Privacy policy.

1. Who we are

JobCabby is operated by ARIG Labs LLC, a limited liability company based in New York. In this policy, “JobCabby,” “we,” “us,” and “our” refer to ARIG Labs LLC. For any privacy question or request, email company@ariglabs.io .

2. What we collect

From drivers

• Account info: email address and a password (stored only as a bcrypt hash). You can also sign in without a password using a one-time magic link sent to your email. If we add additional sign-in methods in the future (for example, Google sign-in), we'll update this policy to describe what's collected.
• Profile info: first and last name, phone number (also used for SMS notifications if you opt in to them), NYC TLC driver license number, shift preferences, day availability, borough preferences, vehicle type, whether you own or rent your vehicle, availability flag, and an optional bio (up to 500 characters).
• Activity: listings you've expressed interest in, invitations you've received and how you responded, and feedback you submit.

From transportation providers

• Account info: email address and a password (bcrypt-hashed), or sign-in via magic link.
• Company info: company name, contact name, phone number (also used for SMS notifications if you opt in to them), TLC base license number (where applicable), and email and SMS communication preferences.
• Activity: job listings you post, drivers you've browsed or invited, interest signals you've received, and feedback you submit.

Automatically

• Server logs: IP address, browser type, operating system, referring URL, pages visited, and timestamps — what any web server records by default.
• Session data: a signed first-party cookie that keeps you logged in, plus a per-request ID we use for debugging. No third-party analytics or advertising trackers are loaded on the site today.

3. How we use it

We use the information above to:

• Operate the marketplace — show driver profiles to companies, show listings to drivers, route interest signals and invitations.
• Send you operational and opportunity notifications. We send transactional messages (account confirmations, password resets, magic links, invitations, interest notifications, and legal notices) by email and, where you've provided a number, SMS. We also send notifications about new listings, drivers, or opportunities that match the preferences in your profile — this is a core part of how the marketplace works, and you can adjust which categories you receive in your account settings. Bulk product announcements (new features, platform-wide changes, material policy updates) are sent only to opted-in users and always include an unsubscribe link.
• Keep the platform safe — detect and prevent fraud, abuse, and bots.
• Comply with legal obligations and enforce our Terms of Service.

4. How we share

With other platform users

The point of a marketplace is to connect people, so some of your info is visible to other users:

• Drivers: your name, TLC license number, shift/borough/vehicle preferences, availability, and bio are visible to registered transportation providers who browse drivers. Your phone number and email are shared with a company only when you express interest in one of their listings or accept an invitation.
• Companies: your company name and listing details are visible to drivers who browse listings. Your contact details are shared with a driver once they're connected to one of your listings.

With service providers we rely on to run the site

• Our email delivery provider (SMTP service), to send transactional and product emails.
• Our hosting provider, which runs the servers and stores the database in the United States.

These providers process data on our behalf under contracts that limit what they can do with it. If we add a new sign-in method (such as Google sign-in) or a new service provider with access to personal information, we'll update this policy.

When legally required

We may disclose information in response to valid legal process (subpoenas, court orders, law-enforcement requests), to enforce our Terms of Service, or to protect the rights, property, or safety of users or the public.

What we don't do

We do not sell your personal information. We don't run advertising networks and don't share your data with ad-tech vendors, data brokers, or marketing lists.

5. Cookies

We use a signed first-party session cookie to keep you logged in and protect against cross-site request forgery. We don't use third-party advertising cookies or cross-site tracking pixels. If that ever changes, we'll update this policy and let you know.

6. Your choices

• Edit your info. Update your profile at any time from your account settings.
• Unsubscribe from emails. Every product email includes an unsubscribe link. You can also toggle email preferences from your account, and unsubscribe tokens are honored immediately. Transactional messages (account, password, legal notices) will still be sent.
• Opt out of SMS. Reply STOP to any text message to opt out of all SMS, toggle the SMS preference on your profile, or email us. STOP requests are honored immediately. We'll continue to send transactional messages by email.
• Delete your account. Email us at company@ariglabs.io and we'll remove your profile data from the live service.
• Request a copy. Email us and we'll share the information we have about you.

7. California residents (CCPA / CPRA)

If you're a California resident, the California Consumer Privacy Act and California Privacy Rights Act give you rights to:

• Know what personal information we collect about you.
• Access a copy of it.
• Correct inaccurate information.
• Delete your personal information, subject to limited exceptions.
• Not be discriminated against for exercising any of these rights.

We do not sell personal information and we do not share it for cross-context behavioral advertising. To exercise your rights, email us at company@ariglabs.io . We may need to verify your identity before responding.

8. Data retention

We keep account and profile data while your account is active. When you delete your account, we remove profile data from the live service. Residual copies may persist in routine database backups maintained by our hosting provider for a limited period before those backups roll off.

Job listings are soft-deleted when a company removes them (kept in the database with a deletion timestamp so they no longer appear publicly) and may be hard-deleted later as part of housekeeping. Feedback, legal notices, and records required to meet our legal or tax obligations may be kept longer.

9. Security

We use reasonable administrative, technical, and physical safeguards consistent with the New York SHIELD Act to protect personal information. Passwords are stored only as bcrypt hashes. Traffic between your browser and our servers is encrypted in transit using TLS. No system is 100% secure, though, so please use a strong unique password and let us know right away if you suspect your account has been compromised.

10. Children

JobCabby is not intended for anyone under 18. We don't knowingly collect personal information from minors. If you believe a minor has registered, email us and we'll delete the account.

11. International users

JobCabby is operated from the United States and data is stored in the United States. If you access the service from outside the U.S., you understand your information will be transferred to and processed in the United States.

12. Changes to this policy

We may update this policy from time to time. When we do, we'll update the “Last updated” date at the top and, for material changes, email registered users. Continued use of JobCabby after the effective date of a change is your acceptance of the updated policy.

13. Contact

Privacy questions, data requests, or concerns? Email company@ariglabs.io . Mail to: ARIG Labs LLC, 276 5th Ave 704, New York, NY 10001.