Privacy Policy

This Privacy Policy explains how NextPhase Labs LLC, doing business as BLOC ("BLOC," "we," "our," or "us"), collects, uses, discloses, and protects information about you when you visit ridewithbloc.com, use our mobile application, or interact with our services. Please read this policy carefully.

1. Information We Collect

1.1 Information You Provide Directly

When you join our waitlist, create an account, or interact with BLOC, we may collect:

• Full name
• Email address
• Phone number
• Zip code, city, and state
• Driver's license information and driving history (for driver applicants)
• Vehicle information (make, model, year, license plate)
• Payment information (processed securely by third-party payment processors)
• Referral codes you provide or receive
• Any other information you choose to submit

1.2 Information We Collect Automatically

When you use our website or app, we automatically collect:

• IP address and general location data
• Browser type and version, operating system
• Pages visited, time spent, and referring URLs
• Device identifiers and mobile advertising IDs
• Cookie and tracking technology data (see Section 7 and our Cookie Policy)
• App usage data and crash reports
• Performance and error logs

1.3 Information from Third Parties

We may receive information about you from:

• Background check providers (upon platform launch — see Section 3.1)
• Payment processors (upon platform launch — see Section 3.1)
• SMS providers (upon platform launch — see Section 3.1)
• Analytics platforms (see Section 3.1)
• Referral partners

2. How We Use Your Information

We use the information we collect to:

• Operate, maintain, and improve the BLOC platform
• Process your waitlist registration and notify you of our launch
• Communicate with you via email and SMS about your account, our services, and promotional offers
• Verify your identity and eligibility to drive or ride with BLOC
• Process payments and subscriptions (upon platform launch)
• Conduct background checks for driver applicants (upon platform launch)
• Analyze usage trends and improve user experience
• Enforce our Terms of Service and other policies
• Comply with legal obligations
• Detect and prevent fraud, abuse, and security incidents

3. How We Share Your Information

3.1 Named Third-Party Service Providers

BLOC uses the following specific third-party service providers who may receive, process, or have access to your personal information as part of delivering our services. Each provider acts as a data processor on our behalf and is contractually prohibited from using your data for their own independent purposes.

Currently Active:

Provider	Role	Data They Receive	Their Privacy Policy
Cloudflare, Inc.	Infrastructure, CDN, DNS, security, and hosting (via Cloudflare Workers and Pages)	All web traffic, IP addresses, request metadata, and site content passing through our infrastructure	cloudflare.com/privacypolicy
Google LLC (Google Analytics / Google Cloud)	Web analytics and cloud infrastructure	Page views, session data, user behavior, IP addresses (anonymized), device and browser information; Google Cloud stores and processes platform data	policies.google.com/privacy
PostHog, Inc.	Product analytics and event tracking	User events, session recordings, feature usage, page views, browser and device identifiers	posthog.com/privacy
Vercel, Inc.	Frontend hosting and deployment	Web traffic, IP addresses, request logs, and site assets served through Vercel's infrastructure	vercel.com/legal/privacy-policy
Resend, Inc.	Transactional and marketing email delivery	Email addresses, email content, send/open/click tracking metadata	resend.com/legal/privacy-policy

To Be Implemented Upon Platform Launch:

Provider	Role	Data They Will Receive	Their Privacy Policy
Stripe, Inc.	Payment processing and subscription billing	Payment card information, billing address, transaction history (BLOC does not store raw card data)	stripe.com/privacy
Twilio, Inc.	SMS communications	Phone numbers, message content, delivery metadata	twilio.com/en-us/legal/privacy
Checkr, Inc.	Driver background screening	Full name, date of birth, Social Security Number, driver's license number, driving history	checkr.com/privacy-policy

We will update this policy to reflect the active status of launch-phase providers before they go live. We will notify you of material changes at least 14 days in advance.

3.2 A Note on Infrastructure Providers

Because BLOC's website is hosted on Vercel and our backend runs on Cloudflare Workers and Pages, essentially all data you transmit to BLOC passes through one or both of these providers' infrastructure before reaching our application layer. This is standard for modern web applications. Both providers maintain robust security, data processing agreements, and compliance programs.

Google Cloud is used for backend data storage and processing. Data stored in our platform databases and services resides within Google Cloud's infrastructure.

3.3 Between Drivers and Riders

When a trip is matched (upon platform launch), limited information is shared between Drivers and Riders to facilitate the ride, including first name, vehicle information, and real-time location during the active trip period only.

3.4 Legal Requirements

We may disclose your information if required by law or valid legal process, including court orders, subpoenas, or law enforcement requests.

3.5 Business Transfers

If NextPhase Labs LLC is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you of any such change.

3.6 With Your Consent

We may share your information for any other purpose with your prior consent.

3.7 We Do Not Sell Your Data

BLOC does not sell, rent, or trade your personal information to third parties for their own marketing purposes.

4. Your Rights and Choices

4.1 California Residents (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of your personal information
• Opt out of the sale of your personal information (we do not sell data)
• Non-discrimination for exercising your privacy rights

To exercise these rights, contact us at [email protected].

4.2 All Users

Regardless of location, you may:

• Update or correct your account information by contacting us
• Opt out of marketing emails by clicking "unsubscribe" in any email
• Opt out of SMS messages by replying STOP to any text message
• Request a copy of your personal information
• Request deletion of your account and associated data

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Upon deletion request, we will delete or anonymize your information within 30 days, except where legally required to retain it.

6. Data Security

We implement industry-standard safeguards including:

• Encrypted data transmission (TLS/HTTPS) enforced at the Cloudflare and Vercel layers
• Encrypted storage within Google Cloud infrastructure
• Access controls limited to authorized personnel
• Regular security assessments and monitoring via Cloudflare's security tooling

No method of transmission or storage is 100% secure and we cannot guarantee absolute security.

7. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar technologies to maintain sessions, remember preferences, analyze website traffic, and measure product usage. Tools currently in use include Google Analytics and PostHog. For full details on what each tool collects, how to opt out, and how to manage your preferences, see our Cookie Policy.

8. Children's Privacy

BLOC's services are not directed to individuals under 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by email or prominent website notice at least 14 days before material changes take effect. We will update the named provider tables in Section 3.1 before activating any new data processor.

11. Contact Us