Privacy Notice

Shift is operated by Scripty Solutions LLC("we", "us", "our"). This notice covers the Shift waitlist at shiftcars.app and the /shift pages of our other sites. It does not cover Scripty Pointer, which is a separate service with its own privacy notice.

Shift is offered in the United States only. We do not knowingly collect information from people outside the US.

Everything here comes from the form you fill in, except the last group.

• Contact details: your name, email address, and phone number if you give us one.
• Your ZIP code. This is the single most important field on the form. We use it to decide which city gets cars first.
• What you drive for: the delivery or rideshare apps you selected.
• Your current vehicle, if you told us, and how many days a week you would want a car, and how soon.
• Card details held at Stripe: we receive and store only the card brand, the last four digits, and whether it is credit, debit or prepaid. See section 5.
• How you found us: advertising campaign parameters in the link you arrived on, and the referring website. Collected automatically.

At this stage Shift is a waitlist, not a rental, so we do not ask for and do not hold any of the following:

• Your full card number, expiry date or security code. Those go directly to Stripe and never reach our servers.
• Your driver's license, license number, or a photograph of it.
• Your Social Security number or date of birth.
• A driving record, background check, or insurance history.
• Your street address. We ask for a ZIP code and nothing more precise.

If Shift launches in your area and you decide to rent, some of these will be needed at that point. You would be told what and why before anything is collected, and it would be covered by the rental agreement rather than by this notice.

• To choose where to operate. We group signups by ZIP code to find where demand is strongest. This is the main purpose.
• To contact you about a car in your area, and about your place in line.
• To size the offer, using the app mix, days per week and timing you gave us.
• To measure our advertising, so we know which campaigns produced real interest rather than clicks.
• To charge you later, but only after you have entered a separate rental agreement and agreed to a start date. We do not charge the card on file for anything before that. See the Terms.

We do not use your information to make any automated decision that produces a legal or similarly significant effect on you.

The card step is handled entirely by Stripe, Inc.on Stripe's own pages. Your card number is submitted to Stripe and is never transmitted to or stored on our systems.

Stripe authorizes the card to confirm it is valid and stores it against a customer record for future use. No amount is charged and no funds are held. Some banks briefly display a $0.00 or $1.00 authorization line that disappears on its own; this is the card being checked, not a payment.

Stripe processes this information as an independent controller under its own privacy policy, which is published at stripe.com/privacy. When you ask us to delete your information we also delete the customer record we created at Stripe, including the saved card.

Shift pages may load advertising measurement tags from Google (Google Ads) and Reddit. These set identifiers in your browser and report back that a signup happened, so we can tell which campaigns worked. They report the event, not the contents of your form.

These are separate from the tags used on Scripty Pointer and report to separate accounts. Your visit to Shiftis not reported to Pointer's advertising accounts, and vice versa.

You can limit this with your browser's tracking protection, an ad blocker, or the ad settings offered by Google and Reddit. Blocking them does not affect your place on the waitlist.

We do not sell your personal information and we do not share it for cross-context behavioral advertising beyond the measurement tags described above.

We share it with service providers who process it on our behalf:

• Stripe, Inc. — card collection, storage and any future payment.
• Google LLC — cloud hosting for our servers and database, and email delivery.
• Vercel Inc. — hosting and delivery of the website.

We may also disclose information if required by law, to enforce our Terms, or to protect the rights and safety of people or property. If the Shift pilot were sold or transferred, waitlist information could transfer with it, and you would be told before that happened.

We keep your waitlist entry while the pilot is running and while you might reasonably still want a car. If Shift does not launch in your area we delete your entry, including the Stripe customer record and saved card, within twelve months of your signup.

If we discontinue Shift entirely we delete all waitlist information within ninety days. You do not have to ask.

We may keep a minimal record of a deletion request, and anonymous aggregate counts that cannot identify you, for as long as we need them.

Whatever state you live in, you can ask us to show you what we hold about you, correct it, or delete it. Email customersupport@scriptypointer.com from the address you signed up with and say what you want. We will act on it within 45 days and usually within a few.

Deleting removes the saved card as well, so it is also how you take your card off file. You do not need a reason and nothing about your place in line changes if you ask us to explain what we hold.

Residents of California and of other states with comprehensive privacy laws have the right to know what personal information is collected and disclosed, to have it deleted, to have it corrected, to obtain a portable copy, to opt out of sale or sharing, and not to be discriminated against for exercising any of these rights. We do not sell personal information. We use the same process above for every state, so you do not need to work out which law applies to you.

Traffic to the site and to our API is encrypted in transit. Card data is held by Stripe, a PCI-certified payment processor, and not by us, which removes the most sensitive category of data from our systems entirely.

No system is perfectly secure, and we will not claim otherwise. If we become aware of a breach affecting your information we will notify you as required by law.

Shift is not for children. You must be at least 18 to join the waitlist. We do not knowingly collect information from anyone younger, and if we learn that we have, we delete it. If you believe a minor has given us information, email us at the address below.

If we change this notice we will update the date at the top. If a change materially affects your rights we will email the address you signed up with rather than relying on you to re-read the page.

Scripty Solutions LLC, operating Shift.
customersupport@scriptypointer.com