1Scope
This Privacy Policy describes how NEXLEFT, INC. ("NEXLEFT," "we," "us") handles personal information when you use our websites, mobile applications, and services (the "Service"), whether as a rider, a driver, or a visitor. Service-specific terms — the Rider Terms, Driver Terms, and Subscription Terms — supplement this policy.
2Information we collect
Information you provide
Account details (name, email, phone), profile photo (captured in-app by camera), payment method (processed and tokenized by Stripe — we do not store full card numbers), identity-verification information for drivers and, where required, riders (government ID documents processed through certified verification vendors), trusted-contact details you choose to add, and communications with support.
Information collected automatically
Precise location while the app is in use as needed to provide the Service (matching, navigation, safety, fare calculation); trip details (route, time, distance, fare); device and app information (device identifiers, OS, app version, device-attestation signals); and usage and log data.
Information from other sources
Background-check and identity-verification results from authorized vendors (for drivers, subject to applicable FCRA disclosures and consents), and payment signals from our processor.
3How we use information
We use personal information to provide and improve the Service: matching riders and drivers, navigation, pricing and payments, receipts, memberships, safety and identity verification, fraud prevention and platform integrity, customer support, legal and regulatory compliance (including transportation-regulator reporting obligations), and communications about the Service. Where required, we rely on your consent; otherwise we process information to perform our agreement with you, to comply with law, or for legitimate interests such as safety and fraud prevention.
4How we share information
We share information: between riders and drivers as needed to complete a trip (first name, photo, vehicle details, pickup and drop-off, approximate location); with service providers under contract (payment processing, identity verification, background checks, cloud infrastructure, communications); with insurers and, where applicable, regulators in connection with trips, claims, or compliance; in connection with safety incidents or legal process; and in a business transfer. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
5Your choices & rights
Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. Submit requests at privacy@nexleft.com or in-app. We offer in-app account deletion. You can manage location and notification permissions in your device settings; some features require location to function. We will not discriminate against you for exercising your rights.
6Data retention
We retain information for as long as needed to provide the Service and for legitimate legal, safety, tax, insurance, and dispute-resolution purposes, then delete or de-identify it. Typical periods: account information for the life of your account; trip, payment, and tax records for up to seven years for tax, insurance, and dispute purposes; identity documents only as long as the verification decision requires; support communications for up to two years.
7Security
We use encryption in transit, encryption at rest for sensitive stores, tokenized payments, request signing, rate limiting, session protections, device attestation, hash-chained audit logging, and role-based access controls. No system is 100% secure; we work continuously to protect your data.
8International transfers
NEXLEFT operates in the United States. If we transfer personal information internationally, we use appropriate safeguards such as Standard Contractual Clauses.
9NEXCARE / health information
NEXCARE medical-transport features may involve protected health information (PHI). PHI is handled under our HIPAA program and applicable Business Associate Agreements, segregated from general platform data, and used only as permitted for the medical-transport service.
10Children
The Service is not directed to children under 13, and account holders must be at least 18. We do not knowingly collect personal information from children; if you believe a child has provided us information, contact privacy@nexleft.com.
11State-specific disclosures
California residents: this section, together with the rest of this policy, serves as our notice at collection. Categories collected are described in Section 2; purposes in Section 3; disclosures in Section 4. You may exercise CCPA/CPRA rights (know, delete, correct, portability, limit use of sensitive personal information) via the contacts in Section 5, including through an authorized agent.
12Changes & contact
We will post changes here and update the effective date above; material changes will be notified in-app or by email. Contact: privacy@nexleft.com · NEXLEFT, INC., 30 N Gould St Ste R, Sheridan, WY 82801, US.