Via provides TransitTech solutions to power cost-effective, convenient, and equitable mobility across the globe. We build innovative software to enable our customers – cities, transit agencies, transport operators, school districts, universities, and corporations – to transform their legacy transportation systems into advanced digital networks.

We are committed to the principles of transparency and protecting our users’ privacy, and we want you to understand how we process and protect your personal information. This Privacy Notice explains how Via Transportation, Inc., and its affiliates around the world (collectively, “Via,” “we”, “us”, or “our”) collect, use, share, disclose, and otherwise process personal information, as well as how to exercise the choices and rights you have regarding your personal information.

This Privacy Notice applies to all users of our apps, websites, platforms, products or other services, unless covered by a separate privacy notice or policy. This Privacy Notice applies to you as a “User” of the “Via Services.” Users may include the following categories of individuals:
‍

When we use the term “Via Services,” we are referring to: (i) all Via websites (the “Via Websites”), (ii) mobile applications that Via makes available to Riders, Drivers, and Delivery Users (the “Via Apps”), and (iii) platforms, dashboards, content, products, and related interfaces, tools, and services that Via makes available to Enterprise Customers (the “Enterprise Platform”).

“Enterprise Customers” are cities, transit agencies, transport operators, school districts, universities, corporations, and other governmental or institutional customers which use the Via Apps and Enterprise Platform (together, the “Via Solution”) to establish, monitor, operate and/or manage transportation, delivery, and logistics networks. Enterprise Customers also include businesses or other entities which may use the Enterprise Platform in order to arrange for transportation, delivery, or logistics services for Riders and Delivery Users.

Enterprise Customers may purchase, subscribe, or otherwise use the Via Solution, including on a software-as-a-service (“SaaS”) basis, and with supplemental enabling services, which can include Driver services, vehicle supply and fleet management, customer support, marketing, service optimization, and other services provided either by Via or third parties (“SaaS + Services”). In arrangements where an Enterprise Customer acts as a data controller and Via acts as a data processor or service provider, we will collect, use, share, disclose, and otherwise process personal information of individuals using each Enterprise Customer’s services as directed by that specific Enterprise Customer. Please see the “Processor Notice to End Users” section for more details on how we process end user information on behalf of data controllers.

Please note that all corporate entities and organizations referenced throughout this policy are defined to include their affiliates and agents. For example, when we say that we share information with Enterprise Customers, we may share information with employees, agents, affiliates, consultants, or subcontractors designated or authorized by these Enterprise Customers to receive such information.

We may provide different or additional disclosures about residents of certain countries, regions, or states. If you are a resident of California, Nevada, the European Economic Area (“EEA”), or the United Kingdom (“UK”), please review the sections relevant to your particular jurisdiction in addition to consulting the primary Privacy Notice. 

User Account Information: To use the Via Services, you may be required to maintain an account with us, which may differ depending on whether you are a Rider, Driver, Delivery User, or Enterprise Platform User (together, these are “User Accounts”). We collect information from you whenever you create or update a User Account, or when one is created on your behalf by an authorized agent. 

Depending on your User category, and the type of Via Services you are using, the information you provide to create or update a User Account may include: your name, email address, telephone number, a photograph or profile image, login credentials, physical address, payment methods or banking information, driver’s license and other government identification documents or numbers (which may include social security numbers), insurance and vehicle-related information, demographic information, information about your employment or corporate affiliation (including your employer identification number, company, and/or title). 

You may also have an opportunity to provide additional information to us related to your User Account, including information about a disability, service animal, a guardian or personal care attendant, an emergency contact, a home or work address, or other information that may be relevant to your preferences or your use of the Via Services. In certain jurisdictions, and as permitted by law, we may also collect additional background check and identity verification information for Drivers, including drug and alcohol test records and results, driving history, and credentials or certifications required for the specific purposes for which you would be using the Via Services. In cases where an Enterprise Customer requests additional information from Users (e.g., eligibility for certain services), we may collect that additional information for the service provided to that Enterprise Customer, and we will do so in accordance with all applicable laws.

Note that we do not directly collect or store full debit or credit card numbers for Riders, Drivers, or Delivery Users. All payments are provided directly to third-party payment processors, and their use of your information is governed by their privacy notices. We may collect and maintain information about your payment methods and the last four digits of a payment card number.

‍Visitor Contact Information: If you are a Visitor and did not create a User Account, you may be given the opportunity to provide us with contact information or other characteristics, including your name, email address, physical address, telephone number, and occupational and employer information. We collect this information when you provide it to us, and we may use it for marketing purposes and to communicate with you, consistent with applicable law.

‍Your Communications with Us: Whenever you contact us (for example, by seeking support using your User Account, by responding to one of our messages, leaving feedback or ratings using the Via Services, or notifying us of an incident involving the Via Services), we will collect any information you provide (including the content of any attachments). We will also collect information which is apparent from your communication (for example, the email address or phone number from which you contacted us). If you communicate with us by telephone, we may record the audio of our communications, consistent with applicable law. In certain instances, we may provide you an opportunity to indicate your preferences for our future communications, and we will collect any preferences you indicate. Please note that our systems may record personal information that you type even if you do not ultimately submit it.

‍Survey Information: We may offer you the opportunity to participate in surveys, quizzes, contests, interviews, or promotions. You may be asked to provide personal information (including demographic information) to participate in such opportunities.

‍Device Information: We may collect information about the devices and browsers you use to access the Via Services. This may include your internet protocol (IP) address, operating system, browser type, browser language, screen resolution, the URL you entered and any relevant referring page/campaign, as well as information about the mobile devices you may use to access the Via Apps (including your hardware model, version, unique device identifiers, operating system, battery level and charging status, and screen size).

‍Usage Information: We collect information about how you interact with the Via Services, including your User Account transactions and automatically collected log data. Usage Information may include, but is not limited to, information about when and how you downloaded any of the Via Apps or created your User Account; your access and login activity; your preferences; details about any transportation or delivery services you request or participate in through the Via Services; your transactions; the specific components of the Via Apps, Via Website, or any other aspect of the Via Solution you visit or use, along with details about your views or use of these components; any alerts or communications we send you in connection with your use of the Via Services; and any errors that may have occurred during your use of the Via Services.

‍Communications Between Riders and Drivers: As noted in the “How We Share Or Disclose Personal Information” section, when we facilitate phone calls between Riders and Drivers, we may use a third-party service to enable these Users to call one another through masked phone numbers without revealing their personal contact information to the User they are contacting. If you make a phone call through this tool, we will collect metadata regarding your communications, including the date, start and end times of the call, and the unmasked phone numbers that participated in the call.

‍In-Vehicle Recordings: In certain cases, vehicles operated by Drivers may be equipped with devices that use video camera and/or sensor technology to record events inside and outside the vehicle. If such devices are installed by one of our service providers, we may collect video images of Drivers and Riders, along with telematics data that includes vehicle location, speed, braking, relative proximity to other vehicles, and collision events that may occur during your ride. In certain limited instances, and subject to notice or consent requirements in accordance with applicable law, we may also collect audio recordings. Certain devices may employ artificial intelligence to process images of a Driver in real-time in order to identify or alert the Driver to safety-related events such as indicators of distracted driving or unsafe distances between moving vehicles. To the extent that such images would be considered biometric information under applicable laws, the devices do not store or transfer such information and we do not disclose biometric information to third parties for any commercial purposes. In cases where we collect data from in-vehicle recording devices, we work with our service providers to provide notice to both Drivers and Riders that there is a recording device in their vehicle; such notice may be provided through physical signs on the exterior and/or interior of the vehicle.

‍Cookies and Third-Party Analytics Data: Like most providers of online services and platforms, we collect information about the electronic path you take to the Via Services, through the Via Services and when exiting the Via Services, and your usage and activity on the Via Services, such as the links, objects, products and benefits you view, click, or otherwise interact with. We and our third-party service providers and business partners may collect and store information through “cookies,” related technologies (such as pixels and web beacons), and third-party analytics services (such as Google Analytics). We collect this information for purposes that include remembering User preferences and settings, analyzing the effectiveness of certain features of our Via Services, and designing and delivering marketing campaigns. For details about how analytics information is automatically collected and used, as well as the choices you may have in relation to those practices, please review our Cookie Notice. 

Although we generally collect the personal information described above directly from you, we may also collect this information through service providers and other third parties that collect it on our behalf, as noted below. To learn about the privacy practices of any third party, please review their respective privacy notices.

‍Enterprise Customers: Enterprise Customers may provide us with your name, contact information, demographic information, and any of the other personal information that may be included in “User Account Information” (defined above) to enable us to offer the Via Services to you. For example, if an Enterprise Customer is a transit agency that wishes to provide the Via Services to paratransit passengers, we may receive Riders’ contact information and information about their eligibility for paratransit services through that Enterprise Customer. In another example, if the Enterprise Customer is a business that uses the Via Services to request transportation services for its employees, the Enterprise Customer may provide us with your name and contact information so that we may notify you of the status of your ride or send you other communications. Additionally, if you are an Enterprise Platform User who needs to access the Via Services to manage a transit network, your employer may provide your personal information to us so that we may authorize you as a User. 

‍Referrals: We may use referral promotions to encourage Riders, Drivers, or Delivery Users to tell friends, relatives, or others they know (“Referred Persons”) about the Via Services. We may ask Riders, Drivers, or Delivery Users to provide personal information about Referred Persons. We use personal information collected in connection with these referrals to communicate with the Referred Person, including to invite them to create a User Account. As explained in the “How We Share or Disclose Personal Information” section, we may also share certain personal information about a Referred Person with the Rider, Driver, or Delivery User who referred them.

‍Service Providers and Business Partners: We work with a wide range of third-party service providers and business partners who make it possible for us to make the Via Services available and also help us to improve the Via Services. These service providers include data storage and processing services, mapping services; customer support services; background check providers; fraud prevention, security, and troubleshooting services; communications services; translation and accessibility services; insurance providers; research and analytics providers; professional service providers; video recording and telematics service providers; payment processing services; and marketing and social media services. In certain contexts, we may work with business partners including vehicle leasing partners, telehealth services, in-vehicle advertising providers, and insurance providers, among others, which make products or services available to Users who wish to participate. These service providers and business partners may collect your personal information when you provide it to them or automatically when you interact with them, and they may share that information with us.

‍Social Media: If you decide to interact with Via through social media, we may collect personal information about you that you have chosen to make available to us through your social media account and social media platform settings. We use personal information collected in connection with your social media account and activity to communicate with you and better understand your interests and preferences.

‍Other Sources of Information: We may collect personal information from publicly available sources (including government records or public websites) or from other third parties (including data and mailing list providers, regulators, law enforcement, the media, or insurers), including to correct or supplement personal information we have collected about you from other sources.

We use the personal information that we collect through the Via Services, including through third-party sources, to:

Provide the Via Services: We use personal information, including location information, to make the Via Services available – both to you and to other Users.

Via does not sell your personal information to third parties. We take your privacy seriously, so when we do share information with third parties, we try to disclose anonymized or aggregated data wherever possible. We also take reasonable and appropriate steps to limit the scope of information that is disclosed and to ensure that the third party is required to comply with data protection laws. We may share and disclose personal information in the following ways: 

‍Within Via: Via’s employees and affiliates work together to provide the Via Services. We share your personal information among staff and affiliates which are responsible for various aspects of the Via Services. We limit access to your personal information to employees and affiliates that need access to this information in order to perform their job functions.

‍With Drivers, Riders, or Delivery Users: In order to help Users request, receive, and provide transportation or delivery services by using the Via Services, we may share certain categories of their personal information with Drivers, Riders, or Delivery Users for limited purposes. In addition to any information that you request or explicitly authorize us to disclose, we will share information with Drivers, Riders, and/or Delivery Users as follows:
‍

With Enterprise Customers: Where we provide the Via Services in connection with an Enterprise Customer, we may share Riders,’ Drivers,’ or Delivery Users’ personal information with that Enterprise Customer. This personal information may include names and contact information, geolocation information, payment information, driver’s license number, vehicle information, transaction history, customer support communications, and feedback. This information enables Enterprise Customers to assist in managing or monitoring aspects of the Via Services or to arrange for transportation or delivery services. Please note that Enterprise Platform Users may be able to view one another’s contact information and usage activity. For example, a transit planner using Remix’s planning tools may be able to share a proposed design with another colleague, and a customer support agent’s communications may be visible to other authorized Users of the Enterprise Platform. Additionally, an Enterprise Platform User with administrator privileges may be able to create User Accounts for other authorized Users of the same Enterprise Customer and view their usage activity.

‍With Service Providers: We may share some or all of your personal information with our service providers who perform services on our behalf. Some of the categories of our service providers include:
‍

With our Business Partners: We engage with business partners to support the Via Services and provide you with additional opportunities to use the Via Services. Business partners may include vehicle leasing partners, telehealth services, in-vehicle advertising providers, and insurance providers, among others. Note that the processing of your data will be subject to that business partner’s privacy notices. In California, we engage with any Business Partner as a service provider. We may also share aggregated demographic information with third parties interested in advertising on our online services, but this information would be designed not to be identifiable to a specific individual.

‍With Academic Researchers: We may share de-identified information with academic researchers. We take care to ensure that any information provided to researchers is disclosed confidentially and is not subject to re-identification.

‍With Payment Processors: We use payment processors, online payment system providers and billing agents to process transactions related to the services you arrange or provide through the Via Services.

‍In a Business Transaction, Transfer, or Reorganization: We may disclose personal information to a third party in connection with, or during negotiations of, a business transaction such as a merger, acquisition, joint venture, financing or sale of company assets, or in the event that a service we provide is transitioned to another provider. Personal information may also be disclosed in the event of insolvency, bankruptcy, or receivership.

‍Pursuant to Legal Obligations and Rights:  We may disclose personal information to third parties, such as law enforcement, government authorities (such as regulators or public health officials), issuers of licenses and permits (such as airport authorities), insurers, claimants, and other third parties as we determine to be necessary to (i) respond with civil, criminal, or regulatory inquiries and legal process (including search warrants, subpoenas, summonses, or court orders), (ii) comply with licensing, regulatory, and other legal obligations, (iii) enforce our policies and agreements, (iv) establish, exercise, or defend legal claims, or (v) protect the rights, safety and property of Via, third parties, or the public.

‍With Users’ Consent and at Their Request: With your consent or at your request, we may disclose your personal information publicly or to any third parties not otherwise mentioned in this Privacy Notice.

We retain your information for as long as necessary to provide you, other Users, and Enterprise Customers, where appropriate, with the Via Services, or as long as required to fulfill our legal obligations. We retain transactional information such as payments and information about rides or deliveries you make and receive to ensure we can perform legitimate business functions, such as accounting for tax obligations. If you request account deletion, we will delete your information as set forth in the “Updating or Deleting Your Information” section. 

Via takes the security of your personal information and our data very seriously. We take reasonable and appropriate measures designed to protect your personal information. Please remember that no method of storage or transmission is 100% secure and that we cannot guarantee the security of your information, including against unauthorized intrusions or acts by third parties. Additionally, you are solely responsible for protecting your User credentials and limiting access to your devices.

In connection with the Via Services, we may send you email messages, direct mail offers, SMS messages, push notifications or other communications, including telephone calls, regarding the Via Services.

You may ask us not to send you marketing communications by:
‍

If you request to opt out of marketing communications, please note that we may continue to send you non-marketing communications, which may include account verification and maintenance, status updates regarding specific transactions (such as transportation or delivery services you arranged using the Via Services), changes or updates to the Via Services or our ongoing business relationship, and any technical, administrative, legal, or security-related notices.

Please see our Terms of Use for additional information about how we communicate with you and your options with respect to these communications.

No part of the Via Services is directed to children and we do not knowingly collect or solicit personal information from children. When we use the word “children,” we refer to children under the age of 13 (or any other applicable age of consent for privacy purposes in relevant individual jurisdictions). If you are a child, please do not use the Via Services or otherwise provide us with any personal information either directly or by other means.

Protecting the privacy of children is important to Via. If we learn that we have collected personal information from a child without appropriate parental consent, we will take steps to delete it and may close the relevant account without notice. If you believe that a child has provided personal information to us, please contact us at [email protected].

When transferring your personal information across borders, we ensure compliance with all applicable legal requirements. Where appropriate, we rely on standard contractual clauses and closely monitor regulatory developments with respect to cross-border data transfer.

With respect to transfers of personal information from the EEA and the UK to the United States, we do not rely on the EU-US Privacy Shield framework as a means to comply with EEA or UK data protection requirements. We nonetheless are committed to upholding the Privacy Shield principles, and we have therefore continued to certify that we adhere to such principles. To view our Privacy Shield certification page and information about filing a complaint free of charge with our U.S.-based third-party dispute resolution provider, please visit https://www.commerce.gov/page/eu-us-privacy-shield. 

We provide Via Services to Enterprise Customers, including on a SaaS basis, with or without supplemental enabling services. Where the Enterprise Customer acts as the data controller, Via will act as a processor or service provider to the Enterprise Customer. Via will collect, use, share, disclose, and otherwise process personal information of its users only as directed by the Enterprise Customer under its contract with Via. In those instances, this Privacy Notice will not be determinative of how your information will be used by Via and we encourage you to consult the relevant Enterprise Customer’s privacy notices instead. 

Via is not responsible for the privacy or security practices of its customers, including Enterprise Customers, which may differ from those set forth in this Privacy Notice. Please direct your privacy inquiries – including any requests to exercise your data protection rights or to change your communication preferences – to the relevant Enterprise Customer. 

Please note that in the event that Via processes data on behalf of an educational agency or institution in the United States, Via will process student personal information in accordance with the Family Educational Rights and Privacy Act and its contractual arrangement with that entity.