Privacy Policy

AutoMate ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, retain, and protect your personal information when you use the AutoMate platform, including our website (automatemates.com) and any associated mobile applications (collectively, the "Platform"). This Policy applies to all users of the Platform, including guests, registered Customers, and registered Service Workers. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. This Privacy Policy is incorporated into and forms part of our Terms of Service. Capitalized terms not defined here have the meanings given in our Terms of Service. If you are located in a jurisdiction with specific privacy laws (such as the California Consumer Privacy Act, or the General Data Protection Regulation in the European Union), additional rights and disclosures applicable to you are described within the relevant sections below.

We collect information in three primary ways: information you provide directly, information we collect automatically, and information from third parties. 2.1 Information You Provide Directly Account Registration. When you create an account, we collect your full name, email address, phone number, date of birth (to verify age eligibility), and account password. Profile Information. You may optionally provide a profile photo and, for Workers, information about your skills, service experience, and equipment. Identity & Background Verification (Workers). To verify Worker eligibility, we collect and process government-issued photo identification (such as a driver's license), and we share this information with third-party identity verification providers. Workers may also be subject to background check screening, during which we share identifying information with background check providers. Service Verification (Workers). Workers complete skill verification for each Service type, which may include quiz responses, photos of tools and equipment, and video demonstrations. These materials are collected and retained as part of the verification record. Payment Information. Customers provide payment card or other payment method details to complete transactions. Workers provide bank account or other payment details to receive earnings. Full payment card numbers are not stored on our systems; payment information is transmitted directly to and managed by our third-party payment processors. Communications. When you contact our support team, submit feedback, or otherwise communicate with us, we collect the content of those communications and any information you include. Vehicle Information (Customers). For certain Services, Customers may provide vehicle information such as make, model, year, license plate, and a description of the issue being addressed. Service Location. When you submit a Service Request as a Customer, you provide a specific service address or location. Worker Availability & Location Preferences. Workers may provide information about their preferred service areas or geographic availability. 2.2 Information Collected Automatically Usage Data. We automatically collect information about how you interact with the Platform, including pages visited, features used, time spent, actions taken, and referring URLs. Device Information. We collect information about the device you use to access the Platform, including device type, operating system, browser type and version, device identifiers, and crash data. IP Address & Approximate Location. We collect your IP address, which we use to infer your approximate geographic location (city or region level) for service availability displays, fraud prevention, and analytics. Real-Time GPS Location (Workers, During Active Jobs). With your consent, we collect precise real-time GPS location data from Workers while they are active on the Platform and have an active or in-progress Job. This location data is shared with the matched Customer for tracking purposes and is used by the Platform for routing and ETA estimates. Workers may disable location sharing when they go offline, but real-time location collection is required to accept and fulfill Jobs. Customer Location During Active Jobs. With consent, we may collect approximate location data from Customers during an active Job to improve ETA accuracy. Cookies & Similar Technologies. We use cookies, web beacons, pixel tags, and similar tracking technologies to operate the Platform, remember your preferences, analyze usage, and support marketing. See Section 7 for more information. Log Data. Our servers automatically record log data including IP addresses, timestamps, Platform requests, error logs, and referring/exit pages. 2.3 Information from Third Parties Identity Verification Providers. We receive verification results (pass/fail status and risk signals) from our identity verification partners. Background Check Providers. We receive background screening reports from third-party consumer reporting agencies, subject to applicable law, including the Fair Credit Reporting Act (FCRA). Payment Processors. We receive transaction confirmation data, payment status, and limited payment method information (such as last four digits of a card) from our payment processing partners. Social Login Providers. If you choose to register or log in using a third-party social account (such as Google or Apple), we receive basic profile information from that provider as authorized by you. App Stores & Device Platforms. If you download our mobile application through an app store, we may receive aggregate analytics data from those platforms. Analytics Partners. We may receive aggregated or de-identified data from third-party analytics providers to help us understand how the Platform is used.

We use the information we collect for the following purposes: 3.1 Operating the Platform - Creating and managing your account. - Matching Service Requests with available Workers. - Facilitating Service transactions, including payment processing and Worker payouts. - Providing real-time tracking and ETA updates during active Jobs. - Displaying your profile information (Workers) to matched Customers. - Sending transactional communications: booking confirmations, receipts, notifications about Job status. 3.2 Safety, Trust & Verification - Verifying Worker identity and eligibility. - Conducting background screening of Workers. - Verifying Worker skill and tool competency for each Service type. - Detecting, investigating, and preventing fraud, abuse, and policy violations. - Maintaining the integrity and safety of the Platform and its users. - Enforcing our Terms of Service. 3.3 Communication - Responding to your support requests, questions, and feedback. - Sending important account and service notifications. - Sending marketing or promotional communications, subject to your communication preferences (you may opt out at any time). - Notifying Workers of new available services, verification opportunities, and platform updates. 3.4 Platform Improvement & Analytics - Analyzing Platform usage to improve features, performance, and user experience. - Developing and testing new features and services. - Conducting internal research and analytics. - Training and improving algorithmic tools, including the pricing algorithm and matching algorithm, using aggregated and de-identified data. 3.5 Legal & Compliance - Complying with applicable laws, regulations, court orders, and government requests. - Protecting the legal rights and interests of the Company and its users. - Establishing, exercising, or defending legal claims. - Issuing required tax documents (such as IRS Form 1099-NEC) to Workers. 3.6 Personalization - Customizing your Platform experience based on your preferences and usage history. - Displaying relevant service options based on your location and history.

We do not sell your personal information. We share your information only as described below. 4.1 Between Platform Users (Customers and Workers) When a Service Request is matched with a Worker, we share limited information between the parties necessary to complete the Service: - Workers receive: Customer's first name, service address, vehicle information relevant to the Job, and contact information necessary to communicate about the Job. - Customers receive: Worker's first name, profile photo (if provided), service type and ETA, real-time location during transit to the service location, and Worker's rating. This sharing is limited to what is necessary to complete the specific Job and does not include full contact details or financial information of either party. 4.2 Service Providers & Vendors We share information with third-party companies that help us operate the Platform, including: - Payment processors (to process Customer payments and Worker payouts) - Identity verification providers (to verify Worker identities) - Background check providers (to screen Workers, subject to applicable law) - Cloud infrastructure providers (to host and store Platform data) - Analytics providers (to analyze Platform usage) - Customer support software providers - Email and communications providers - Push notification services These service providers are contractually obligated to use your information only as directed by us and in accordance with this Privacy Policy. 4.3 Legal Requirements & Safety We may disclose your information: - In response to valid legal process (subpoenas, court orders, government requests); - When we believe disclosure is necessary to comply with applicable law or regulation; - To protect the safety of any person, including investigating threats; - To investigate or address suspected illegal activity or policy violations; - To protect the rights and property of the Company. 4.4 Business Transfers If the Company is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you through the Platform or by email of any such change in ownership or control affecting your personal information, and we will require the acquiring entity to honor the commitments made in this Privacy Policy. 4.5 Aggregated or De-Identified Data We may share aggregated or de-identified data (data that cannot reasonably be used to identify you) with third parties for research, analytics, marketing, or other purposes without restriction. 4.6 With Your Consent We may share your information with third parties for purposes not listed here when you provide explicit consent to such sharing.

Location data is central to the AutoMate platform's operation. This section describes in detail how we handle location information. 5.1 Worker Location Data Active Mode. When a Worker is active on the Platform and in the process of completing a Job (from Job acceptance through Job completion), we collect precise GPS location data from the Worker's device. This data is: - Shared in real time with the matched Customer for tracking purposes; - Used to calculate ETAs and routing; - Recorded and retained as a record of Job activity. Offline / Inactive Mode. When a Worker goes offline or is not actively fulfilling a Job, precise GPS location collection ceases. We may retain last-known location for a short period for safety and support purposes. Permission Required. Workers must grant the Platform location permissions on their device to access and fulfill Jobs. Workers may revoke this permission at the device level, but doing so will prevent active Job fulfillment. 5.2 Customer Location Data Service Address. Customers provide a specific service address when submitting a Service Request. This address is shared with the matched Worker. Real-Time Location (Optional). With explicit consent, we may collect real-time Customer location during an active Job to improve ETA accuracy. Customers may decline this without affecting their ability to use the Platform. 5.3 Retention of Location Data Location data associated with completed Jobs is retained as part of the transaction record for a period of up to three (3) years, or as otherwise required by applicable law, for safety, fraud prevention, and dispute resolution purposes. 5.4 Third-Party Maps The Platform may integrate third-party mapping services (such as Google Maps) to display locations and routing. Your use of such mapping features is subject to the applicable third-party provider's privacy policy.

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, subject to the following: Account Information. Retained for the duration of your account and for a period of up to three (3) years following account closure, for legal, tax, fraud prevention, and dispute resolution purposes. Transaction Records. Records of completed Jobs, Service Fees, and Worker Earnings are retained for a minimum of seven (7) years to comply with financial recordkeeping and tax law requirements. Worker Verification Records. Identity verification and background check records are retained for the duration of Worker account activity and for a period of five (5) years following account deactivation, for legal compliance and safety purposes. Worker Skill Verification Materials. Verification materials (quiz results, tool photos, video demonstrations) are retained for the duration of Worker account activity and for two (2) years following account closure. Location Data. As described in Section 5.3. Support Communications. Records of support interactions are retained for two (2) years. Marketing Data. Marketing preferences and related data are retained until you opt out or request deletion, plus a reasonable period thereafter. Legal Holds. Data subject to a legal hold, litigation, or regulatory inquiry will be retained for the duration of that hold or proceeding. After the applicable retention period, we delete or anonymize personal information, except where longer retention is required by law.

We use cookies and similar tracking technologies to operate and improve the Platform. This section explains how. 7.1 Types of Technologies We Use Cookies. Small text files stored on your device that allow us to recognize you and maintain session state. Web Beacons / Pixel Tags. Small graphic files embedded in web pages or emails used to track user interactions and email opens. Local Storage. Browser-based local storage used to maintain preferences and session data. Mobile Device Identifiers. On mobile applications, we may use device-level identifiers (such as advertising identifiers) for analytics and fraud prevention. 7.2 Categories of Cookies Strictly Necessary. Required for the Platform to function. These cannot be disabled. Examples: session management, authentication. Functional. Enable enhanced functionality and personalization. Examples: remembering your language preference or service area. Analytics & Performance. Help us understand how the Platform is used so we can improve it. Examples: page view tracking, error reporting. We use Google Analytics and similar tools. Marketing. Used to deliver relevant advertising and track campaign effectiveness. Currently limited in use; we will notify you if this expands. 7.3 Managing Cookies Browser Controls. You can set your browser to refuse cookies or alert you when cookies are being sent. Note that disabling certain cookies may affect Platform functionality. Opt-Out Links. For interest-based advertising, you may opt out through the Digital Advertising Alliance (optout.aboutads.info) or Network Advertising Initiative (optout.networkadvertising.org). Mobile Controls. On mobile devices, you can limit ad tracking through your device settings. Cookie Preference Center. We may provide a cookie preference center within the Platform allowing you to manage non-essential cookies. 7.4 Do Not Track The Platform does not currently respond to "Do Not Track" browser signals because a uniform standard for responding to such signals has not been established. We will reassess this position as standards evolve.

The Platform may contain links to or integrate with third-party websites, services, or applications (such as mapping services, payment processors, or social media platforms). This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through the Platform. Key third-party services we integrate with (subject to change) may include: Payment Processing: We currently use one or more third-party payment processors. Your payment information is subject to their privacy policies. Identity & Background Verification: Workers are subject to screening by third-party providers. These providers operate as consumer reporting agencies under the FCRA where applicable and maintain their own privacy policies. Mapping & Location: We may integrate mapping services to display routing and location information. Push Notifications: We use third-party services (such as Firebase Cloud Messaging) to deliver push notifications. Analytics: We use analytics services to help us understand Platform usage. We are not responsible for the privacy practices or content of any third-party services.

We implement commercially reasonable technical and organizational measures designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include: - Encryption of data in transit using Transport Layer Security (TLS); - Encryption of sensitive data at rest; - Access controls limiting employee access to personal data on a need-to-know basis; - Regular security assessments and vulnerability monitoring; - Incident response procedures. No method of transmission over the Internet or electronic storage is perfectly secure. While we work to protect your information, we cannot guarantee absolute security. In the event of a security breach affecting your personal information, we will notify you as required by applicable law. You are responsible for maintaining the security of your account credentials. Do not share your password with anyone. If you suspect unauthorized access to your account, contact contact@automatemates.com immediately.

The Platform is not directed to individuals under the age of eighteen (18). We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18 without verifiable parental consent, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a child under 18, please contact us immediately at contact@automatemates.com.

Depending on your jurisdiction, you may have certain rights with respect to your personal information. This section describes those rights and how to exercise them. 11.1 General Rights (All Users) Access. You may request a copy of the personal information we hold about you. Correction. You may request that we correct inaccurate or incomplete personal information. Deletion. You may request that we delete your personal information, subject to legal retention requirements and safety and fraud prevention needs. Deletion requests do not apply to records we are required by law to retain. Portability. You may request that we provide your personal information in a structured, machine-readable format where technically feasible. Opt-Out of Marketing. You may opt out of marketing emails at any time by clicking the "unsubscribe" link in any marketing email or by contacting contact@automatemates.com. Note that you cannot opt out of transactional communications (such as receipts and Job notifications) while your account is active. Account Closure. You may close your account at any time. Closing your account does not automatically delete all associated data; certain data is retained as described in Section 6. 11.2 California Residents (CCPA / CPRA) California residents have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA): Right to Know. You have the right to know what personal information we collect, use, share, and sell about you, and to receive a copy of that information. Right to Delete. You have the right to request deletion of your personal information, subject to certain exceptions. Right to Correct. You have the right to request correction of inaccurate personal information. Right to Opt-Out of Sale/Sharing. We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. Right to Limit Use of Sensitive Personal Information. We collect certain categories of sensitive personal information (such as government ID data and precise geolocation). We use this data only as necessary to provide our services and as described in this Policy. Right to Non-Discrimination. We will not discriminate against you for exercising your CCPA rights. To submit a CCPA request, contact us at contact@automatemates.com or through the account settings page. We will respond within forty-five (45) days of a verifiable request, as required by law. Categories of Personal Information Collected (CCPA Disclosure): - Identifiers (name, email, phone, IP address, device identifiers) - Customer Records (payment information, verification data) - Protected Classification Information (age) - Commercial Information (transaction records) - Geolocation Data (precise Worker GPS, service addresses) - Internet / Electronic Activity (usage data, cookies) - Professional or Employment-Related Information (Worker skills, verification status) - Inferences (service preferences, activity patterns) 11.3 European Economic Area / UK Residents (GDPR / UK GDPR) If you are in the EEA or UK, your personal data is processed under the following legal bases: - Contract Performance: Processing necessary to fulfill our agreement with you (account management, Job facilitation, payment). - Legal Obligation: Processing required to comply with applicable law (tax records, background checks). - Legitimate Interests: Processing for fraud prevention, platform security, analytics, and marketing (where not overridden by your interests). - Consent: Processing based on your explicit consent (location data collection, marketing communications). You have the right to: access, rectification, erasure, restriction of processing, data portability, and to object to processing. You also have the right to lodge a complaint with your supervisory authority. To exercise your rights, contact contact@automatemates.com. 11.4 How to Submit a Privacy Request To exercise any of your privacy rights, please contact us at: contact@automatemates.com. We will verify your identity before processing requests. We will respond within the timeframes required by applicable law.

Workers are subject to background screening as a condition of platform access. This section provides additional disclosures required by the Fair Credit Reporting Act (FCRA). Before conducting a background check, we will provide you with a separate FCRA-required disclosure document and obtain your written authorization. Consumer Reporting Agency. We use one or more consumer reporting agencies (CRAs) to perform background screenings. The identity of the CRA(s) will be disclosed in the separate authorization form. Your FCRA Rights. You have the right to: (i) know if information in a consumer report was used to take adverse action against you (such as denial of Worker account access); (ii) know what is in your file at the CRA; (iii) dispute inaccurate or incomplete information; (iv) have inaccurate, incomplete, or unverifiable information removed or corrected; (v) seek damages from violators. Pre-Adverse and Adverse Action. If we intend to take adverse action based on your background check, we will provide you with a pre-adverse action notice including a copy of the report and a summary of your FCRA rights. After the required waiting period, we will provide a final adverse action notice if we proceed with the adverse action. Background Check Retention. Background check reports are retained as described in Section 6.

We may update this Privacy Policy from time to time to reflect changes in our practices, Platform features, or applicable law. When we make material changes, we will: - Update the "Last Updated" date at the top of this Policy; - Notify registered users via email or in-app notification; - For significant changes, seek renewed consent where required by law. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any changes constitutes acceptance of the updated Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: AutoMate Website: automatemates.com Email: contact@automatemates.com We take all privacy inquiries seriously and will respond promptly. For formal privacy rights requests, please include "Privacy Request" in the subject line of your email so we can route it appropriately. If you are a California resident and wish to make a CCPA request, please include "CCPA Request" in your subject line. If you believe we have not adequately addressed your privacy concern, you may have the right to lodge a complaint with your applicable data protection authority.