Privacy Notice Micab.

Welcome to Micab, thanking you for your preference, we invite you to keep the following in mind:

GENERALITIES

In accordance with the provisions of the "Federal Law on the Protection of Personal Data", declares Turismo Gargo, Sociedad Anónima de Capital Variable, to be a company legally constituted in accordance with Mexican laws, with address in Avenida Guadalupe number 151, local A, Colonia Chapalita, Municipality of Guadalajara, Jalisco and be the entity responsible for the processing of your personal data.

DESCRIPTION

This notice describes how Micab and its business partners collect and use personal data. It also applies to all users of our apps, websites, features and other services anywhere in the world.

Users/Customers: persons requesting travel or being transported, including those receiving services programmed by a third party.

Associated Drivers (Association in Participation): people who provide transport services with their own units to users individually or through partner companies.

Customers or business partners: persons who order or receive parcels, or other products and services.

DATA COLLECTION

Micab (Turismo Gargo, Sociedad Anónima de Capital Variable) collects the following personal data:

Data that users provide to Micab, such as the data they provide when they create their accounts.

Data that is generated when using our services, such as device details, location and use of apps.

Data from other sources, such as other account users or owners, business partners, general, insurance or financial solutions providers, and government authorities.

The following personal data is collected by or on behalf of Micab:

Data provided by users. Includes the following:

User Profile: We collect the data that users provide when they create or update their Micab accounts, which may include their full name, email, phone number, username and password, address, profile photo, bank or payment details (including those related to their verification), driver’s license and other government identification documents showing photo, gender, date of birth and document number. It also includes vehicle or associated driver insurance information, emergency contact details, user settings, and health or fitness certificates to provide services through the Micab apps.

This also includes gender or occupation (where necessary for certain Micab services or programs, such as Micab Cash or functions that allow women to serve or receive from other women).

We can use photos sent by users to check their identities using facial verification technologies.

Background and identity checks (associated drivers): This may include information such as driving history, criminal record (where permitted by law), license status, known aliases, previous addresses, and authorization to generate profits. This information may be collected by an authorized provider on behalf of Micab

Demographic data: We may collect demographic information about users, including through surveys aimed at them. We may also receive demographic data about users from third parties.

We may also derive demographic data from other information we collect from users when necessary to activate specific functions such as those that enable women to provide services to or receive from other women, We can deduce gender by name. In those cases, if necessary, users can change their gender through the app settings.

User Content: We collect the data that users send when they contact Micab customer support (including in Call Centers or via video conferencing), provide ratings or recognition to other users or establishments, or communicate with Micab in some other way. This may include comments, photographs, or other recordings that users collect, including audio or video, and send to customer support.

Travel Information: We collect travel itinerary information, including the times and dates of upcoming flight reservations.

Data created during the use of our services. Includes the following:

Location Data (Associated Driver/Participating Association): We collect accurate or approximate location data from drivers, to allow for travel or deliveries, enable travel tracking, deliveries or security functions, prevent and detect fraud and comply with legal requirements. Micab collects this information when the Micab app is running in the foreground (app open and on-screen) or in the background (app open, but not on-screen) on your mobile device.

Location data (users and customers): We collect accurate or approximate location data from users and customers to enable and improve the use of our apps, including to optimize the start of a trip or the collection of an order, facilitate deliveries, activate security functions and prevent and detect fraud.

We collect such data from users' mobile devices if we are authorized to do so.

Micab collects this information from the moment a trip or delivery is requested until it is completed (and this collection can be indicated with an icon or a notification on the mobile device, depending on the operating system) and each time the app is run in the foreground (app open and on-screen) on the mobile device.

Users and customers can use Micab apps without allowing accurate location data to be collected from their mobile devices. However, this may affect some features of Micab apps. If a user does not allow location data to be collected, they must manually enter the starting point address. In addition, location data collected from an associated driver during a trip will be linked to the user’s account, even if the user did not allow it to be collected, for the purpose of generating receipts, customer support, fraud detection or insurance or litigation related grounds.

Transaction Information: We collect transaction data related to the use of our services, including type of service requested or provided, date and time of delivery, order details, method and payment information (such as the amount of the transaction or the name and location of the trade), delivery details, amount collected and distance travelled. Also, if someone uses a "promo" code, we can associate their name with that person.

Usage Data: We collect information about how users interact with our services. This includes data such as date and time of access, app features or page views, app crashes and other system activities and browser type. We may also collect data about third-party services or sites that are used prior to interacting with our services, which we use for marketing purposes.

In some cases we collect this data through cookies, pixels, tags and similar technologies that create and maintain unique identifiers.

Device Data: We may collect data about devices used to access our services, including hardware models, IP address or other unique device identifiers, operating systems and versions, software, preferred languages, advertising and information identifiers of the mobile or movement networks of the device.

Communication Data: We allow users to communicate with each other and with Micab through Micab’s mobile apps and websites. We allow communication between driver and user partners, as well as between delivery partners and customers, through calls, messages or sending other files (usually without revealing their phone numbers). To provide this service, Micab receives data related to calls, SMS or other communications, such as your date, time and content. Micab may also use this information to provide customer support services (even to resolve disputes between users), for security reasons, to improve our services and features, and to perform analytics.

Data from other sources. These include:

Users who participate in our referral programs, when a user refers to another person, we receive the guest data.

Micab account holders who request services for or on behalf of other users, or who allow users to request or receive services through their accounts, including Micab account holders for B2B Enterprises.

Users or others who provide data regarding claims or conflicts.

Micab business partners through which users create or access their Micab account, such as payment providers, social media services, apps or websites that use the Micab APIs or whose APIs use Micab.

Micab business partners related to debit or credit cards issued by a financial institution associated with Micab, to the extent indicated in the terms and conditions of the card.

Providers who help us verify the identity of users, background information and compliance with requirements to generate profits, or who review users' accounts in connection with sanctions, money laundering or customer identification requirements.

Sources publicly available.

Marketing service providers or data distributors, whose information Micab uses for advertising or research purposes.

Public health, law enforcement and other government officials.

Micab may combine the information collected from these sources with other data it holds.

Use of personal data

Micab uses personal data to make transportation and delivery services, products and services reliable and convenient. We also use this data for the following:

● Improving the safety of users and services.

● Provide customer support.

● Carrying out research and development.

● Allow communication between users.

● Send marketing and other communications to users.

● Address issues related to legal proceedings.

Micab does not sell or disclose the user’s personal data to third parties for direct marketing purposes, unless users give their consent.

We use the personal data we collect for the following:

To provide our services. Micab uses this information to provide, customize, maintain, and improve services.

This includes using the data for the following:

Create or update accounts.

Activate transportation and delivery services, the use of location data to facilitate collection or delivery, functions that involve the exchange of information (such as rate division, function to share estimated arrival, ratings and acknowledgements) and accessibility features to simplify the use of our services to people with disabilities.

Process payments.

Track and share the progress of travel or deliveries.

Create Micab travel itineraries and offer related services, such as airport transfers, reservations or parcel deliveries.

Perform the operations needed to maintain our services, including troubleshooting software errors and operational issues, conducting analysis, testing and research, and tracking and analysing usage trends and activities.

Micab performs the above activities, including the collection and use of location data for the purposes of these activities, because they are necessary to comply with our obligations to users, in accordance with the Terms of Use or other agreements with users.

Use associated driver or delivery device data to detect unsafe driving behaviour, when speeding or braking and accelerating sharply, and report safer practices. We also use delivery device information to verify the type of vehicle they used to make deliveries.

Use device, location, profile, and usage data to prevent, detect, and fight fraud. This includes identifying accounts or fraudulent uses of our services, preventing the use of the services by driver partners or unauthorized delivery partners, verify the identity of users related to payment methods and preventing and combat unauthorised access to users' accounts.

Use ratings, reported incidents, and other feedback to promote compliance with our Community Guides and as a basis to disable accounts of low-rated users or those who otherwise violate such guides in certain countries.

Share information on serious safety incidents of associated drivers or delivery persons or on compliance with local regulations with third parties, including other companies that allow users to request or provide travel or delivery services, or intermediaries collecting such data for several carriers, in order to prevent drivers or dealers who may pose a risk to the platform or users from using Micab services. We may also share this data with third parties, including those affected by such incidents, if they caused the account to be deactivated.

Use ratings, usage and other data to avoid compatibility between users and driving partners with a higher risk of conflict.

Micab performs the above activities because they are necessary to comply with our obligations to users, in accordance with the Terms of Use or agreements with users, or to satisfy legitimate security-related interests of Micab or other parties, including users and the general public.

Customer support. Micab uses the information collected (which may include call recordings) to provide customer support, including to investigate and address user concerns and to monitor and improve responses and customer support processes.

Micab performs the above activities because they are necessary to comply with our obligations to users, in accordance with our Terms of Use or other agreements with users.

Research and development. We may use the data we collect in testing, research, analysis, product development, and machine learning processes to optimize the user experience. This allows us to improve the security of our services, make them more convenient and easy to use and develop new services and functions.

Micab performs the above activities because they are necessary to fulfill our obligations to users, pursuant to the Terms of Use or other agreements with users, to improve our existing services and functions, or satisfy the legitimate interests of Micab related to the development of new services and functions.

Activation of communications between users. In order for an associated driver to send an SMS or call a user to confirm a starting point, a user can contact a driver to retrieve a forgotten object, or a restaurant or delivery man can call a customer to provide information about your order.

Micab performs the above activities because they are necessary to comply with our obligations to users, in accordance with our Terms of Use or other agreements with users.

Marketing. Micab may use personal data to market our services to users. This includes sending communications to users about Micab’s services, features, promotions, sweepstakes, studies, surveys, news, updates, and events. We can do this through emails, text messages, push notifications, in-app communications and ads, and ads on third-party platforms.

We can also inform users about the products and services offered by Micab partners. We may provide recommendations, promotions, or announcements from Micab partners, based on your order history. Although we may inform users about the products and services offered by Micab partners, we do not sell or share personal data of users with such partners or others for direct marketing purposes, unless users consent.

We may use the information collected, including in conjunction with data from advertising partners, to customize and improve marketing communications, such as ads, that are displayed on Micab’s apps and websites, depending on the location, preferences and user settings and your use of Micab services. We share user data (the encrypted email address, usage information and device or user identifiers) with Facebook and TikTok to customize and improve our ads for Micab services.

Micab performs the above activities because they are necessary to satisfy its legitimate interest in providing information to users about the services and functions of Micab or its partners, or in accordance with the user’s consent.

Non-commercial communications. Micab may use the personal data we collect in order to generate receipts for users and provide them with them, inform them of changes to our terms, services or policies, or send other communications not intended to market the services or products of Micab or its partners.

Micab performs the above activities because they are necessary to comply with our obligations to users, in accordance with the Terms of Use or other agreements with users, or to satisfy Micab’s legitimate interest in providing information to users about events that may affect the use of its services.

Procedures and legal requirements. We may use personal data to investigate or address claims or disputes relating to the use of Micab services in order to comply with the requirements of applicable laws, regulations, licenses or operating agreements, or in accordance with a legal procedure or a governmental request, including the force of law and order.

Micab performs the above activities because they are necessary to satisfy Micab’s legitimate interests in investigating and responding to claims and disputes relating to the use of Micab’s services and functions, or to comply with applicable legal requirements

Automated decision-making

We use personal data to make automated decisions regarding the use of our services. It includes the following:

Activation of the dynamic price, by which the amount of a trip is determined by factors that vary constantly, such as estimated time and distance, intended route, expected transit and number of users and driving partners using Micab at a given time.

Allocation of driver partners available to users requesting services. Users will be assigned a driver based on availability, proximity and other factors, such as the probability of accepting a trip according to previous preferences or behaviors.

Use of driver location data and communications between users and drivers to identify cancellation rates obtained or triggered by fraud. If we determine through this information that a driver delays the start of a trip to cause a cancellation, we will not charge the user the cancellation fee and we will adjust the amounts that the driver will receive to waive the cancellation fee. To object to this setting, you must contact Micab customer support.

Use of associated driver data (such as location, rating and gender) and user information (such as rating, source and destination) to avoid compatibility that may increase the risk of conflict.

Micab performs the above activities because they are necessary to comply with our obligations to users, pursuant to the Terms of Use or other agreements with users, or to satisfy the legitimate interests of Micab, its users and third parties.

COOKIES AND THIRD PARTY TECHNOLOGIES

Micab and its partners use cookies and other identifying technologies in apps, websites, emails and online advertisements for the purposes described in this notice and in the Micab Cookie Notice.

Cookies are small text files that websites, apps, online media and ads store on your browser or device. Micab uses cookies and similar technologies for the purposes listed below:

Authenticate users, remember user preferences and settings, determine content popularity, provide and measure the effectiveness of advertising campaigns analyze traffic and site trends to understand online behaviors and the interests of people who interact with our services

We may also allow third parties to perform audience measurements and analytics services for us, present ads on our behalf over the internet, and track and inform us about the performance of these ads. These entities may use cookies, web beacons, SDKs, and other technologies to identify the devices people use when they visit our websites, as well as when they access other services and online sites.

Data exchange and dissemination

Some of the services and functions of Micab require that we exchange personal data with or on request from other users. We may also share that information with our affiliates, subsidiaries and partners for legal or claim-related reasons.

Micab may share personal data in the following ways:

With other users

This includes the following data:

Name, rating, starting point and destination of users with drivers.

Name users with other passengers on a shared trip. These users can also see the destination of other people on the same trip.

Name, delivery address and details of customer order with partner and agency or other trade.

In the case of drivers, we may share data with users, customers, including their name and profile photo, make, model, color, vehicle license plate and photo, location (before and during the trip), average rating provided by users, total number of journeys, time of use since registering as an associate driver, contact details (if permitted by the laws in force in the country concerned) and profile of the driver or delivery partner, including acknowledgements and other feedback from previous users.

We also provide users and customers with receipts that include information, such as the route map, breakdown of the amounts charged, and the name and photo of the driver or dealer. We also include other data on receipts if required by law.

In the case of those who participate in the Micab referral program, we share with the user who invited them certain personal data of those referred, such as the travel count, to the extent necessary to determine the promotion.

User order

This includes sharing data with the following parties:

Other people at the request of the user. We share a user’s estimated arrival and location with a friend, if requested, or a user’s travel details when dividing a rate with another person.

Micab’s business partners. If a user requests a service through a partnership or a promotional offer made by a third party, Micab may share data with such parties. This may include other services, platforms, apps or websites that are integrated with our APIs, vehicle providers or services, those with an API or service with which we integrate, Micab’s merchants or other business partners and their users in connection with promotions, contests or specialized services.

With the general public

Questions or comments from users that are sent through public forums, such as Micab’s blogs and social media, may be available to everyone, including personal data embedded in a user’s questions or comments.

With the Micab account holder

If a user requests a trip through an account that belongs to another person, we may share the travel details, including location data, with the account holder. This happens in the following cases:

A user uses their employer’s Micab Business account, such as when making scheduled trips through Micab Platform.

A user makes a trip scheduled by a friend or through a family profile.

With Micab affiliates and subsidiaries

We share personal data with our affiliates and subsidiaries to help us provide services or perform data processing tasks on our behalf. Micab processes or stores such data in the United States on behalf of its subsidiaries and international affiliates.

With Micab service providers and business partners

Micab provides personal data to suppliers, consultants, marketing partners, market research companies and other service providers or business partners. These include the following:

● Payment processors and facilitators.

● Background and identity verification providers.

● Cloud storage providers.

Google, in connection with the use of Google Maps in Micab apps (see Google’s privacy policy for more on how they collect and use data)

Marketing partners and marketing platform providers, including social media advertising services, advertising networks, external data providers and other service providers to achieve greater reach, understand our users better and measure the effectiveness of advertising.

Research partners, including those conducting surveys or research projects associated with or on behalf of Micab that assist Micab to improve the security and protection of its consulting apps, lawyers, accountants and other professional service providers financial and insurance partners.

External vehicle suppliers, including fleet and vehicle rental partners.

For legal reasons or in the event of a conflict.

Micab may share users' personal data if required by applicable law, regulation, license or agreement of operation, legal process or government request, or when disclosure is appropriate due to security or similar matters.

This includes sharing personal data with law enforcement, public health officials, other government entities, airports (if required by airport authorities as a condition to operate on their premises) or other third parties as necessary to enforce our Terms of Service, user agreements or other policies and to protect the rights or property of Micab, or the rights, security or property of others, or in the event of a claim or dispute regarding the use of our services. In the event of a dispute over the use of another person’s credit card, we may be required by law to share with the holder your personal data, such as travel or order information.

This also includes sharing personal data with third parties in the event of any merger with another company (or during negotiations), sale of business assets, consolidation or restructuring, financing, or purchasing all of our business or part of it from another company.

With consent

Micab may share a user’s personal data differently than described in this notice if we notify you and you agree to the exchange of information.

Maintenance and deletion of data

Micab retains user data for as long as is necessary to fulfill the purposes described above.

Users can request the deletion of their accounts at any time. Micab may retain user data after receiving a request to delete an account due to legal or regulatory requirements or for the reasons set out in this policy.

Micab retains user data for as long as is necessary to fulfill the purposes described above. This means that we keep the different categories of data for different periods, depending on the type of information, the level of the user they relate to and the purposes for which they are collected.

After receiving the request, Micab removes the user’s account and data, unless it is retained due to legal or regulatory requirements, for security or fraud prevention purposes, or because of a problem related to the user’s account, as outstanding claims or an unresolved claim or dispute. Because we are subject to legal and regulatory requirements related to drivers and deliverers, we will retain your account and data for a minimum of 7 years after a removal request. In the case of users and customers, their data is usually deleted within 90 days of the request, except when its storage is necessary for the reasons described above.

TRANSPARENCY OPTIONS

Micab allows users to access or control the data it collects, including through the following means:

● Privacy settings.

● Device permissions.

● Rating pages in the app.

● Marketing options.

Micab also allows users to request access to or copies of their data, changes, updates or deletion of their accounts, or for Micab to restrict the processing of their personal information.

Collection of location data (users and customers)

Users and customers can enable or disable on their devices the option that allows Micab to collect location data from their mobile devices. It is accessed through the menu Settings > Privacy > Location.

Share live location (users)

Users can enable or disable on the device the option that allows Micab to share real-time location data from their mobile devices with driver partners. It is accessed through the menu Settings > Privacy > Location.

Data to be shared with the emergency service

Notifications: Account and travel updates

Micab sends users travel status notifications and updates related to their accounts. These warnings are necessary to use the Micab app and cannot be disabled. However, users can choose the method by which they are received from the Settings > Privacy menu.

Notifications: Discounts and news

Users can allow Micab to send them push notifications with discounts and company news. You can turn them on or off from the Settings > Privacy menu in the Micab app.

Device permissions

Most mobile platforms (iOS, Android, etc.) defined certain types of device data that apps cannot access without the owner’s permission. These platforms have different methods for obtaining such permissions. Check the settings available on your device or check with your provider.

Ratings pages in the app

After each trip, drivers and users can rate each other with a scale from 1 to 5 marked with a star and a comment. The average of these ratings is associated with a user’s account and shown to the persons to whom they are provided or from whom they receive services. Drivers can see the ratings of users asking for a trip and vice versa.

This mutual rating system makes everyone responsible for their own behaviour, which helps to create a respectful and safe environment for users and drivers.

Requests for users' personal data

Micab offers users various ways to know, control and send questions and comments about Micab’s handling of their personal data.

Data access: Users can access their profile data and travel history through Micab’s apps or website. Users can also use the Explore Your Data feature to view an online summary of account information, such as the number of trips, rating, reward status, and how long they have been Micab users. Users can also request access to their data here.

Data change or update: Users can edit the name, phone number, email address, payment method and photo associated with their account through the Settings menu in the Micab apps or in the driver’s portal. Users can also request the updating or modification of their data here.

Data Deletion: Users can request the deletion of their account at any time through the menu Settings > Privacy in the Micab app or website (users and customers can do it here and drivers and deliverers, here)

Objections, restrictions and claims: Users may request that we stop using all or some of their personal data, or limit their use. This includes opposing the use of personal information that is based on Micab’s legitimate interests. Micab may continue to process data after such objection or request to the extent required or permitted by law.

In addition, depending on their location, users may have the right to file a claim regarding Micab’s handling of their personal data with the data protection authority in their country. Users in the European Union and South America can send such complaints to the data protection authorities of the country in which they live.

To prevent unauthorized access to your personal data and in order to ensure that the information is used for the purposes set out in this privacy notice, we have established various procedures in order to prevent the unauthorized use or disclosure of your data, allowing us to process them properly. Likewise, we inform you that your personal data can NOT be transmitted to be processed by persons other than this company. All your personal data are processed in accordance with the applicable legislation and in force in the country, therefore we inform you that you have the right at all times to access, rectify, cancel or oppose the treatment that we give to your personal data; right that you can assert through the Privacy Area in charge of the security of personal data in the Telephone (33) 21 06 62 71 or by means of your email: ayuda@mi.cab, soporte@mi.cab, socios@mi.cab.

This privacy notice may be modified by Turismo Gargo, Sociedad Anónima de Capital Variable, such modifications will be duly informed through our website www.mi.cab or in notifications via email and mobile applications.