Privacy Policy
This policy explains how the current Cruz Pass pre-launch experience handles personal data, browser state, and invite verification as of August 5, 2026.
Information we collect
When you interact with this experience, Cruz may collect your WhatsApp phone number, one-time verification status, assigned member number, invite relationship, pass tier, ride-credit allocation, browser session identifiers, and device-level identifiers used to reduce duplicate claims.
Why we collect it
We use this information to verify eligibility, issue passes, prevent duplicate claims, reopen an existing member pass, manage invite-only allocation, generate member-specific QR codes, and maintain a working pre-launch member record for the Cruz program.
Local storage and cookies
This experience stores local browser data and session information to remember the device currently associated with a pass and to keep a member signed into the pass dashboard. If you clear browser data, switch devices, or block storage, you may be asked to verify again before reopening your pass.
Fraud prevention
Cruz uses device and session signals to detect repeat claims, duplicate usage, and abuse of the invite-only flow. These controls may include device identifiers generated in the browser, session cookies, and comparisons against prior claims connected to the same experience.
Invite links
Invite links identify the member who shared access with you. When a claim is completed through an invite link, Cruz records that relationship so it can enforce pass-allocation rules and member invite limits.
How data is stored
In the current development version of this experience, member state is stored in application-managed data files and browser storage so the flow can be tested before a production backend is finalized. Storage architecture may change before live rollout without changing the purpose of the data collected.
Who we share data with
Cruz does not display your private pass information publicly through this landing page. Data may be processed by service providers that support hosting, analytics, messaging, or infrastructure where needed to operate the experience, subject to Cruz's operational choices at launch.
Retention
We retain pass records and anti-abuse records for as long as reasonably necessary to run the pre-launch program, enforce eligibility rules, and prepare launch operations. We may retain limited records for security, audit, dispute resolution, or legal compliance.
Your choices
You may choose not to claim a pass, not to continue with verification, or not to use invite-sharing features. Where appropriate, Cruz may provide ways to update or delete member data later, but those self-service tools are not part of the current prototype experience.
Policy changes
Cruz may update this policy as the program moves from prototype to production, particularly where storage, verification, payments, ride operations, or legal compliance evolve. Updated versions will be posted in the product.