Privacy Policy

This Policy applies to personal information collected through ALTR's website, applications, vehicle access programs (Drive, Direct, Fleet, Host), and Turo listings of ALTR-owned vehicles. By using our Services you consent to the practices described here.

• Identity: full name, date of birth, photo / selfie, signature
• Contact: email, phone number, mailing address, emergency contact
• Government IDs: driver's license number, expiration, state, SSN (last 4) for background checks where permitted
• Insurance: carrier, policy number, use type, declarations page
• Driving / Platform Data: rideshare or delivery platform approvals, MVR results, accident history
• Payment: last four digits of card, billing address, transaction history (full card data is held by our PCI-compliant processor, not ALTR)
• Vehicle Telemetry: GPS location, mileage, speed, hard-braking, ignition, fault codes, dash cam footage where equipped
• Accident Claim Data: photos, descriptions, other-party info, police report details submitted via /report-accident
• Device & Usage: IP address, browser type, device identifiers, pages viewed, referring URL, timestamps
• Communications: messages, call recordings (where lawful and disclosed), and SMS history with ALTR

• Directly from you (applications, forms, uploads, support requests)
• Automatically from your devices and our vehicles (telemetry, cookies, logs)
• Third parties: background check vendors, MVR providers, insurance carriers, payment processors, Turo, and law enforcement when applicable
• Publicly available sources for fraud and identity verification

• Verify identity, age, eligibility, and licensing
• Run background checks and ongoing MVR monitoring
• Provision and manage vehicle access, deposits, and weekly billing
• Locate, recover, and maintain vehicles via telematics
• Investigate accidents, damage, theft, and insurance claims
• Process toll, citation, and parking pass-through charges
• Provide customer support and respond to inquiries
• Send transactional notices, safety alerts, and (with consent) marketing
• Detect fraud, enforce our Terms, and meet legal and regulatory obligations
• Improve our Services through analytics and product research

We share personal information only as described below. We do not sell your personal information for money.

• Service providers who process data on our behalf under contract (background checks, payments, telematics, hosting, analytics, communications)
• Insurance partners and carriers for underwriting, claims, and recovery
• Turo when you book through their platform — Turo's own privacy policy governs that relationship
• Vehicle hosts limited to information necessary to manage their listed vehicle
• Law enforcement and regulators in response to lawful requests, subpoenas, or to protect rights, property, or safety
• Successors in connection with a merger, acquisition, financing, or sale of assets
• With your consent for any other purpose disclosed at the time of collection

We retain personal information for as long as needed to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. Typical retention periods include:

• Active accounts: for the duration of the relationship plus 7 years
• Background-check results: per FCRA and vendor minimums (typically 7 years)
• Accident & claim records: minimum 7 years from incident close
• Financial / tax records: at least 7 years
• Telematics & GPS: rolling 90 days for routine data; longer where tied to an incident or legal hold
• Marketing preferences & suppression lists: retained indefinitely to honor opt-outs

When information is no longer needed, we delete or de-identify it.

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, least-privilege permissions, and vendor security reviews. No method of transmission or storage is 100% secure; you use the Services at your own risk.

Submit requests to privacy@drivealtr.com. We may need to verify your identity before fulfilling a request and will respond within the timeframe required by applicable law.

California residents have the right to know what personal information we collect, the categories of sources, the purposes for collection, the categories of third parties we share with, and to request deletion or correction. You may also opt out of any "sharing" of personal information for cross-context behavioral advertising. We do not sell personal information for monetary value. To exercise your rights, email privacy@drivealtr.com. You may designate an authorized agent to act on your behalf.

You can control cookies through your browser settings. Disabling cookies may break parts of the Services such as login and saved preferences. We honor browser-level Global Privacy Control (GPC) signals where required by law.

You may opt out of marketing emails by clicking the unsubscribe link in any message, and SMS by replying STOP. Transactional messages (account, safety, billing, recall) cannot be opted out of while you are an active user. See Section 10–11 of the Terms & Conditions for our TCPA and SMS terms.

We may update this Policy from time to time. The "Last updated" date above reflects the most recent version. Material changes will be communicated via email or in-app notice. Continued use of the Services after the effective date constitutes acceptance.

This Policy is provided as a starting framework and must be reviewed by qualified counsel before relying on it in any binding capacity.