Exotiq Inc. ("Exotiq," "we," "us," or "our"), a Delaware C-Corporation, is committed to protecting the privacy and security of information collected through the Exotiq Command Center platform ("Platform") and the Drive Exotiq marketplace. This Privacy Policy explains what information we collect, how we use it, who we share it with, and how we protect it.
This Privacy Policy applies to all users of the Platform, including fleet operators ("Customers"), their authorized users, Vehicle Partners, and renters who interact with Drive Exotiq.
Article I: Information We Collect
Section 1.1. Account Information
When you create an account, we collect: your name, email address, phone number, business name, business address, and payment information (processed and stored by Stripe, not by Exotiq directly).
Section 1.2. Fleet and Operational Data
Through your use of the Platform, we collect and process: vehicle inventory data (make, model, year, VIN, mileage, photos, specifications); booking and reservation records; renter information you enter; maintenance records and schedules; pricing data and pricing history; insurance and compliance documentation uploaded to Vault; and financial transaction records synchronized from Stripe.
Section 1.3. AI Interaction Data
When you use AI Services, we collect: MotorIQ usage data including pricing queries, applied recommendations, and pricing outcomes; FleetCopilot/Rari conversation logs including text and voice inputs; voice recordings processed through ElevenLabs for the Rari voice agent; and AI recommendation acceptance/rejection patterns used for model improvement.
Section 1.4. Technical and Usage Data
We automatically collect: IP addresses, browser type, device information, and operating system; pages viewed, features used, and session duration; error logs and performance data; and telematics data received from integrated providers (GPS location, vehicle diagnostics, driving data).
Section 1.5. SMS Consent Data
When you or your renters opt in to SMS/text messaging programs operated by Exotiq or Drive Exotiq, we collect and store: mobile phone numbers; SMS consent preferences (transactional, marketing, or both); the timestamp and IP address at the time of consent; the specific consent language presented at opt-in; and opt-out history and timestamps. These consent records are maintained for at least five (5) years after the last interaction as required for TCPA compliance.
Article II: How We Use Your Information
Section 2.1. Platform Operations
We use your information to: provide, maintain, and improve the Platform and its modules; process bookings, payments, and financial transactions; generate AI-powered pricing recommendations via MotorIQ; power conversational AI features through FleetCopilot/Rari; monitor fleet compliance and send expiration alerts through Vault; and calculate vehicle profitability and financial analytics through Margin.
Section 2.2. AI Model Training and Improvement
We use aggregated, anonymized operational data to train and improve our proprietary AI models. We do not use individually identifiable Customer Data to train AI models shared across customers without explicit consent.
Section 2.3. Communications
We use your contact information to send transactional emails via Resend; transactional and promotional SMS messages via GoHighLevel and Twilio (only with your prior express consent); product updates and feature announcements; and security notifications. You may opt out of non-transactional communications at any time.
Article III: How We Share Your Information
Section 3.1. Third-Party Service Providers
We share information with the following service providers, solely to the extent necessary to provide the Platform:
| Provider | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing | Transaction data, account information |
| Supabase | Database and storage | All platform data (encrypted at rest) |
| ElevenLabs | Voice AI (Rari) | Voice recordings, text prompts |
| Google (Gemini) | Demand forecasting | Anonymized market queries |
| OpenAI | Communication AI | Text inputs for optimization |
| Anthropic | AI reasoning | Text inputs for analysis |
| Resend | Email delivery | Email addresses, recipient names |
| GoHighLevel | SMS/text delivery, CRM | Phone numbers, message content, consent data |
| Twilio | SMS delivery infrastructure | Phone numbers, message content |
| Telematics providers* | Vehicle tracking | Vehicle ID, account credentials |
*Telematics providers include Bouncie, Verizon Connect, and Zubie.
Section 3.2. SMS Consent Data
We do not sell, rent, or share your SMS consent or phone number with any third parties for their marketing purposes. Your phone number and SMS consent data may only be shared with: (a) our SMS service providers (GoHighLevel and Twilio) solely for message delivery; and (b) as required by law or legal process.
Section 3.3. No Sale of Personal Data
Exotiq does not sell, rent, or trade personal information to third parties for marketing purposes.
Article IV: Data Security
We implement commercially reasonable security measures including: encryption of data at rest and in transit (TLS 1.2+); row-level security (RLS) policies ensuring data isolation between customers; secure API authentication; regular security assessments; and encrypted document storage for Vault.
In the event of a data breach, we will notify affected users within seventy-two (72) hours of confirmed discovery.
Article V: Data Retention
- Active account data: retained for the duration of your subscription.
- Post-termination: Customer Data available for export for 30 days, then deleted within 60 additional days.
- Backup copies: encrypted backups retained for up to 90 days post-deletion.
- Transaction records: retained for seven (7) years for financial and tax compliance.
- Voice recordings (Rari): retained for 30 days, then deleted.
- Document signatures and audit trails: retained for the subscription term plus seven (7) years.
- SMS consent records: retained for at least five (5) years after last interaction.
Article VI: Your Rights
Section 6.1. Access and Portability
You may request a copy of your personal information in CSV or JSON format.
Section 6.2. Correction
You may update or correct your account information through the Platform or by contacting privacy@exotiq.ai.
Section 6.3. Deletion
You may request deletion by contacting privacy@exotiq.ai. Requests processed within 30 days, subject to legal retention requirements.
Section 6.4. Opt-Out
You may opt out of: marketing communications, AI model training using identifiable data, telematics data collection, and SMS messages (reply STOP or contact support).
Section 6.5. State-Specific Rights
California, Colorado, Virginia, and Connecticut residents may have additional rights. Contact privacy@exotiq.ai with your request and state of residence.
Article VII: Children's Privacy
The Platform is not intended for individuals under 18. We do not knowingly collect information from minors.
Article VIII: Changes to This Policy
Material changes communicated via email at least thirty (30) days before the effective date.
Contact
Email: privacy@exotiq.ai
Address: Exotiq Inc., 1001 S Main St #6709, Kalispell, MT 59901