policy or until You request that the Data be deleted. This
complies with the CRA requirement to retain supporting income tax records for six
years. If You cancel Your subscription, Your data may be deleted at or before the end of
the current tax fiscal year. In the event of a subscription being canceled, We will attempt
to contact You so that You may download your Data for record-keeping. To request Your
data to be deleted, please send a request to support@ridewiz.ca and We will do so
promptly.
The Company will also retain Usage Data for internal analysis purposes. Usage Data is
generally retained for a shorter period of time, except when this data is used to
strengthen the security or to improve the functionality of Our Service, or We are legally
obligated to retain this data for longer time periods.
Links to Other Websites
Our Website may contain links to third-party websites or services which redirect You to
sites that are not owned or controlled by Varonova Tech Inc. We have no control over,
and assume no responsibility for, the content, privacy policies, or practices of any
third-party websites or services. We strongly advise You to review the privacy policy of
every site You visit.
Lawful Basis for Processing Personal Data under
GDPR
We may process Personal Data under the following conditions:
Consent: You have given Your consent for processing Personal Data for one or
more specific purposes.
Performance of a contract: Provision of Personal Data is necessary for the
performance of an agreement with You and/or for any pre-contractual obligations
thereof.
Legal obligations: Processing Personal Data is necessary for compliance with a
legal obligation to which the Company is subject.
Vital interests: Processing Personal Data is necessary in order to protect Your
vital interests or of another natural person.
Public interests: Processing Personal Data is related to a task that is carried out
in the public interest or in the exercise of official authority vested in the Company.
Legitimate interests: Processing Personal Data is necessary for the purposes
of the legitimate interests pursued by the Company.
Your Rights Under the GDPR
Under the General Data Protection Regulation (GDPR), You have the following rights
regarding Your Personal Data:
Right to Access: You can request access to the Personal Data we hold about
You.
Right to Rectification: You can request correction of any inaccurate or
incomplete data in Your PII.
Right to Erasure: You can request the deletion of Your Personal Data.
Right to Restrict Processing: You can request the restriction of processing Your
data.
Right to Data Portability: You can request a copy of Your Personal Data in a
structured, commonly used, and machine-readable format.
Right to Object: You can object to the processing of Your data, including where
we use it for Our legitimate interests.
Right to Withdraw Consent: If You have given consent for data processing, You
can withdraw it at any time.
To exercise any of these rights, please contact us at support@ridewiz.ca
Changes to This Privacy Policy
Varonova Tech Inc. reserves the right to change this privacy policy as We may deem
necessary from time to time or as may be required by law. Any changes will be
immediately posted on the Website and You are deemed to have accepted the terms of
the privacy policy on Your first use of the Services following the alterations. We will
notify You either through the email address You have provided us or by placing a
prominent notice on our Website and App upon any changes to this policy.
If you have any questions about this Privacy Policy, please contact our Data
Protection Officer at:
Antonio Roye-Azar | Antonio@ridewiz.ca