Privacy Policy
How we collect, use, and protect information from operators, drivers, and end-users of the Exaltis platform.
Last updated: May 7, 2026
Overview
Exaltis (“Exaltis,” “we,” “us,” or “our”) operates the Exaltis software platform and the website at exaltis.org (collectively, the “Services”). This Privacy Policy explains how we handle information collected through the Services. You do not need to provide personal information to visit our website, but some features require it.
By using the Services, you acknowledge that you have read this Privacy Policy and consent to the practices described here.
Information We Collect
Personal information you provide
When you register an account, contact us, or use Exaltis to dispatch and bill for ground-transportation services, we collect information such as your name, email address, phone number, business name, billing details, and customer or trip information you enter into the platform.
Information we collect automatically
We automatically collect technical information including IP address, device and browser type, operating system, app version, referring and exit pages, and clickstream data, in order to operate the Services and analyze usage trends.
Location data
If you enable location features (for example, driver location for dispatch and ETA), we collect precise location data from the device on which the Services are running. You may disable location collection in your device settings, which may limit some features.
How We Use Information
- To create and authenticate your account and provide the Services.
- To process transactions, send confirmations and receipts.
- To communicate with you about your account, service updates, and security.
- To send promotional materials when you have opted in.
- To analyze usage, improve the platform, and personalize your experience.
- To prevent fraud, enforce our terms, and comply with legal obligations.
How We Share Information
We share information with vetted third-party service providers that help us deliver the Services (for example, cloud hosting, email delivery, analytics, and payment processing). These providers are bound by contractual obligations restricting their use and disclosure of information. We do not sell personal information.
Payment processing
Payments are processed by Stripe. Exaltis does not store full credit-card numbers. Payment-card data is collected and stored by the payment processor under their own terms and security standards.
Business transitions
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
Legal requirements
We may disclose information when required by law, court order, or to protect the rights, property, or safety of Exaltis, our users, or others.
Cookies and Similar Technologies
We use cookies and similar technologies to keep you signed in, remember preferences, and measure how the Services are used. You can refuse cookies through your browser settings, but some features of the Services may not work properly.
Security
We follow generally accepted industry standards to protect the information we hold, including encryption in transit, access controls, and routine security review. No method of internet transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.
If we become aware of a security incident affecting your data, we will notify you in accordance with applicable law.
Data Retention
We retain personal information for as long as reasonably necessary to provide the Services, comply with our legal and contractual obligations, resolve disputes, and enforce our agreements.
Your Rights and Choices
You can access and update most account information from inside your Exaltis account. You may opt out of promotional email by following the unsubscribe link in the message; we may continue to send transactional messages relating to your account. You may also disable push notifications in your device settings.
To request a copy, correction, or deletion of personal information we hold, contact us at privacy@exaltis.org.
EU / UK Residents (GDPR)
If you are in the EU, EEA, or United Kingdom, you have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. We process personal data on the legal bases of consent, performance of a contract, and our legitimate interests in operating and improving the Services. Where Exaltis processes data on behalf of one of our operator customers, please direct your request to that customer; we will assist them as the data processor.
California Residents (CCPA / CPRA)
California residents may request the categories and specific pieces of personal information we have collected, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom it is shared. You may also request deletion of your personal information, subject to certain exceptions, and we will not discriminate against you for exercising these rights. We do not sell personal information, and our websites do not currently respond to “Do Not Track” browser signals.
Children’s Privacy
The Services are not directed to children under 13 (or under 16 in the EEA / UK). We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can remove it.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes will be communicated through the Services or by email where appropriate.
Contact Us
Questions about this policy or our data practices can be sent to privacy@exaltis.org. For general inquiries, see our contact page.