Coachman Privacy Policy

This Privacy Policy explains how Bosgo Transportation LLC (“Coachman,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the Coachman: Preferred Chauffeur mobile application (the “App”). Coachman is available to users in the United States and is intended for users who are at least 18 years old.

If you have questions about this policy, contact us at privacy@bosgotransportation.com.

1. Who We Are

Bosgo Transportation LLC operates the Coachman App, a software platform that connects passengers with independent chauffeur service providers. Our mailing address and additional contact information are listed in Section 16 (“Contact Us”).

2. Our Role: We Are a Marketplace, Not Your Carrier

Coachman is a software platform. We help passengers request quotes, book rides, manage reservations, communicate with providers, and handle related payment workflows. Unless we expressly state otherwise for a specific service, Coachman does not directly provide transportation, employ chauffeurs, own or operate vehicles used for booked rides, or insure transportation services.

Passengers contract directly with the chauffeur service provider connected to each ride. Providers are independent businesses responsible for their own transportation services, vehicles, drivers, licensing, insurance, service quality, cancellation policies, and legal compliance. Providers have their own privacy practices, and we are not responsible for how providers handle information once it is shared with them in connection with a ride.

Payments and saved payment methods are processed by Stripe, Inc. (“Stripe”). See Section 8 for details.

3. Information We Collect

We collect the following categories of information when you use the App.

3.1 Account and profile information

• Name (first and last), email address, phone number, and login method (phone OTP, email/password, or a supported single sign-on provider).
• Optional profile photo you choose to upload.
• Optional ride preferences, preferred contact method, and notes you save to your profile.
• Saved guest profiles you create (a guest's first name, last name, phone, and optional email) when you add a guest passenger.

3.2 Ride, quote, and reservation information

• Pickup and drop-off addresses, route stops, town and ZIP, latitude/longitude of selected places, pickup date and time, vehicle type preference, passenger and luggage counts, car-seat counts, and ride-type details (e.g., airport, hourly, special occasion).
• Flight numbers and related flight details when you use flight-based features.
• Notes you add to a quote or reservation.
• Quote, reservation, status history, and trip records.
• Saved places you create (label, address, coordinates, notes).

3.3 Location information

• Device location: When you grant the App permission, we read your device's approximate (balanced-accuracy) location only while you are using the App, and only to help you discover chauffeur providers in your area. We do not collect background location.
• Address-based location: Pickup, drop-off, route stops, and saved places that you select or enter are stored as part of your quote, reservation, and saved-place records.

3.4 Payment information

Card entry, card scanning, and card vaulting are handled by Stripe. Coachman does not receive or store full card numbers or CVC/security codes. We store only the limited payment metadata needed to display and manage your saved cards and to record completed transactions:

• Card brand, last four digits, expiration month/year, wallet type (if any).
• Stripe customer and payment-method identifiers, payment status, payment intent and setup intent identifiers, and related transaction references.
• Billing details we pass to Stripe PaymentSheet when you set up a card (your name, email, and phone from your Coachman profile).

3.5 Communications, reviews, and safety

• In-app chat messages with chauffeur service providers and ride-related parties, plus participant snapshots and message metadata.
• Ratings, optional review comments, and reviewer display name when you rate a provider.
• Content reports and block actions you submit (the reported party, report type, reason or details, and resolution status).
• Feedback and support communications you send to us by email or phone (we do not currently store in-app support tickets in our database).
• Transactional email details needed to send account, authentication, security, quote, booking, payment, support, and provider-related messages. This may include your email address, message content, delivery metadata, Resend message identifiers, and app/action tags used for delivery, troubleshooting, security, and audit logging.

3.6 Device, app, and notification metadata

• Push notification tokens (Expo push tokens), the platform (iOS or Android), and a device label such as “Coachman iOS 18.x.”
• App version and build number, platform, and operating environment attached to analytics events.
• Session identifiers used by the App and our analytics provider.
• Local theme preference (light, dark, or system).

3.7 Product analytics and diagnostic data

We use PostHog as our first-party product analytics and crash reporting provider. We use it to understand how the App is used, measure feature performance, and diagnose errors and crashes. The data we send to PostHog is limited to non-PII signals such as event names (for example, “quote_started,” “auth_completed,” “notification_permission_result”), small bucketed properties (such as ride type, success flags, and error codes), and standard analytics metadata such as device model, OS version, locale, time zone, library version, app version, environment, and a session identifier. PostHog also receives your Coachman user ID as a pseudonymous “distinct ID.”

We have configured PostHog to exclude sensitive details. We do not send your name, email address, phone number, full address, precise coordinates, chat content, ride notes, review text, payment card details, Stripe identifiers, profile photo, or other freeform user content to PostHog. GeoIP lookup and session replay are disabled.

4. How We Use Information

We use the information described above to:

• Create and manage your Coachman account, authenticate sign-in, and maintain your session.
• Provide quote, booking, payment, trip, messaging, support, and safety features.
• Connect you with chauffeur service providers and share with them the information they need to fulfill a quote or ride.
• Process payments, deposits, balances, refunds, and disputes through Stripe.
• Display maps, search addresses, build routes, and look up flight information.
• Send account, authentication, security, quote, reservation, payment, provider, and support communications by email, push notification, SMS, or in-app message where applicable.
• Display your optional profile photo on Coachman surfaces that you and connected providers see.
• Respond to support, safety, moderation, account deletion, and privacy requests.
• Understand App usage, measure feature performance, improve reliability, and fix crashes and errors.
• Detect and prevent fraud, enforce our Terms, protect users and providers, and comply with legal obligations.

4.1 What we do NOT do

• We do not sell your personal information.
• We do not share your personal information for cross-context behavioral advertising (sometimes called targeted or interest-based advertising).
• We do not use analytics or crash data for third-party advertising, advertising measurement, retargeting, data brokers, or cross-app tracking.
• We do not knowingly process personal information from anyone under 18.

5. Third-Party Services and Sub-Processors

We use the following providers to operate Coachman. Each receives only the information needed to perform its function and is contractually or operationally bound to handle that information appropriately.

• Supabase — authentication, database, realtime updates, file storage (including profile photos), and serverless backend functions.
• Stripe — payment setup, saved payment methods, card scanning (via Stripe's native card scanner where supported), payment processing, receipts, refunds, dispute handling, and related payment compliance.
• Google Maps Platform (Google LLC) — address search (Places), place details, and driving routes. Requests are proxied through our backend.
• Mapbox — map rendering and map styles used inside the App.
• FlightAware (AeroAPI) and OAG — flight lookup, verification, and schedule data when you use flight-based features.
• Expo / EAS — mobile app delivery, configuration, and push notification token delivery (Expo push service) on top of Apple and Google's push systems.
• Resend — transactional email delivery for account, authentication, security, quote, booking, payment, support, and provider-related messages. Resend may process recipient email addresses, message content, message metadata, delivery events, and related identifiers needed to send and monitor those emails.
• PostHog — first-party product analytics and crash/diagnostic reporting, scoped as described in Section 3.7.
• Apple and Google platform services — the App relies on standard iOS and Android services such as push notification delivery (APNs/FCM) and OS-level permissions.

Note: Other services that appear in our broader business (for example, tools used by chauffeur partners on the operator side) are not part of the Coachman passenger App and are not covered by this policy.

6. Sharing With Chauffeur Service Providers

When you request a quote or book a ride, we share with the connected chauffeur service provider the information needed to fulfill the service. That typically includes:

• Your name, profile photo, phone number, and email.
• Pickup and drop-off addresses, route stops, pickup time, passenger and luggage counts, vehicle preference, and any notes you provide.
• Flight information when relevant.
• Reservation and payment-status information for the ride.
• Guest profile details for any guests you book on their behalf.

Providers are independent businesses and process this information under their own privacy practices. We encourage you to review the privacy practices of any provider you book with.

7. Analytics, Diagnostics, and Advertising

As described in Section 3.7, we use PostHog for first-party product analytics, retention measurement, crash reporting, and reliability monitoring.

We do not use analytics or crash data for third-party advertising, advertising measurement, retargeting, data brokers, or cross-app tracking. We do not display third-party advertising in the App, and we do not allow third parties to track you across other apps or websites through Coachman.

8. Payment and Card Information

All card entry and card vaulting take place inside Stripe. Coachman stores only the limited payment metadata described in Section 3.4. We do not store full card numbers or card security codes.

When you save a card, Stripe stores a tokenized payment method so that the chauffeur service provider connected to your ride can charge authorized amounts (such as deposits, full fares, balances, or refunds) shown in the App or agreed with the provider.

When you delete a saved card or your Coachman account, we delete our local saved-card records, detach saved payment methods from your Stripe customer record, and delete the connected-account Stripe customer record where supported. Deleting a saved card or account does not delete completed payment, refund, receipt, tax, dispute, fraud-prevention, or compliance records that we or Stripe must retain for legitimate business or legal reasons. Stripe may retain payment data as required by law, payment-network rules, dispute handling, fraud prevention, or regulatory obligations.

9. Notifications and Communications

If you allow notifications, we may send push notifications about account activity, quotes, bookings, ride status, payments, support responses, and provider communications. You can change notification settings at any time in your device's system settings or inside the App. We may also contact you by email or SMS for account, security, and transactional purposes. We use Resend to deliver transactional emails; these emails may include service-related content and delivery metadata needed to send, secure, troubleshoot, and audit the communication. We do not use Resend for cross-context behavioral advertising.

10. Account Deletion and Data Retention

10.1 How to delete your account

You can request account deletion from inside the App: open Account → Delete Account and confirm. You may also request deletion by emailing privacy@bosgotransportation.com.

10.2 What gets deleted

When you delete your account, we remove or detach the following:

• Your Supabase authentication record.
• Your profile photo objects in our storage.
• Saved places, favorite addresses, guest profiles, flight favorites, and locally cached recent addresses on your device.
• Saved payment-method links in Coachman, and detached/deleted Stripe payment methods and connected-account customer records (subject to Stripe's retention requirements).
• Your push notification tokens are deactivated.
• Pending provider requests, active provider connections, and pending invites are cancelled or disconnected.
• Submitted or priced quotes and pending or confirmed reservations are cancelled.

10.3 What we anonymize or retain

To preserve service integrity, accounting, safety, and compliance, some records are anonymized or retained:

• Your profile record is retained in an anonymized form (display name set to “Deleted Passenger,” account suspended; first/last name, email, phone, and profile photo cleared).
• Provider reviews you submitted are retained for review integrity but the reviewer reference and any comment text are removed and the review is hidden from public surfaces.
• Chat messages you sent are retained as tombstones: the sender reference is cleared and the body is replaced with a generic notice.
• Completed payment, refund, receipt, accounting, tax, dispute, and fraud-prevention records are retained for as long as required by law, payment-network rules, or our legitimate business purposes.
• A deletion request record is kept as an audit trail, including a snapshot of the email and phone associated with the deleted account at the time of deletion.

10.4 General retention

Outside the deletion flow, we keep information for as long as needed to provide the App, comply with legal obligations, resolve disputes, process payments, enforce agreements, and protect users and providers. When information is no longer needed for these purposes, we delete or anonymize it.

11. How We Protect Information

We use industry-standard safeguards to protect personal information, including encryption of data in transit (TLS), encrypted storage of authentication tokens on your device using your platform's secure storage (Keychain on iOS, Keystore-backed storage on Android), database-level access controls, and least-privilege access to backend systems. Payment card data is handled by Stripe under its PCI-DSS-compliant infrastructure.

No security program is perfect. If we become aware of a security incident that affects your personal information, we will notify you and applicable regulators as required by law.

12. Your Choices

• Update your name, email, phone, and profile photo in the App.
• Manage location and notification permissions in your device's system settings.
• Manage or delete saved cards in Account → Payments & Billing.
• Request account deletion in the App or by email.
• Contact us at privacy@bosgotransportation.com for any privacy question or request.

13. Your California Privacy Rights

This section applies to California residents and supplements the rest of this policy. It is provided under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”).

13.1 Categories of personal information collected, sources, purposes, and disclosures

In the past 12 months (or since the launch of the App if shorter), we have collected the following categories of personal information about California residents. The categories below use CCPA terminology. Examples and recipient categories are shown in the table:

Sources of information: directly from you when you use the App; from your device with your permission (e.g., location, push tokens); from chauffeur service providers in connection with your bookings; and from Stripe, Resend, Google Maps Platform, Mapbox, FlightAware, OAG, and similar service providers used to operate the App.

Business and commercial purposes for collection: providing and improving the App; connecting you with chauffeur service providers; processing payments; communicating with you; ensuring safety and preventing fraud; and complying with legal obligations. We do not use sensitive personal information beyond the purposes permitted under Cal. Code Regs. tit. 11, § 7027(m) (e.g., providing the service you requested and operating the App).

13.2 No sale or sharing of personal information

We do not sell or share personal information as those terms are defined under the CCPA. In particular, we do not share personal information for cross-context behavioral advertising. We have not sold or shared personal information of California residents (including minors under 16) in the past 12 months.

13.3 Your rights

California residents have the right to:

• Know / access: request the specific pieces and categories of personal information we have collected about you, the sources, the purposes, and the categories of recipients.
• Delete: request deletion of personal information we have collected from you, subject to legal exceptions (e.g., to complete a transaction, detect fraud, or comply with law).
• Correct: request that we correct inaccurate personal information.
• Opt out of sale or sharing: we do not sell or share personal information, so there is nothing to opt out of, but we honor verified requests if our practices change.
• Limit use of sensitive personal information: we do not use sensitive personal information for purposes that would trigger a right to limit; we use it only to provide the App.
• Non-discrimination: we will not deny you services, charge different prices, or provide a different level of quality because you exercised your rights.

13.4 How to exercise your rights

Submit a request by emailing privacy@bosgotransportation.com or by calling 857-364-7336. We may need to verify your identity (typically by asking you to confirm information already associated with your account). You may use an authorized agent to submit a request on your behalf, in which case we may require proof of authorization and verification of your identity.

13.5 Retention

We retain personal information only for as long as needed to fulfill the purposes described in this policy, comply with our legal obligations, resolve disputes, and enforce our agreements. The general retention behaviors described in Section 10 apply.

14. Children

Coachman is intended for users who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the “Effective date” at the top of this policy and, for material changes, will provide additional notice in the App or by email before the change takes effect. Your continued use of the App after a change becomes effective means you accept the updated policy.

16. Contact Us

Bosgo Transportation LLC

Support: support@bosgotransportation.com

Privacy: privacy@bosgotransportation.com

Phone: 857-364-7336

© Bosgo Transportation LLC. All rights reserved.