Scoop Technologies LLC d/b/a Scoop — Privacy Policy

SCOOP

Rideshare & Shared Shuttle Service

PRIVACY POLICY

Effective Date: April 18, 2026

The short version: Scoop collects only what it needs to run your ride and process your payment. We do not sell your personal information as the term “sale” is defined under the California Consumer Privacy Act, and we do not share it for cross-context behavioral advertising. We protect it with industry-standard security. You are in control.

1. Introduction

This Privacy Policy (the “Policy”) is issued by Scoop Technologies LLC, a California limited liability company doing business as “Scoop” (“Scoop,” “we,” “us,” or “our”). We are committed to protecting the privacy of everyone who uses our platform. This Policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have over it. This Policy applies to all users of the Scoop mobile application, website, and any related services (collectively, the “Platform”).

By creating an account, booking a ride, or otherwise using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree to the practices described herein, please do not use the Platform.

2. Information We Collect

We collect only the information that is necessary to provide you with safe, reliable, and high-quality transportation services. We do not collect data for its own sake.

2.1 Information You Provide Directly

Full Name: used to create your account and identify you to your driver.
Email Address: used for account creation, booking confirmations, receipts, and service communications.
Phone Number: used to send ride updates, driver coordination, and urgent service notifications. We do not use your phone number for marketing without your explicit consent. By providing your phone number and creating an account, you consent to receive transactional SMS messages from Scoop related to your account, bookings, and active rides. Standard message and data rates may apply. You may reply STOP at any time to unsubscribe from marketing messages; transactional messages will continue for the duration of your active bookings as necessary to provide service.
Payment Information: when you add a payment method, your card details are transmitted directly to Stripe, our PCI-DSS-compliant third-party payment processor. Scoop does not store, see, or retain your full card number, CVV, or expiration date. Scoop receives only a secure, anonymized token from Stripe that represents your payment method.
Group &** Booking Information: **the number of passengers in your group and any special accommodations you request.

2.2 Information Collected Automatically

Precise Location Data: with your permission, we collect your device location during active ride sessions to enable pickup coordination, real-time driver tracking, and accurate ETA calculations. Location collection stops when your ride ends. We do not track your location passively or in the background outside of an active booking.
Trip Data: pickup and drop-off addresses, ride timestamps, route information, and fare details associated with your rides.
Device &** App Data: **device type, operating system version, app version, and crash/performance diagnostics. This data is used solely to maintain and improve the Platform and is never linked to your personal identity for marketing purposes.
Usage Data: how you interact with the app (screens visited, features used) to help us improve usability. This data is aggregated and anonymized before analysis.

2.3 Information We Do NOT Collect

We do not collect the following, and we have no interest in doing so:

Social Security numbers or government-issued ID numbers
Health or medical information
Financial account information beyond what is necessary for payment processing
Contacts from your phone, photos, or any data unrelated to your use of the Platform
Persistent background location data outside of active rides

3. How We Use Your Information

Scoop uses your personal information only for the following purposes:

To provide transportation services: dispatching rides, connecting you with drivers, coordinating pickups, and calculating fares.
To process payments: transmitting payment data to Stripe to charge your confirmed fare and issue receipts.
To communicate with you: sending booking confirmations, ride status updates, driver arrival notifications, receipts, and important service announcements. We will not send you promotional marketing without your consent.
To ensure safety: monitoring for unsafe conduct, investigating complaints, and taking action to protect the wellbeing of riders and drivers.
To improve the Platform: analyzing aggregated and anonymized usage patterns to fix bugs, improve features, and enhance the rider experience.
To comply with the law: responding to valid legal process, complying with applicable regulations, and protecting our legal rights.

We will never use your personal information for purposes that are incompatible with those listed above without first obtaining your explicit consent.

4. Payment Information & Card Data

Scoop never sees, stores, or has access to your full credit or debit card number. All card processing is handled by Stripe, a certified PCI Level 1 payment processor.

When you enter your payment method in the Scoop app, that information is encrypted and transmitted directly to Stripe using industry-standard TLS encryption. Stripe returns to Scoop a secure payment token — a randomized string that represents your card — which is what Scoop stores and uses to charge your confirmed fare.

Stripe’s collection and use of your payment data is governed by the Stripe Privacy Policy, available at stripe.com/privacy. We encourage you to review it. Scoop has no ability to charge your card for any amount not explicitly authorized by you through the booking process or the Scoop Terms of Service.

Scoop retains payment records (amounts, dates, ride IDs) for accounting, tax compliance, and dispute resolution purposes. These records do not include raw card data.

Scoop does not sell, rent, trade, or otherwise transfer your personal information to third parties for their own marketing or commercial purposes. Full stop.

We share your information only in the following limited and necessary circumstances:

5.1 With Our Transportation Partner

To facilitate your ride, Scoop shares your first name, phone number, pickup location, and group size with the licensed third-party transportation provider assigned to your ride (“Transportation Partner”), solely for the purpose of completing your booked ride. Our Transportation Partner is contractually prohibited from using your information for any other purpose and must delete it promptly after the ride is completed, except to the limited extent retention is required for safety, insurance, regulatory, or dispute-resolution purposes.

5.2 With Payment Processors

Stripe receives your payment information as described in Section 4. We may also share transaction-level data (amounts, dates) with our banking and accounting service providers under confidentiality obligations.

5.3 With Service Providers

We use a limited number of third-party service providers to operate the Platform (such as cloud hosting, analytics, and customer support tools). These providers are permitted to access your data only as necessary to perform their services for Scoop and are bound by confidentiality agreements. They may not use your data for their own independent purposes.

5.4 For Legal Compliance & Safety

We may disclose your information if we have a good-faith belief that such disclosure is necessary to: (a) comply with a valid subpoena, court order, or other legal obligation; (b) enforce our Terms of Service; (c) protect the rights, property, or safety of Scoop, our users, or the public; or (d) detect, prevent, or address fraud, security, or technical issues. Where legally permitted, we will attempt to notify you of such requests.

5.5 In a Business Transaction

If Scoop undergoes a merger, acquisition, financing, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. We will notify you by email and/or a prominent notice on the Platform of any such change in ownership and any choices you may have regarding your information.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Policy, or as required by law. Specifically:

Account data: retained for the duration of your active account, plus three (3) years following account closure to comply with tax, legal, and dispute resolution requirements.
Trip data: retained for three (3) years following the date of the trip.
Payment records: retained for seven (7) years as required by applicable financial regulations.

When data is no longer needed, we delete or anonymize it securely.

7. Security

Scoop implements reasonable and appropriate administrative, technical, and physical safeguards designed to protect your personal information against loss, theft, unauthorized access, disclosure, alteration, or destruction. These include encryption of data in transit and at rest, access controls, secure authentication, periodic security review, and vendor security oversight.

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your personal information, we cannot guarantee absolute security.

8. Your Rights & Choices

You have meaningful control over your personal information. Depending on your location, you may have the following rights:

8.1 Access & Portability

You have the right to request a copy of the personal information Scoop holds about you, in a commonly used and machine-readable format where technically feasible.

8.2 Correction

You have the right to request that we correct inaccurate or incomplete personal information. You may update your name, email address, and phone number directly in the Scoop app at any time.

8.3 Deletion

You have the right to request deletion of your personal information. Upon a valid deletion request, we will delete or anonymize your data, subject to any legal obligation to retain certain records. To submit a deletion request, contact us at scoopsupport@scoopride.org.

8.4 Opt-Out of Marketing Communications

You may opt out of marketing communications at any time by using the unsubscribe link in any marketing email or by contacting us at scoopsupport@scoopride.org. Opting out of marketing will not affect transactional communications related to your active bookings.

8.5 Location Data

You may withdraw consent for location access through your device settings at any time. Please note that disabling location access will limit Scoop’s ability to facilitate pickup coordination and may affect the functionality of the Platform.

8.6 Account Closure

You may close your Scoop account at any time by contacting scoopsupport@scoopride.org Upon closure, we will cease active use of your personal data, subject to applicable retention obligations.

9. California Residents — CCPA Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”):

Right to Know: you have the right to know the categories and specific pieces of personal information we have collected about you, the categories of sources, our business purpose for collecting it, and the categories of third parties with whom we share it.
Right to Delete: you have the right to request deletion of your personal information, subject to certain exceptions.
Right to Correct: you have the right to request correction of inaccurate personal information.
Right to Opt-Out of Sale or Sharing: Scoop does not sell or share personal information for cross-context behavioral advertising. We have no “Sell or Share My Personal Information” link because we do not engage in these practices.
Right to Limit Use of Sensitive Personal Information: we do not use sensitive personal information for any purpose beyond those strictly necessary to provide the Platform.
Right to Non-Discrimination: we will not discriminate against you for exercising any of your CCPA rights. You will receive the same quality of service regardless of whether you exercise your privacy rights.

To exercise any of your CCPA rights, please contact us at scoopsupport@scoopride.org or by mail at the address in Section 13. We will verify your identity before processing your request and respond within forty-five (45) days as required by law.

10. Children’s Privacy

The Scoop Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18 years of age. By creating an account, you represent and warrant that you are at least 18 years of age. If an adult account holder books a ride for a group that includes minor passengers, the account holder is responsible for those passengers and consents, on their behalf and as their legal guardian or authorized representative, to any incidental collection of location and trip data that occurs during the ride. If we become aware that we have inadvertently collected personal information from a minor, we will promptly delete it. If you believe we may have collected information from a minor, please contact us immediately at privacy@scoopride.com.

11. Changes to This Privacy Policy

We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the Effective Date at the top of this Policy, by in-app notification, and/or by email to the address associated with your account. Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically.

12. Automated Privacy Signals & International Users

Global Privacy Control. Scoop recognizes and honors the Global Privacy Control (“GPC”) browser signal as a valid opt-out of sale and sharing of personal information under the CCPA, as required by the California Privacy Protection Agency regulations. Because Scoop does not sell personal information or share it for cross-context behavioral advertising, GPC signals do not change our data practices, but we will treat any such signal as a confirmed opt-out for record-keeping purposes.

International Users. The Platform is operated in the United States and is intended for users located in the United States. If you access the Platform from outside the United States, you acknowledge and consent to the transfer, storage, and processing of your personal information in the United States, which may have data protection laws different from those of your country of residence.

Aggregated and De-Identified Data. We may create aggregated, de-identified, or anonymized data from the personal information we collect, such that the data no longer identifies or can reasonably be linked to you. Such aggregated or de-identified data is not considered personal information under this Policy, and we may use and disclose it for any lawful business purpose.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us:

Scoop Technologies LLC

d/b/a Scoop — Privacy Team

San Luis Obispo County, California

278 Albert Dr, San Luis Obispo, CA 93405

Email: scoopsupport@scoopride.org

We are committed to resolving privacy concerns promptly and transparently. We will respond to all verified requests within thirty (30) days, or forty-five (45) days for CCPA requests.

Confidential Page 1 of 2