BBBUS Driver Privacy Policy

Effective date: November 10, 2026

BBBUS LLC ，a New York limited liability company doing business as BBBus ("BBBUS," "we," "us," or "our") provides BBBUS Driver (the "App") for authorized drivers of bus operators using the BBBUS platform. This Privacy Policy explains how we collect, access, use, store, disclose, and delete personal information in connection with the App.

For account and data deletion requests, see Account and Data Deletion.

1. Scope and Your Bus Operator

The App supports driver sign-in, trip management, ticket verification, station passenger details, station arrivals and departures, and driver handovers.

Driver accounts are created and supplied by participating bus operators. The App does not offer public self-registration. Your bus operator manages your authorization to use operational information. BBBUS operates the App and handles privacy and account-deletion requests submitted to us. Your operator may separately maintain employment, transportation, or other business records under its own policies. We coordinate with your operator when necessary to verify or fulfill a request concerning operator-managed records.

This policy covers information processed through BBBUS Driver. Separate privacy notices may apply when passengers purchase tickets or use other BBBUS services.

2. Information We Process

We receive information from you when you sign in or perform actions, from your bus operator and the BBBUS ticketing platform, and from the technical requests needed to provide the service. The categories and their sources are described below; their uses and disclosure recipients are explained in Sections 4 and 5.

Driver Account and Authentication Information

We process the login identifier associated with your driver account, your operator affiliation, account identifiers and status, and the credentials or session information needed to authenticate you. Your login identifier may be a driver ID or a phone number, depending on the account supplied by your operator.

Trip and Operational Information

We process trip identifiers, service dates, routes, station names and addresses, scheduled times, and the trip you are operating. When you perform an action, we process the associated driver account, action type, and time, including trip start, handover, station departure, station arrival, completion, and permitted corrections to operational records.

Passenger and Ticket Information

The App accesses passenger and ticket information needed for authorized transportation operations. This includes passenger names, passenger or fare types, ticket identifiers, boarding and drop-off stations, trip details, ticket status, and verification status and time.

Passenger information is obtained from the BBBUS ticketing platform and participating bus operators. When a ticket is scanned or verified, we process the decoded ticket identifier and the associated verification request or result. Camera images are handled as described in Section 3.

Technical Information and Preferences

When the App communicates with our services, the network infrastructure processes IP addresses and request metadata needed to route and respond to requests and support security. We also process App version information sent for version checks or included in operational records.

The App uses settings such as language, alert sound, and sign-in preferences. Where you use a remember-me feature, saved sign-in information, such as your operator selection, login identifier, and authentication information, is handled on your device. You can change the relevant preference or sign out through the App.

Information You Provide When Contacting Us

If you contact BBBUS about support, privacy, or account deletion, we process the contact details and information you provide to respond to and resolve your request. Please do not include your password in a request.

3. Camera Access and Device Location

The App requests your permission before accessing the camera to scan QR codes on mobile or printed passenger tickets. Camera access is used for ticket scanning, not for unrelated monitoring or advertising.

Camera images are processed temporarily on your device to read the QR code. We do not upload or save the camera images or video used for ticket scanning. The decoded ticket identifier is sent to our services to look up or verify the ticket, and the resulting operational or verification record may be retained under Section 7. Not retaining camera images does not mean that ticket identifiers or verification records are not processed.

You can grant or revoke camera permission in your device settings. If you do not grant camera access, QR-code scanning will not be available.

The App does not collect device GPS location or perform background location tracking. Route information and station addresses shown in the App describe the trip and are not measurements of your device's location.

4. How We Use Information

We use the information described above to:

5. When We Disclose Information

Your Bus Operator and Authorized Operational Users

We disclose relevant driver, trip, passenger, and verification information to your bus operator and its authorized operational users as needed to provide transportation services, support handovers, review ticket verification, and resolve operational issues. Access is governed by the permissions associated with the relevant account, operator, and task.

Service Providers

We use cloud hosting, data-storage, and network-infrastructure service providers to store information and operate BBBUS services. These providers process the account, operational, ticket, or technical information needed to provide their services for BBBUS. We require providers handling personal information on our behalf to protect it, limit access to authorized purposes, and provide protection consistent with this policy and applicable requirements.

We may disclose information when reasonably necessary to comply with applicable law or a valid legal request, investigate fraud or security incidents, protect people or property, or establish, exercise, or defend legal claims.

At Your Direction

We may disclose information where you request or authorize a particular disclosure.

6. Advertising, Tracking, and Third-Party SDKs

BBBUS Driver does not display advertisements. We do not sell personal or sensitive user information, and we do not use driver or passenger information processed through the App for targeted advertising or advertising tracking.

This version of BBBUS Driver does not integrate third-party analytics, crash-reporting, or push-notification SDKs.

Cloud hosting and other infrastructure used to deliver the service are distinct from the SDKs installed in the App. Information processed by infrastructure providers is covered by the service-provider disclosures above.

If a future version introduces additional data collection or third-party services, we will update the relevant disclosures and obtain any permissions or consent required before that processing begins.

7. Storage, Retention, and Account/Data Deletion

Information used to operate BBBUS Driver is stored on cloud servers supporting BBBUS services.

Retention Criteria

We retain driver account information while the account is active and as reasonably necessary to administer authorized access. We retain trip-operation and ticket-verification records for as long as reasonably necessary to document transportation services, investigate discrepancies, prevent fraud or duplicate ticket use, resolve disputes, and meet applicable legal obligations. The retention period is determined by the information involved, the purpose for keeping it, the status of relevant transactions or disputes, and applicable legal requirements. When information is no longer needed, we delete it or irreversibly de-identify it.

How to Request Account or Data Deletion

BBBUS handles requests to delete driver accounts and associated personal information. You may request deletion even if you cannot sign in to or have uninstalled the App.

We may request additional information reasonably necessary to verify your identity and authority. We will explain the next steps and expected processing time, handle a verified request without undue delay and within applicable legal deadlines, and notify you of the outcome. You do not need to sign in to the App or reinstall it to submit a request by email.

What Is Deleted and What May Be Retained

When we fulfill an account-deletion request, we delete the driver account and its associated personal information from our active systems, except where a legitimate retention exception applies. We also instruct service providers processing that information on our behalf to delete it, subject to the same necessary exceptions.

A limited subset of operational records may need to be retained to comply with a legal obligation, investigate an unresolved security or fraud incident, or establish, resolve, or defend a dispute or legal claim. Where such an exception applies, retained records may include the minimum relevant driver/account identifiers, trip or ticket identifiers, action timestamps, and verification records necessary for that purpose.

We will explain any applicable retained data categories, the reason for retaining them, and the period or criteria used to determine retention when responding to your request. Such records are restricted to the reason for retention and are deleted or irreversibly de-identified when it no longer applies. General business convenience is not a reason to retain all account data indefinitely after a deletion request.

Temporarily disabling or freezing an account does not fulfill an account-deletion request. Uninstalling the App does not, by itself, delete information held by BBBUS or separately maintained by your operator. Account deletion ends access to the driver account and its operational features.

8. Security and International Processing

All data transmitted between BBBUS Driver and BBBUS services, including sign-in, trip, passenger, and ticket-verification requests, is encrypted in transit using HTTPS/TLS.

We use technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, and loss. These include account authentication, restrictions based on operator affiliation and operational permissions, and limiting access to personnel and service providers who need it for authorized purposes.

Cloud hosting or support arrangements may involve processing information outside the place where you live. Where information is transferred across borders, we apply the safeguards required by applicable law. No method of electronic transmission or storage can guarantee absolute security.

9. Your Choices and Privacy Requests

You can manage camera permission in your device settings and change the preferences available in the App. Withdrawing camera permission stops future camera access but does not automatically delete existing ticket or operational records.

Depending on applicable law, you may have rights to request access to, correction of, deletion of, or a copy of your personal information, and other rights concerning its processing. You may also withdraw consent where processing is based on consent. The availability and scope of these rights depend on the applicable law and the information involved.

To make a request, contact support@bbbus.com using the subject "BBBUS Driver Privacy Request." Include your operator name, driver account identifier, and the request you would like us to address. We verify requests as appropriate and respond within the time required by applicable law. Where a decision is subject to an appeal right, you may appeal by replying to our response using the same contact address.

If a request concerns records separately controlled by your bus operator, we will explain this and help direct or coordinate the request as appropriate. We may retain information where a legal exception applies and will explain the relevant basis when responding.

10. Children

BBBUS Driver is intended for authorized professional drivers and is not directed to children. Passenger records accessed for transportation operations may include information about children traveling as passengers; this does not make them users of the driver App.

If you believe a child has provided personal information directly through the App, contact us so we can investigate and take appropriate action.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes to the App, our data practices, or legal requirements. We will publish the updated policy with a revised effective date and provide additional notice or obtain consent where required by applicable law.

12. Contact Us

BBBUS LLC

For privacy requests, use the subject "BBBUS Driver Privacy Request."