POSH Privacy Policy

Effective Date: June 18, 2026 | Replaces all prior versions | Last Updated: June 18, 2026

PoshIt, Inc. d/b/a POSH | 2100 N Greenville Ave, Suite 400, Richardson, TX 75082 | support@poshcars.io | (888) 781-1356

1. Introduction

PoshIt, Inc., doing business as POSH ("POSH," "we," "us," or "our"), is committed to protecting your privacy and the security of your personal information. This Privacy Policy explains what information we collect, how we use and share it, and what rights you have when you use our website at poshcars.io, our mobile application ("App"), or any of our vehicle subscription services (collectively, "Services").

By using our Services, downloading our App, or enrolling in the POSH vehicle subscription program, you agree to the practices described in this Privacy Policy. If you do not agree, do not use our Services.

This Privacy Policy is incorporated by reference into the POSH Vehicle Subscription Agreement. Capitalized terms not defined here have the meanings given in the Subscription Agreement.

This Privacy Policy contains disclosures about biometric data collection, vehicle GPS tracking, and behavioral advertising. Please read it carefully before enrolling.

2. Information We Collect

2.1 Information You Provide Directly

When you enroll in the POSH Program or use our Services, you provide us with:

Full legal name, date of birth, and home address
Phone number and email address
Driver's license number, state of issuance, expiration date, and a photo of your driver's license
Government-issued identity information, used solely for identity verification and credit history checks conducted at the time of your enrollment application
Payment method information including credit or debit card details, processed securely through Stripe — POSH does not store full card numbers or CVV codes
Insurance policy information including carrier, policy number, and coverage details
A selfie photograph submitted at the time of enrollment and at vehicle delivery for identity verification purposes
Communications you send through the App including messages to the POSH team and service requests

2.2 Biometric Information — Special Notice

Notice to Texas Residents: POSH collects biometric identifiers and biometric information as defined under the Texas Capture or Use of Biometric Identifier Act (Texas Bus. & Com. Code Chapter 503). By enrolling in the POSH Program, you expressly consent to the collection, use, and storage of your biometric information as described below.

As part of the identity verification process, POSH or its authorized verification vendor collects:

A photograph of your driver's license or government-issued ID
A selfie photograph of your face
Facial geometry data derived from comparing the submitted photographs to verify that the person pictured on the ID matches the selfie submitted

This biometric data is used solely for identity verification and fraud prevention. It is not used for any commercial purpose. POSH will permanently destroy all biometric information, including facial geometry data and the underlying photographs used for verification, within three (3) years of the end of your last subscription with POSH, unless earlier destruction is required or permitted by law. POSH does not sell, lease, trade, or otherwise profit from biometric information.

Under the Texas Capture or Use of Biometric Identifier Act, you have the right to be informed of the collection, storage, use, and destruction of your biometric data. You may contact us at support@poshcars.io with any questions about how your biometric information is handled.

2.3 Information We Collect Automatically

When you use our App or visit our website, we automatically collect:

Device identifiers including mobile device ID, operating system type and version, and App version
Log data including access times, pages and features viewed, and session duration
Browser type, internet service provider (ISP), and IP address
Clickstream data showing how you navigate through our website and App
Access timestamps and usage patterns
Authentication tokens stored as cookies when you log in, which are deleted upon logout
Payment transaction history and invoice records
In-app communications and service scheduling records

2.4 Tracking Technologies and Behavioral Advertising

We and our third-party partners use cookies, web beacons, pixels, tags, and other tracking technologies ("Tracking Technologies") on our website and App. These technologies collect information about how you interact with our Services and may be used to deliver advertising tailored to your interests across other websites and platforms.

Specifically, we currently use:

Facebook Pixel and Meta Business Tools — which allow Meta to collect information about your interactions with our website and App for the purposes of ad targeting, measurement, and analytics. This may include uploading subscriber email addresses and phone numbers to Meta as custom audiences for advertising purposes.
Google Analytics and Google Ads — which collect information about your website usage to help us understand traffic patterns and measure the effectiveness of our advertising campaigns.
Other analytics and advertising tools — we may use additional third-party tools from time to time for analytics, A/B testing, and advertising measurement purposes.

This type of advertising is known as interest-based or behavioral advertising. Data collected through these tools may be used to show you POSH advertisements on other websites and platforms based on your browsing behavior and account information.

Your opt-out options:

To opt out of interest-based advertising from companies participating in the Digital Advertising Alliance, visit www.aboutads.info/choices or www.youradchoices.com/appchoices for mobile
To opt out of Google's use of your data for advertising, visit Google's Ads Settings at adssettings.google.com
To manage your Meta advertising preferences, visit your Facebook Ad Preferences settings
To opt out of all non-essential tracking, contact us at support@poshcars.io

Please note that opting out of interest-based advertising does not opt you out of all advertising — you may still see POSH ads, but they will not be based on your behavioral data. POSH's website and App currently do not respond to browser Do-Not-Track signals.

2.5 Vehicle Telematics and GPS Data

POSH vehicles are equipped with GPS telematics devices, currently operated through Samsara. When you are in possession of a POSH vehicle, we continuously collect:

Real-time and historical GPS location data
Vehicle speed and driving behavior data
Odometer readings and mileage data
Fuel level and fuel consumption data
Engine status, ignition events, and operational data
Toll and geographic boundary crossing data
Remote access events including lock, unlock, and immobilization events

This data is collected at all times while you are in possession of a POSH vehicle, including when the vehicle is parked or not in active use. By enrolling in the POSH Program, you expressly consent to this continuous collection.

2.6 Third-Party Verification Data

As part of the enrollment application process only, we collect information from third parties to verify your identity and eligibility, including:

Driving history records obtained from state motor vehicle authorities
Identity verification and background check data obtained through LexisNexis, including information derived from your government-issued identification and driver's license
Credit history obtained through soft credit checks conducted by third-party credit bureaus — soft checks do not affect your credit score

These checks are conducted only during the initial enrollment application period. If POSH denies your application based on information from a consumer reporting agency, you have the right under the Fair Credit Reporting Act (FCRA) to be informed of the source of that information, to request a free copy of the report, and to dispute inaccurate information.

3. How We Use Your Information

3.1 Operating the POSH Program

Processing your enrollment application and verifying your identity and eligibility through LexisNexis and credit bureau checks
Managing your account, vehicle assignments, and subscription billing
Processing payments and managing invoices through Stripe
Facilitating vehicle transport arrangements for out-of-state subscribers
Providing customer support through the App and by phone

3.2 Vehicle Safety and Compliance

Monitoring vehicle location and operational status for safety and compliance
Enforcing geographic restrictions and authorized use requirements
Remotely immobilizing vehicles when authorized under the Subscription Agreement
Recovering vehicles that are overdue, abandoned, or reported stolen
Investigating accidents, incidents, and insurance claims

3.3 Insurance and Claims

Assisting subscribers in obtaining personal auto insurance through our network of insurance brokers
Coordinating insurance claims directly with subscriber's insurance carrier following an incident
Providing telematics data to insurers or claims adjusters as required by an active claim

3.4 Communications and Marketing

Sending account-related notices, invoices, and service updates by email, SMS, and push notification
Sending marketing communications about POSH products, promotions, and referral programs by email, SMS, and push notification, subject to your opt-out rights in Section 6
Delivering targeted advertising through Meta, Google, and other platforms using behavioral and account data as described in Section 2.4
Responding to your inquiries and support requests

3.5 Legal and Regulatory Compliance

Complying with applicable federal, state, and local laws and regulations
Responding to lawful requests from law enforcement or government authorities
Enforcing our Subscription Agreement and protecting our legal rights
Preventing fraud, unauthorized use, and violations of our terms

3.6 Business Operations

Analyzing usage patterns to improve our Services and App
Conducting internal audits using subscriber identity and driving data
Developing new products, features, and subscription tiers

4. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who help us operate the POSH Program, including:

Stripe — payment processing and billing
Samsara — vehicle telematics, GPS tracking, and remote vehicle management
LexisNexis — identity verification, background checks, and driving history during enrollment application
Insurance brokers — facilitating subscriber insurance enrollment and policy management
Credit bureaus — enrollment eligibility credit checks
Transportation carriers — facilitating out-of-state vehicle transport arrangements
Collection agencies — recovering unpaid amounts owed by subscribers
IT and cloud service providers — data storage, security, and App infrastructure

4.2 Advertising and Analytics Partners

We share certain subscriber and user data with advertising and analytics partners including Meta (Facebook/Instagram) and Google for the purposes of targeted advertising, campaign measurement, and analytics. This may include:

Email addresses and phone numbers uploaded as custom audiences for advertising targeting
Behavioral data collected through Tracking Technologies on our website and App
Aggregated and anonymized analytics data

Sharing data with advertising platforms for custom audience targeting may constitute a "sale" or "sharing" of personal information under certain state privacy laws. If you wish to opt out of this type of sharing, contact us at support@poshcars.io.

4.3 Insurance and Claims

In the event of an accident, we share relevant information including telematics data, incident reports, driving behavior data, and subscriber account information with your insurance carrier, claims adjusters, and legal representatives as necessary to manage the claim.

4.4 Law Enforcement and Legal Process

We may disclose your information, including vehicle location data, to law enforcement agencies, courts, or government authorities when required by law, court order, or when we have a good-faith belief that disclosure is necessary to prevent imminent harm, investigate criminal activity, or enforce our legal rights.

4.5 Business Transfers

If POSH is involved in a merger, acquisition, asset sale, or other business transaction, your information may be transferred to the acquiring entity. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4.6 Future Data Sales

POSH does not currently sell your personal information to third parties for monetary compensation. If this practice changes in the future, we will update this Privacy Policy and provide advance written notice to affected subscribers as required by applicable law. You will have the right to opt out of any such sale before it occurs. Note that sharing data with advertising platforms as described in Section 4.2 may be considered a "sale" or "sharing" under certain state laws, and you have the right to opt out of that activity as described above.

5. Vehicle Telematics Data — Special Notice

Because POSH vehicles are equipped with continuous GPS and telematics monitoring, we want to be fully transparent about how this data is handled:

Telematics data is collected continuously while you are in possession of a POSH vehicle, including when the vehicle is not in use
This data is used to monitor compliance with your Subscription Agreement, manage vehicle safety, and enforce our repossession and recovery rights
Telematics data may be shared with law enforcement when legally required or when we have reasonable grounds to believe the vehicle is being used for illegal purposes
Telematics data, including driving behavior and speed data, may be shared with insurance carriers and claims adjusters in connection with an active insurance claim
Samsara processes this data on our behalf under a data processing agreement. Samsara's own privacy practices are governed by Samsara's privacy policy available at samsara.com
We retain telematics data for as long as necessary to fulfill our legal, contractual, and operational obligations, including resolving disputes and enforcing our agreements. Subscribers may contact us at support@poshcars.io to request information about data retained on their account

6. Marketing Communications and Your Opt-Out Rights

6.1 Email Marketing

We send marketing emails about POSH products, promotions, new vehicle tiers, and referral programs. Every marketing email includes an unsubscribe link. You may opt out of marketing emails at any time by clicking that link or emailing support@poshcars.io. Opting out of marketing emails does not affect account-related communications such as invoices, payment confirmations, or service notices.

6.2 SMS Text Messages

By providing your mobile phone number and enrolling in the POSH Program, you expressly consent to receive marketing and account-related SMS text messages from POSH. Message and data rates may apply. You may opt out of marketing SMS messages at any time by replying STOP to any marketing text from POSH. Opting out of marketing SMS does not affect account-critical communications required under your Subscription Agreement.

6.3 Push Notifications

If you enable push notifications on the POSH App, we may send you account updates, service reminders, promotional offers, and program announcements. You may disable push notifications at any time through your device settings or the App notification settings.

6.4 Behavioral Advertising Opt-Out

To opt out of interest-based advertising based on your data, see the opt-out options described in Section 2.4. To opt out of POSH uploading your information to Meta or Google for custom audience advertising, contact us at support@poshcars.io with the subject line "Advertising Opt-Out."

7. Data Security

We employ industry-standard security measures to protect your personal information, including:

SSL/TLS encryption for all data transmitted between your device and our servers
Encryption of sensitive personal data at rest, including government-issued identification numbers, driver's license information, and date of birth
Secure tokenization of payment information through Stripe — POSH does not store full card numbers or CVV codes
Controlled access limiting employee access to personal information on a need-to-know basis
Secure handling of biometric data as described in Section 2.2

No method of data transmission or storage is completely secure. In the event of a data breach affecting your personal information, we will notify you as required by applicable law, including the Texas Identity Theft Enforcement and Protection Act.

8. Data Retention

We retain your personal information for as long as necessary to operate the POSH Program, comply with legal obligations, resolve disputes, and enforce our agreements. Specific periods include:

Account information: duration of subscription plus 7 years for tax and legal compliance
Government-issued identification numbers: retained only for the duration of the enrollment verification process, then deleted or destroyed per applicable law
Payment records: 7 years per IRS recordkeeping requirements
Driving record and credit check data: duration of subscription plus 3 years
Biometric data (facial geometry and verification photos): destroyed within 3 years of end of last subscription, or earlier as required by law
Telematics and GPS data: as long as necessary to fulfill legal, contractual, and operational obligations
Incident and accident records: 7 years or applicable statute of limitations, whichever is longer
Marketing consent records: 5 years after consent is given or withdrawn
Behavioral advertising and analytics data: governed by the retention policies of Meta, Google, and other applicable third-party platforms

9. Account Deletion

You may request deletion of your POSH account and associated personal information at any time by contacting us at support@poshcars.io or through the App. Before submitting a deletion request, please note:

Deleting your account does not cancel your subscription. You must cancel your subscription separately per Section 15 of the Subscription Agreement and return your vehicle before account deletion can be processed
Deleting your account does not relieve you of any outstanding payment obligations
We will process your deletion request within 30 days of confirmation that your subscription has ended and all outstanding obligations are resolved
We may retain certain information even after deletion where required by law, including tax records, incident reports, and insurance claim data
Biometric data will be destroyed within 3 years of subscription end per Section 2.2 above

To request account deletion, email support@poshcars.io with the subject line "Account Deletion Request" and include your full name, account email address, and phone number on file.

10. Your Privacy Rights

Depending on where you live, you may have certain rights with respect to your personal information:

10.1 Access and Portability

You may request a copy of the personal information we hold about you in a portable format within 30 days of a verifiable request.

10.2 Correction

You may request correction of inaccurate or incomplete personal information. You may also update most account information directly through the App.

10.3 Deletion

You may request deletion of your personal information per Section 9 above. Certain information may be retained for legal or contractual reasons.

10.4 Opt-Out of Advertising Data Sharing

You may opt out of POSH sharing your information with advertising platforms for custom audience targeting by contacting support@poshcars.io with the subject line "Advertising Opt-Out."

10.5 Opt-Out of Future Data Sales

POSH does not currently sell personal information for monetary compensation. If this changes, you will have the right to opt out before any sale occurs.

10.6 Non-Discrimination

We will not discriminate against you for exercising any privacy rights. Doing so will not result in denial of services, different pricing, or reduced quality of service.

10.7 How to Exercise Your Rights

Contact us at support@poshcars.io, call (888) 781-1356, or write to: PoshIt, Inc., 2100 N Greenville Ave, Suite 400, Richardson, TX 75082. We will respond to verifiable requests within 30 days and may need to verify your identity first.

10.8 State-Specific Rights

Subscribers in certain states have additional rights under state law:

Texas: rights under the Texas Data Privacy and Security Act (TDPSA) and the Texas Capture or Use of Biometric Identifier Act (CUBI), including access, correction, deletion, portability, and opt-out of sale
Florida: rights under the Florida Digital Bill of Rights — contact us to confirm applicability based on current subscriber volume
Other states: additional rights may apply depending on your state of residence — contact us to learn more

11. Supplemental Notice for California Residents (CCPA/CPRA)

If you are a California resident, this section supplements the rest of this Privacy Policy and applies to you under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

11.1 Categories of Personal Information Collected

In the past 12 months, POSH has collected the following categories of personal information from California consumers:

Identifiers: name, address, email, phone, IP address, device ID, driver's license number
Biometric information: facial geometry derived from identity verification photographs
Financial information: payment card details (tokenized through Stripe), billing history
Internet or electronic network activity: browsing history, App usage data, interaction with advertising
Geolocation data: continuous GPS data collected through vehicle telematics
Driving and vehicle operation data: speed, mileage, fuel level, and other telematics data
Professional or employment-related information: not collected
Sensory data: photographs collected for identity verification

11.2 California Privacy Rights

California residents have the right to: know what personal information is collected and how it is used; delete personal information; correct inaccurate personal information; opt out of the sale or sharing of personal information; limit use of sensitive personal information; and non-discrimination for exercising these rights.

11.3 Sale and Sharing of Personal Information

POSH does not sell personal information for monetary compensation. POSH may share personal information with advertising platforms (Meta, Google) for cross-context behavioral advertising, which may constitute "sharing" under CPRA. California residents may opt out of this sharing by contacting support@poshcars.io with the subject line "California Advertising Opt-Out."

11.4 Sensitive Personal Information

POSH collects the following categories of sensitive personal information: government-issued identification numbers (collected during enrollment application only), driver's license number, precise geolocation data, and biometric information. We use this data only as necessary to provide the POSH Program. California residents may request that we limit our use of sensitive personal information to what is necessary to provide the Services.

11.5 Submitting a California Privacy Request

California residents may submit privacy requests by emailing support@poshcars.io with the subject line "California Privacy Request" or by calling (888) 781-1356. We will respond within 45 days, with one possible 45-day extension when reasonably necessary.

12. Nondiscrimination Policy

POSH is committed to providing equal access to all aspects of the POSH Program without discrimination. POSH does not discriminate against any subscriber, applicant, or prospective subscriber on the basis of:

Race, color, or ethnicity
National origin or ancestry
Religion or creed
Sex, gender, or gender identity
Sexual orientation
Age
Disability or medical condition
Familial status
Military or veteran status
Any other characteristic protected by applicable federal, state, or local law

Enrollment decisions are based solely on eligibility criteria in the POSH Subscriber Agreement, including driving history, creditworthiness, age, and valid licensure. Subscribers who believe they have been subjected to discriminatory treatment may contact POSH at support@poshcars.io or (888) 781-1356.

13. Children's Privacy

The POSH Program is not available to persons under 21 years of age. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a minor, we will delete it promptly. If you believe a minor has provided us with personal information, contact us at support@poshcars.io immediately.

14. Third-Party Links and Services

Our App and website may contain links to third-party websites and services. We are not responsible for the privacy practices of those third parties. This includes the Apple App Store, Google Play Store, Stripe, Samsara, LexisNexis, AAA, Meta, Google, and any insurance carrier or broker you interact with through the POSH Program. We encourage you to review the privacy policies of any third-party services you access in connection with POSH.

15. Cookies and Tracking Technologies

Our website uses authentication cookies to maintain your logged-in session. These are deleted when you log out. In addition, we and our advertising and analytics partners use Tracking Technologies as described in Section 2.4 for analytics and interest-based advertising purposes. You may manage cookie preferences through your browser settings, though doing so may affect functionality. Our website and App do not currently respond to browser Do-Not-Track signals.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes we will:

Post the updated policy at poshcars.io with a new effective date
Notify active subscribers by email and in-app notification at least 10 days before changes take effect
For changes involving the sale or sharing of personal data, provide advance notice and opt-out opportunity as required by applicable law

Your continued use of our Services after the effective date of any update constitutes acceptance of the updated Privacy Policy.

17. Dispute Resolution

Any dispute arising out of or relating to this Privacy Policy or our handling of your personal information is subject to the dispute resolution and arbitration provisions in the POSH Vehicle Subscription Agreement, including the binding arbitration clause, class action waiver, and arbitration opt-out right. If you do not have a Subscription Agreement with POSH, disputes regarding this Privacy Policy shall be resolved by binding arbitration administered by the AAA under its Consumer Arbitration Rules, with venue in Dallas County, Texas.