Effective Date: July 16, 2026 Last Updated: August 21, 2026
Thizz LLC, doing business as "Out the Box Productions," a Texas limited liability company ("Thizz," "we," "us," or "our"), operates the Thizz.ai technology platform (the "Platform"). This Privacy Policy explains how we collect, use, disclose, retain, and protect your personal information when you use our Platform.
We are committed to protecting your privacy and complying with all applicable privacy laws, including the Texas Data Privacy and Security Act, the Texas Identity Theft Enforcement and Protection Act, and all applicable federal privacy laws. Thizz LLC is a technology platform and NOT a Transportation Network Company, and this classification informs our data collection and privacy practices.
We collect information that you voluntarily provide when you register for and use the Platform: (a) Account Information: Full legal name, email address, phone number, date of birth, and a profile photo; (b) Driver-Specific Information: Driver's license number, license state, vehicle make, model, year, color, license plate number, insurance carrier name, policy number, and insurance policy documentation; (c) Payment Information: Payment method details processed through Stripe (we do not store your full credit card number on our servers); (d) Location Information: Your current location when you use the "Locate Me" feature, and your origin and destination addresses when you post or search for rides; (e) Trip Preferences: Your preferred pickup type, seat requirements, recurring schedule, and notes; (f) Communications: Messages you send to other Users through the Platform, and communications you send to our support team.
We automatically collect certain information when you use the Platform: (a) Device Information: Browser type, operating system, screen resolution, device fingerprint, and IP address; (b) Usage Data: Pages visited, features used, time spent on the Platform, and click data; (c) Location Data: Real-time GPS coordinates when you enable location services and use the live map feature; (d) Cookies and Tracking Technologies: Session cookies, authentication tokens, and analytics cookies.
We collect information from third-party services: (a) Identity & Document Verification: Driver's license and insurance verification results from third-party verification services; optional AI face-verification results (selfie-to-ID match score) from a configured identity vendor (Onfido, Jumio, or AWS Rekognition); no criminal background check data is collected for carpool or vanpool; (b) Payment Processors: Payment confirmation and transaction status from Stripe; (c) Telephony Provider (Twilio): Call SID, proxy number, and call-recording metadata for masked-call audit logging, when call masking is enabled and used.
We use your personal information for the following purposes:
(a) Creating and managing your account; (b) Matching drivers with riders for carpooling arrangements; (c) Processing payments through Stripe; (d) Facilitating communication between Users; (e) Providing real-time location tracking and live map features; (f) Sending booking confirmations, reminders, and trip updates.
(a) Verifying driver's licenses and insurance documentation (Thizz does NOT conduct criminal background checks for carpool or vanpool under Texas Occupations Code §2402.001 / §2402.111); (b) Verifying driver's licenses and insurance; (c) Detecting and preventing fraud, abuse, and unauthorized activity; (d) Investigating and responding to safety reports and complaints; (e) Complying with legal obligations and law enforcement requests; (f) Enforcing our sex offender prohibition, non-discrimination policy, and anti-hate speech policy.
(a) Analyzing usage patterns to improve the Platform's features and matching algorithm; (b) Developing new features and services; (c) Troubleshooting technical issues and debugging; (d) Measuring the effectiveness of our marketing and communications.
(a) Complying with Texas Occupations Code carpooling regulations; (b) Maintaining records for tax and regulatory purposes; (c) Responding to law enforcement requests and court orders; (d) Enforcing our Terms of Service.
We do NOT sell your personal information to any third party. We share your information only in the following circumstances:
When you participate in a carpooling arrangement, we share certain information with the other party: (a) Drivers see the rider's name, profile photo, pickup location, destination, and phone number (if provided); (b) Riders see the driver's name, profile photo, vehicle make/model, license plate, and rating; (c) Both parties see each other's estimated arrival time and trip details. We do NOT share your email address, payment information, or background check results with other Users.
We share information with third-party service providers who help us operate the Platform: (a) Stripe — Payment processing; (b) Identity Verification Vendors — Optional AI face verification (selfie + ID document images transmitted to the configured vendor for comparison); (c) Twilio — Call masking proxy routing and optional call recording; (d) Cloud hosting providers — Data storage and processing; (e) Analytics providers — Usage analytics; (f) Communication providers — Email and SMS notifications. All service providers are contractually obligated to protect your information and use it only for the purposes for which we share it.
We may disclose your information when required by law: (a) In response to a court order, subpoena, or other legal process; (b) To law enforcement agencies when we believe it is necessary for safety or legal compliance; (c) To protect the rights, property, or safety of Thizz LLC, our Users, or others; (d) In connection with an investigation of suspected fraud or illegal activity.
In the event of a merger, acquisition, asset sale, or other business transaction, your information may be transferred to the acquiring entity, subject to the protections of this Privacy Policy.
We retain your personal information for as long as your account is active and for a period of time thereafter as required by law or for legitimate business purposes: (a) Active Accounts: All account information is retained while your account is active; (b) Trip Records: Trip records are retained for seven (7) years for tax and regulatory compliance; (c) Verification Records: Driver's license and insurance verification records are retained for the duration of your driver account plus three (3) years. No criminal background check data is collected or retained for carpool or vanpool; (d) Payment Records: Retained for seven (7) years as required by tax law; (e) Deactivated Accounts: Account information is retained for ninety (90) days after deactivation, then permanently deleted, except for records required by law.
Location data is essential for the Platform's core functionality: (a) Ride Matching: We use your origin and destination to match you with nearby drivers or riders; (b) Live Map: When you enable location services, we display your real-time location on the map; (c) Trip Tracking: During an active trip, your location is shared with the other party for pickup coordination and safety; (d) Driver Tracking: Live vehicle positions are displayed on the map for available drivers.
We collect location data only when: (a) You actively use the "Locate Me" feature; (b) You have an active trip and are sharing your location for pickup/tracking; (c) You are a driver with your vehicle marked as available on the live map. We do NOT track your location in the background when the app is closed or minimized. Location data is only collected during active use.
Real-time location data is processed in real-time and is NOT stored permanently. Historical location data from completed trips is retained for thirty (30) days for safety and dispute resolution, then permanently deleted.
We collect minimal payment information: (a) The type of payment method (e.g., credit card brand); (b) The last four digits of your card number; (c) Transaction confirmation and status from Stripe.
We do NOT collect or store: (a) Full credit card numbers; (b) Card CVV codes; (c) Bank account numbers (unless you provide them for payout purposes); (d) Full payment credentials. All payment processing is handled by Stripe, a PCI-DSS compliant payment processor. Your full payment information is handled exclusively by Stripe and is subject to Stripe's privacy policy.
We use cookies and similar tracking technologies for: (a) Authentication: Maintaining your login session; (b) Security: Preventing fraud and unauthorized access; (c) Functionality: Remembering your preferences and settings; (d) Analytics: Understanding how you use the Platform. You can control cookies through your browser settings. However, disabling cookies may affect the functionality of the Platform.
We implement reasonable and appropriate technical, administrative, and physical safeguards to protect your personal information: (a) Encryption: All data in transit is encrypted using TLS/SSL. Sensitive data at rest is encrypted; (b) Access Controls: Access to personal information is restricted to authorized personnel with a legitimate business need; (c) Regular Audits: We conduct regular security audits and vulnerability assessments; (d) Incident Response: We maintain an incident response plan for data breaches; (e) Third-Party Security: We require our service providers to maintain appropriate security measures. Despite these measures, no system is completely secure. We cannot guarantee the absolute security of your information.
Under Texas law and applicable federal law, you have the following rights regarding your personal information:
You have the right to request a copy of the personal information we hold about you.
You have the right to request correction of inaccurate or incomplete personal information.
You have the right to request deletion of your personal information, subject to legal retention requirements.
You have the right to opt-out of the sale of your personal information. We do not sell your personal information, so this right is not applicable but is provided for your awareness.
We will not discriminate against you for exercising any of your privacy rights.
To exercise any of these rights, contact Thizz LLC through the Platform's support tools. We will respond to your request within forty-five (45) days.
The Platform is not intended for or directed to children under eighteen (18) years of age. We do not knowingly collect personal information from children under eighteen (18). If you believe we have collected information from a child under eighteen (18), please contact us immediately, and we will take steps to delete such information.
We comply with the following Texas privacy laws:
We comply with the Texas Data Privacy and Security Act (Texas Business and Commerce Code §521.053) by: (a) Implementing reasonable security measures to protect personal information; (b) Notifying affected individuals of data breaches in accordance with the law; (c) Providing consumers with access to their personal information; (d) Not selling personal information.
We comply with the Texas Identity Theft Enforcement and Protection Act by: (a) Maintaining reasonable procedures to protect personal identifying information; (b) Properly destroying records containing personal identifying information; (c) Notifying individuals of breaches of security in a timely manner.
We comply with all other applicable Texas privacy and data protection laws, including but not limited to the Texas Electronic Signature Act and the Texas Uniform Electronic Transactions Act.
Drivers are subject to additional data collection for safety and compliance: (a) Driver's License: We collect and verify your driver's license number, state, and expiration date; (b) Vehicle Information: We collect and verify your vehicle make, model, year, color, license plate, and registration; (c) Insurance: We collect and verify your insurance carrier, policy number, and expiration date; (d) Document Verification: We collect and verify your driver's license and proof of insurance. We do NOT collect criminal background information, sex-offender-registry status, or motor-vehicle records for carpool or vanpool; (e) GPS Data: During active trips, we collect GPS data for trip tracking, distance calculation, and fare computation; (f) Trip History: We maintain records of all trips you have offered and completed through the Platform.
Riders are subject to the following data collection: (a) Booking Information: We collect your pickup location, destination, seat requirements, and trip preferences; (b) Payment History: We maintain records of all bookings and payments you have made through the Platform; (c) Trip History: We maintain records of all trips you have participated in through the Platform; (d) Ratings and Reviews: We collect and display ratings and reviews you provide to drivers and that drivers provide to you; (e) Cancellation History: We maintain records of your cancellations and no-shows for policy enforcement.
The Platform integrates with the following third-party services, each with its own privacy policy: (a) Stripe — Payment processing; (b) Identity Verification Vendors (Onfido / Jumio / AWS Rekognition) — Optional AI face verification comparing a selfie to an ID document; (c) Twilio — Call-masking proxy routing and optional call recording; (d) Google Maps / OpenStreetMap — Map and location services; (e) QR Code Server — QR code generation for carpool and vanpool sharing; (f) Cloud Hosting — Data storage and computing infrastructure. We are not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies.
In the event of a data breach affecting your personal information, we will: (a) Conduct a prompt investigation to determine the scope and impact of the breach; (b) Notify affected Users within sixty (60) days of discovering the breach, as required by Texas law; (c) Provide affected Users with information about the breach and steps they can take to protect themselves; (d) Notify the Texas Attorney General's Office as required by law; (e) Take corrective action to prevent future breaches.
The Platform operates within the United States. If you access the Platform from outside the United States, your information will be transferred to and processed in the United States. By using the Platform, you consent to this transfer.
We do not currently respond to "Do Not Track" signals from your browser, as there is no industry consensus on how to interpret or respond to such signals. We will update this policy if industry standards change.
We do NOT collect, store, or process biometric data (fingerprints, facial recognition templates, iris scans, or other biometric identifiers) except as specifically required for identity verification through third-party providers. When biometric data is collected for identity verification (including the optional AI face-verification step that compares a selfie to an ID document), it is processed by the third-party provider and is NOT stored on our servers. Thizz LLC retains only an audit-log entry recording the vendor used, the verified/rejected status, and a confidence score — never the biometric template or the raw images.
When you upload a profile photo or insurance documentation, we collect and store the image file. We do NOT access your camera without your explicit consent. Photos and documents are used solely for the purpose for which they were provided (profile display, insurance verification, etc.) and are not used for any other purpose.
The Platform may offer social media sharing features. When you use these features, you may share information directly with the social media platform. We do not control how social media platforms use the information you share. We encourage you to review the privacy policies of the social media platforms you use.
The Platform offers an optional Social Connect feature where you may voluntarily link your social media handles (Instagram, TikTok, X/Twitter, Facebook, LinkedIn, Snapchat, Discord, Spotify), music taste, interests, hobbies, and bio keywords. This information is stored in your Social Connect profile and is used to help you find and match with compatible riders and drivers.
Your connected handles and profile details are visible only to other authenticated Users within the Social Connect matching pool — never to the public internet. We do NOT access your private social media accounts, messages, or followers. We store only the handles and preferences you voluntarily enter. You may edit or disconnect any channel at any time from the Social Connect page, and deleting your account permanently deletes your Social Connect profile.
When you invoke the AI social-match engine, the Platform sends both Users' Social Connect profile summaries (handles, bio keywords, music taste, interests) to the AI model to compute a compatibility score and shared-interest analysis. The compatibility result is shown to the initiating User. The AI does not access your social media accounts — it analyzes only the profile data you voluntarily entered on the Platform.
We use analytics tools to understand how Users interact with the Platform. These tools collect information such as pages visited, time spent on the Platform, and features used. This information is used to improve the Platform and is not used to identify individual Users personally.
We do NOT display third-party advertising on the Platform. We do NOT share your personal information with advertising networks. We do NOT use your personal information for targeted advertising.
We may disclose your personal information to law enforcement agencies when: (a) Required by law, court order, or subpoena; (b) We believe it is necessary to prevent or investigate fraud, illegal activity, or a threat to safety; (c) We believe it is necessary to protect the rights, property, or safety of Thizz LLC, our Users, or others. We will notify you of any law enforcement request for your information unless prohibited by law.
When you submit a request to exercise your privacy rights, we will: (a) Verify your identity using reasonable means; (b) Confirm receipt of your request within ten (10) business days; (c) Respond to your request within forty-five (45) days; (d) Provide the requested information in a readily portable format; (e) Notify you if we are unable to fulfill your request and explain why.
We adhere to the principle of data minimization. We collect only the personal information that is necessary for the operation of the Platform and the provision of our Services. We do not collect excessive, irrelevant, or unnecessary information. When information is no longer needed for the purpose for which it was collected, we delete it or anonymize it, subject to legal retention requirements. We regularly review our data collection practices to ensure compliance with this principle.
You have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another service provider without hindrance from Thizz LLC. To exercise this right, contact us through the Platform's support tools, and we will provide your data within forty-five (45) days.
We do NOT use automated decision-making or profiling to make decisions that have a significant impact on Users. Our matching algorithm pairs drivers and riders based on route proximity, departure time, and seat availability — all transparent, user-controlled criteria. We do NOT use profiling to determine eligibility, pricing, or access to the Platform. All Users have the right to object to any automated processing and to request human review of any decision.
We do NOT collect special categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or sexual orientation) for carpool or vanpool. No criminal background checks are conducted for carpool or vanpool under Texas Occupations Code §2402.001 / §2402.111, and therefore no such special-category data is collected for those services.
We maintain data processing agreements with all third-party service providers who process personal information on our behalf. These agreements require service providers to: (a) Process personal information only in accordance with our instructions; (b) Implement appropriate security measures; (c) Not disclose personal information to any third party without our consent; (d) Delete or return personal information upon termination of the agreement; (e) Assist us in responding to data subject requests.
We may update this Privacy Policy at any time. We will notify you of material changes by posting the updated policy on the Platform and, if applicable, sending a notification to your registered email address. Your continued use of the Platform after any change constitutes acceptance of the updated Privacy Policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact Thizz LLC through the Platform's support tools. Thizz LLC / DBA Out the Box Productions, State of Texas.
By using the Thizz.ai Platform, you acknowledge that you have read and understand this Privacy Policy.
Thizz LLC · DBA "Out the Box Productions" · State of Texas · Technology Platform — NOT a Transportation Network Company · We do NOT sell your data · We do NOT display advertising · We comply with all Texas privacy laws · Call Masking Protects Your Phone Number · Optional AI Face Verification · Biometric Templates Never Stored