How CORIDE handles your personal information

This policy applies to users of CORIDE services anywhere in India, including users of CORIDE apps, websites, features, or other services.

This policy describes how CORIDE and its affiliates collect and use personal data. This policy applies to all users of our apps, websites, features, or other services anywhere in India.

To operate CORIDE's services and to provide users with information about products or services that may be of interest to them, CORIDE may collect "personal information" from users. You represent and warrant that you have the authority to provide us with any such information.

CORIDE collects and stores the following user data:

• User Profile: When users create or update their account with CORIDE, we collect data about the user including but not limited to name, email, gender, phone number, company working for, profession, official email ID, home location, office location, referring user through promo code, and profile picture. We also collect payment method information (wallet linking, credit card, debit card, etc.) and redemption information (choice of redemption mechanism such as bank information, wallets, etc.).
• User Profile Verification: To verify the user profile, we collect the company official email ID, driver's license, government identification documents such as Aadhaar card details, etc.
• Vehicle information such as model, type, registration number, picture, etc., is collected.
• Emergency Contact Information: The contact details of the emergency contact provided by the user.
• User's date of birth.
• User's skills and hobbies.
• Home address, office address, and usual travelling times between them.
• User's contacts list provided by the user to refer contacts for referrals/invites.
• User's social network accounts, such as Facebook, LinkedIn, and Twitter, if the user chooses to connect those accounts with their CORIDE account.
• Demographic Data: We may collect demographic data about users, including through user surveys. In some countries, we may also receive demographic data about users from third parties/tools.
• User Feedback: We collect and store user feedback on other users and CORIDE products and services.

• User feedback, such as ratings, feedback, complaints, and tickets.
• Users participating in our referral programs. For example, when a user refers another person, we receive the referred person's personal data from the referring user.
• Users or others providing information in connection with claims or disputes.
• Vendors who help us verify users' identity and background information for regulatory, safety, and security purposes.
• Publicly available sources.
• Marketing service providers.
• CORIDE may combine the data collected from these sources with other data in its possession.

1. Providing services and features

CORIDE also uses the data we collect to provide, personalize, maintain, and improve our products and services. This includes using the data to:

• Create and update users' accounts.
• Verify users' profile and identity.
• Enable ride sharing and other services.
• Offer, process, or facilitate payments for the services.
• Track and share the progress of rides.
• Enable features that allow users to share information with other people, such as conversations, feedback, etc., or share ETA and location with their contacts.
• Enable features to personalize users' CORIDE accounts, such as creating favorite locations, routes, and quick access to previously used locations and places along addresses.
• Perform internal operations necessary to provide our services, including troubleshooting software bugs and operational problems; conducting data analysis, testing, and research; and monitoring and analyzing usage and activity trends.

2. Safety and Security

We use personal data to help maintain the safety, security, and integrity of our services and users. This includes:

• Screening and verifying users before enabling their use of our services and at subsequent intervals, including through reviews, to help prevent the use of our services by unsafe users/riders.
• Using data from users' devices to help identify unsafe driving behavior such as speeding, harsh braking, acceleration, deviation from agreed routes, and informing them of safer driving practices.
• Using data from users' devices to verify on-time ride start and on-time arrival at pickup points by riders.
• Using device, location, profile, usage, and other data to prevent, detect, and combat fraud or unsafe activities.
• Using user ratings and feedback to encourage compliance with our ride etiquette and ride-sharing guidelines and as grounds for deactivating users with low ratings or who otherwise violate such guidelines.

3. Customer Support

CORIDE uses the information we collect to provide customer support, including to:

• Direct questions to the appropriate customer support personnel.
• Investigate and address user concerns.
• Monitor and improve our customer support responses and processes.

4. Research and Development

We may use the data we collect for testing, research, analysis, product development, and machine learning to improve the user experience. This helps us improve the safety and security of our services, prevent the misuse of our services for illegal or improper purposes, develop new features and products, and facilitate insurance and finance solutions in connection with our services.

5. Enabling Communications Between Users

For example, a user may message other ride participants or call another rider to confirm the pickup location, time, follow up on pending payments, negotiate ride fares, etc.

6. Marketing Activities

CORIDE may use the data we collect to market our services to our users. This includes sending communications about CORIDE services, features, promotions, sweepstakes, studies, surveys, news, updates, and events. We may use the data we collect to personalize the marketing communications (including advertisements) that we send, based on user location, past use of CORIDE services, locations and routes travelled, and user preferences and settings.

7. Non-Marketing Communications

CORIDE may use the data we collect to generate and provide users with receipts; inform them of changes to our terms, services, or policies; or send other communications that are not intended to market the services or products of CORIDE or its partners.

8. Legal Proceedings and Requirements

We may use the personal data we collect to investigate or address claims or disputes relating to the use of CORIDE services, or as otherwise permitted by applicable law, or as requested by regulators, government entities, and official inquiries.

9. Automated Decision-Making

We use personal data to make automated decisions relating to the use of our services. This includes:

• Automatic starting and ending of rides.
• Automatic matching of users based on preferences.
• Matching users based on location, route, time, company, and gender.
• Using ratings and feedback to determine whether users should continue using or be suspended from the CORIDE platform.
• Fraud detection.
• Using users' locations and communications to determine and apply cancellation fees, where applicable.

10. Generating Reports for Users' Companies

To encourage carpooling at the organizational level, we provide periodic reports to the relevant HR, EHS, Administration, Transport, and other departments of users' companies.

The formal reports sent by CORIDE to the relevant companies include relevant user data based on the organization's declaration. The data includes, but is not limited to, top ride providers, top ride participants, individual users' rides, distance travelled, CO₂ saved, amount saved, etc.

11. Mobile Number Verification

To comply with Truecaller's requirements for mobile verification, we would like to inform you that your mobile number will be used solely for verification purposes, and the necessary data will be shared with Truecaller. We prioritize the privacy and security of your personal information and handle it in accordance with this Privacy Policy.

Some of CORIDE's products, services, and features require that we share data with other users or at a user's request. We may also share data with our affiliates, subsidiaries, and partners for legal reasons or in connection with claims or disputes.

Given below are the details on when the information may be shared and for what purposes.

1. With Other CORIDE Users

User information is shown and shared with other CORIDE users so that you can connect and use the ride-sharing services. Every CORIDE user explicitly confirms that they will use the information provided by the CORIDE platform (such as other matching user profiles) only for using the services offered through the CORIDE platform. They will not use this information for any other purpose or share it with others.

The information shared may include:

• User's first name
• Rating
• Company they work for
• Verification status
• Number of rides completed
• Eco meter
• Route
• User's current location
• User's contact information (when permitted by the user)
• ETA and pickup and/or drop-off locations with other users

2. With the General Public

Questions or comments submitted through public forums such as CORIDE blogs and CORIDE social media pages may be viewable by the public, including any personal data included in those questions or comments.

3. With CORIDE Parent Company, Subsidiaries, and Affiliates

We share data with our subsidiaries and affiliates to help us provide our services or conduct data processing on our behalf. We may also disclose your personal information to our subsidiary, parent companies, affiliated legal entities, and businesses with whom we are under common corporate control.

Whenever personal information is disclosed under this section, we may also disclose your demographic information along with it on a non-anonymous basis. All our parent, subsidiary, and affiliated legal entities and businesses receiving your personal information or non-anonymous demographic information will comply with this Privacy Policy regarding their use and disclosure of such information.

4. With CORIDE Vendors, Service Providers, and Business Partners

CORIDE may partner with third-party verification, payment, and redemption providers to offer you a seamless ride-sharing experience. As you access and use our services, we collect information including, but not limited to, your phone number, email address, company information, device details, and IP address.

We may disclose certain information to integrated third-party services such as Simpl, PayTM, Amazon Pay, etc., to ensure the smooth operation of verification and payment systems. Please also refer to the respective third parties' privacy policies for more details.

Any third party with whom we share your personal information is authorized to use it in accordance with our contractual agreements and their own privacy policies, over which we have no control. You agree that we are not responsible or liable for any of their actions or omissions.

CORIDE provides data to vendors, consultants, marketing partners, research firms, and other service providers or business partners, including:

• Payment processors and facilitators
• Background check and identity verification providers
• Cloud storage providers
• Google, in connection with the use of Google Maps in CORIDE apps
• Facebook, in connection with the use of Facebook Business Tools in CORIDE apps and websites
• Marketing partners and marketing platform providers, including social media advertising services
• Data analytics providers
• Research partners, including those performing surveys or research projects in partnership with CORIDE or on CORIDE's behalf
• Vendors assisting CORIDE in enhancing the safety and security of its apps
• Consultants, lawyers, accountants, and other professional service providers
• Insurance and financing partners
• Corporate organizations, enterprises, and technology parks
• Any other partners relevant to CORIDE's business growth and service offerings

5. Business Transfer / Corporate Restructuring

CORIDE Mobility Pvt. Ltd. may, from time to time, undergo a corporate restructuring, merger, acquisition, demerger, amalgamation, slump sale, sale of business, sale of assets, financing transaction, or transfer of its business to an affiliate, subsidiary, successor entity, or any other third party (collectively, a "Business Transfer").

In the event of a Business Transfer, your Personal Data and other information relating to the business may be transferred to the acquiring, successor, or affiliated entity to ensure the uninterrupted operation, maintenance, support, enhancement, and continued provision of the Services.

Any acquiring or successor entity receiving such Personal Data shall:

• Continue to process the Personal Data only for the purposes described in this Privacy Policy or any other compatible lawful purpose permitted under applicable law.
• Implement and maintain appropriate technical, organizational, and administrative security measures to safeguard the Personal Data against unauthorized access, disclosure, alteration, loss, or misuse.
• Honour and comply with the privacy commitments, obligations, and protections set out in this Privacy Policy, as well as all applicable data protection and privacy laws.
• Where required by applicable law, notify users of any material changes relating to the transfer or subsequent processing of their Personal Data.

Where legally required, users will be provided with notice of any material changes to this Privacy Policy arising from such Business Transfer. Continued use of the Services after such notice becomes effective shall constitute acceptance of the updated Privacy Policy to the extent permitted by applicable law.

6. Advertisers / Advertisement Partners

We may review demographic data and use public information to enable other users to search for matching user profiles, determine whether user trip details fit other users' requirements, and communicate with users.

We may use demographic information to tailor the CORIDE platform and communications to users' interests. We may also share demographic information with advertisers on an anonymous and aggregated basis (without revealing user identity). This helps improve the relevance of advertisements.

Our sharing of demographic information with advertisers is anonymous. However, if you respond to an advertisement and voluntarily provide your personal information, the advertiser may be able to identify you as belonging to a particular demographic group.

7. For Legal Reasons or in the Event of a Dispute

CORIDE reserves the right to disclose user information to legal authorities, police, and government agencies as required by applicable law or official requests.

This includes sharing personal data with law enforcement officials, public health officials, government authorities, airports (where required), or other third parties as necessary to enforce our Terms of Service, user agreements, or other policies; protect CORIDE's rights or property or the rights, safety, or property of others; or in connection with claims or disputes relating to the use of our services.

8. With User Consent

CORIDE may share a user's personal data for purposes other than those described in this Privacy Policy if we notify the user and obtain their consent before such sharing.

We only collect and use personal data where we have lawful grounds to do so. These include processing user personal data to provide requested services and features, for purposes of CORIDE's legitimate interests or those of other parties, to fulfill our legal obligations, or based on user consent.

We collect and use personal data only where we have one or more lawful grounds for doing so. Such grounds may vary depending on where our users are located, but generally include processing personal data. CORIDE may collect and use personal data based on the user's consent. For example, we may collect personal data through voluntary surveys. Responses to such surveys are collected on the basis of consent and will be deleted once they are no longer necessary for the purposes for which they were collected.

A user who has provided consent for the collection or use of their personal data may revoke that consent at any time. However, the user may no longer be able to use any service or feature that requires the collection or use of that personal data.

Your CORIDE profile is protected using an OTP sent to your registered mobile number, ensuring that only you and authorized CORIDE employees have access to your account information. To maintain this protection, do not share your OTP with anyone.

CORIDE employees will never proactively contact you to request your OTP or any personal account information.

If you share a computer or mobile device with others, you should sign out of your CORIDE account and close the browser before another person uses the device.

CORIDE makes every effort to ensure that your information is secure within its systems. CORIDE has dedicated personnel responsible for maintaining this Privacy Policy and related privacy initiatives, periodically reviewing security practices, and ensuring that employees are aware of our security procedures.

However, CORIDE cannot guarantee the security of any information transmitted to us, and you do so at your own risk. CORIDE expressly disclaims any liability arising from unauthorized access to information submitted through the CORIDE platform.

CORIDE has implemented appropriate security measures to protect against the loss, misuse, and alteration of information under our control.

Your information may be transferred to and maintained on computer networks located outside your state or country.

The CORIDE platform may contain links to third-party websites offering value-added services. We are not responsible for the privacy practices of those websites. We encourage users to review the privacy policies of every website they visit that collects personally identifiable information.

This Privacy Policy applies solely to information collected through the CORIDE platform.