PassengerOps privacy notice

Updated September 9, 2026

This notice covers the PassengerOps coming-soon website and waitlist. It does not cover Black Car Booking’s reservation service or future PassengerOps software accounts.

Signup information

We record your email address, company or owner-operator name, signup time, consent wording and version, confirmation status, and optional interest in beta testing. You may also provide your first name, market, fleet-size range, current software and operational feedback. We retain a limited referral category, such as WhatsApp, when supplied.

How we use it

We use these details to record launch interest, identify volunteers for beta testing, handle your requests and provide the updates you consent to receive. Joining does not create an account, guarantee a beta place, begin a trial or authorize payment.

We currently save signup requests without sending confirmation or launch emails. These records remain marked unconfirmed. Email confirmation will be required before launch emails are sent.

Storage and protection

The site runs through ChatGPT Sites on Cloudflare. Signup records are stored in an isolated database and can be viewed only by the authenticated owner. We do not import passenger, customer or driver lists from the booking business. Service providers process technical request information as needed to deliver and protect the site.

We use server validation, hidden spam fields, short-lived signed form tokens, request limits and protected request fingerprints. Raw IP addresses are not stored in the signup database. When configured, Cloudflare Turnstile also processes browser signals to prevent abuse. Application logs do not intentionally contain form contents or private management links.

Manage or remove your information

After a new signup, you receive a private management link on the confirmation screen. Keep it private; it allows you to edit or remove that unconfirmed signup for up to 30 days, and stops working once email ownership is confirmed. You can also send a removal request or question. Contact requests do not subscribe you to updates.

When confirmation emails are enabled, those messages include unsubscribe and removal links. Removal clears your contact and optional profile details; a protected email fingerprint and suppression status remain to prevent unwanted messages. Submitting the same address again does not override suppression.

Retention

Unconfirmed signup records are retained for up to 180 days. Confirmed records are retained for the updates you requested until you unsubscribe or request removal. Email delivery records and closed contact requests are eligible for deletion after 90 days. Cleanup runs when the owner opens the dashboard. Owner exports remain under the owner’s control.

Analytics and advertising

No advertising pixels, cross-site marketing trackers or visitor analytics have been enabled. Owner reporting distinguishes recorded signups, confirmed email addresses and beta interest.