Privacy Policy

1. Who We Are

ThrottleShare is a technology platform operated by Deer Track Design LLC ("Company," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website at throttleshare.com and any associated services (the "Platform").

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, username, password, phone number, city, state, and ZIP code
• Profile Information: Bio, avatar, whether you are an owner or renter
• Listing Information: Vehicle details (make, model, year, VIN), photos, pricing, location, and rental rules
• Booking Information: Rental dates, delivery preferences, messages to owners
• Payment Information: Processed by Stripe; we do not store your full credit card number on our servers
• Waiver Information: Signed name, IP address, emergency contact name and phone number, signature timestamp
• Communications: Messages sent through the Platform between users

2.2 Information Collected Automatically

• Device Information: Browser type, operating system, device type
• Usage Data: Pages viewed, features used, search queries, booking activity
• IP Address: Collected for security, fraud prevention, and waiver documentation
• Cookies: Strictly-necessary session cookies to keep you logged in; optional analytics cookies via Google Analytics (GA4, with IP anonymization) set only after you accept via our cookie banner. You may reject optional cookies at any time, and we honor the Global Privacy Control (GPC) signal by default.

3. How We Use Your Information

We use your information to:

• Create and manage your account
• Facilitate rental transactions between Owners and Renters
• Process payments through our third-party payment processor (Stripe)
• Enable communication between users via our messaging system
• Document digital waiver signatures for legal compliance
• Improve the Platform, fix bugs, and develop new features
• Send service-related notifications (booking confirmations, status updates)
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

• Other Users: Your name, profile information, and listing details are visible to other users as necessary to facilitate rentals
• Stripe: Payment information is shared with Stripe for payment processing
• Google Analytics: Anonymized usage data for Platform improvement
• Cloudinary: Photos you upload are stored via Cloudinary's cloud service
• Law Enforcement: If required by law, subpoena, or legal process
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity

5. Data Security

We use commercially reasonable measures to protect your personal information, including encrypted passwords, HTTPS encryption, and CSRF protection. However, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. We retain waiver records, booking records, and transaction records indefinitely for legal compliance and dispute resolution purposes. You may request deletion of your account by contacting us, but we may retain certain information as required by law.

7. Your Rights

Depending on your location, you may have the right to:

• Access/Know: Request a copy of the personal information we hold about you and the categories of sources and recipients
• Correct: Request correction of inaccurate information
• Delete: Request deletion of your account and personal information, subject to legal retention requirements (waiver records, tax records, and fraud-prevention records are retained as required by law)
• Opt Out of Sale/Sharing: ThrottleShare does not sell or share your personal information as those terms are defined by the CCPA/CPRA. No opt-out is needed.
• Opt Out of Marketing: Unsubscribe from marketing emails via the link in any message, or email us
• Non-Discrimination: We will not deny you service, charge you different prices, or provide a lower quality of service for exercising any of the above rights
• Authorized Agent: California residents may designate an authorized agent to make a request on their behalf; we will require proof of the agent's written authorization

How to submit a request: Use our privacy request form, or email [email protected] with subject line "Privacy Request" and state which right you are exercising. We will respond within 45 days (CCPA/CPRA) or 30 days (GDPR/UK GDPR), extendable by an additional 45/60 days where permitted. We may need to verify your identity before acting on your request.

Shine the Light (CA Civil Code §1798.83): California residents may request information about our disclosure of personal information to third parties for direct-marketing purposes. We do not share personal information with third parties for their direct-marketing purposes.

EU/UK residents (GDPR/UK GDPR): In addition to the above, you have the right to data portability, to withdraw consent where processing is based on consent, and to lodge a complaint with your local supervisory authority. Our lawful bases for processing are (i) performance of our Terms of Service, (ii) legitimate interest in operating and securing the Platform, and (iii) compliance with legal obligations. We currently target only U.S. users and do not actively market in the EU/UK.

8. Children's Privacy

The Platform is not intended for use by anyone under the age of 18. We require date of birth at account creation and programmatically reject any signup indicating an age under 18. We do not knowingly collect personal information from children under 18. If a parent or legal guardian believes their child has provided us with personal information, contact [email protected] and we will investigate and, where confirmed, delete the information promptly.

9. SMS, Calls, and TCPA Consent

ThrottleShare does not send marketing SMS or autodialed/pre-recorded calls. Transactional text notifications (e.g., booking confirmations, owner replies) may be sent only after you affirmatively opt in by providing your phone number and enabling notifications in your account settings. You may opt out at any time by replying STOP to any message or by disabling notifications in your account.

We do not and will not use your phone number for marketing purposes. This Policy does not authorize any third party to send marketing SMS on our behalf.

10. Automated Decision-Making

We do not use personal information for automated decision-making that produces legal or similarly significant effects on users. Basic fraud-prevention signals (rate limiting, unusual-activity flags, Stripe risk scores) may temporarily hold a transaction for human review; you may contact us for clarification on any such hold.

11. Do Not Track & Global Privacy Control

Your browser may offer a "Do Not Track" signal or a Global Privacy Control (GPC) signal. We honor GPC as a valid opt-out-of-sale/sharing request where applicable law requires. Because we do not sell or share personal information as defined by the CCPA/CPRA, a GPC signal does not change how we handle your information — but we acknowledge receipt at the browser layer.

9. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of any third party. We encourage you to read the privacy policies of any third-party service you interact with.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform with a new "Last Updated" date. Your continued use of the Platform after any changes constitutes your acceptance of the updated Privacy Policy.