Privacy Policy

This site is operated by Rimrock Limo LLC, doing business as Rimrock Limo, a luxury transportation company based in Billings, Montana. In this policy, “we,” “us,” and “our” refer to that company, and “you” refers to anyone who visits this site, creates an account, or books a ride.

You can reach us about anything in this policy at [email protected], or by mail at 302 N 15th Street, Billings, MT 59101.

We only collect information that we actually need to run bookings and to understand how this site is being used. We do not buy personal information from data brokers, and we do not run advertising trackers on this site. We do use one analytics service, described below and in sections 6 and 7.

Information you give us

• Account information. Your first name, last name, email address, and a password. Your phone number is optional and is only used if you provide it.
• Booking details. The package and date you select, the time block you book, the number of passengers in your party, and any special requests you type at checkout. Special requests are free-text, so please do not include sensitive personal details there, such as health or financial information.
• Pickup addresses. The street address where you want to be picked up, and any pickup notes you add (for example, a gate code or which entrance to use). You can save more than one address to your account and reuse them, and you can edit or delete a saved address at any time from your profile. Each booking keeps its own copy of the address you chose for that trip, so editing or deleting a saved address does not change a booking you have already made. Pickup notes are free-text, so please do not include sensitive personal details there.
• Reschedule requests. The new date you request and any reason you choose to give.
• Reviews. If you leave a review, we store your rating, title, and review text. Approved reviews are shown publicly on this site with your first name and last initial (for example, “Jane S.”).

Information created when you use the service

• Payment records. The amounts you were quoted and charged, your deposit and remaining balance, any discount code applied, and identifiers issued by our payment processor that let us match a payment to your booking. We never see or store your full card number (see section 4).
• Message logs. When we email or text you about a booking, we keep a record of the message, including the recipient address or phone number, the subject and body of the message, when it was sent, and whether it was delivered. We keep these so we can show that a required notice was sent and troubleshoot when it was not.
• Account status. Whether your account is active or suspended, and an internal note explaining a suspension if one is applied.
• Usage analytics. We use PostHog, an analytics service, to see how the site is used and to catch errors: which pages are visited, which buttons are clicked, how far visitors get through the booking flow, technical details when something breaks, and the type of device and browser used. If you are signed in, this activity is tied to a random account identifier. PostHog is never sent your name, email address, phone number, or pickup addresses. Your IP address is used to derive an approximate, city-level location for these events; it is not used for advertising or to build marketing profiles. You can opt out of analytics entirely (see section 7).

What we do not collect

• We do not track your location, and we do not use GPS or mapping services on this site. The only address we hold is the pickup address you type in yourself.
• We do not run advertising pixels, session recording, or cross-site tracking. Our analytics measure activity on this site only. They do not follow you to other websites, and nothing from them is shared with ad networks.
• We do not use your IP address for advertising or to build marketing profiles. Our abuse protections work off your email address and account, not your network address.
• We do not sell your personal information, and we do not share it with anyone for their own advertising purposes.

• To provide the service. Creating your account, confirming your booking, holding your date, and getting a vehicle and driver to you.
• To take payment. Charging your deposit at checkout (or the full price, if you choose to pay in full or your booking is last-minute) and, for bookings with a balance due, charging the remaining balance to your saved card approximately 24 hours before your pickup time (see section 4).
• To send you service messages. Booking confirmations, reminders before your event, reschedule and cancellation notices, and password resets.
• To respond to you. Answering questions and handling reschedule requests, refunds, and support issues.
• To keep the service secure. Limiting repeated failed sign-in and password reset attempts, and preventing abuse of discount codes.
• To meet our legal and accounting obligations. Keeping records of transactions for tax, insurance, and dispute purposes.

We do not send promotional or marketing messages to the phone number on your account. Every text we send is tied to a specific booking you made.

Payments are processed by Stripe, Inc. Your card details are entered directly into Stripe’s secure payment form and are transmitted to Stripe, not to us. We never receive, see, or store your full card number, CVC, or expiration date. What we store is a Stripe-issued identifier that lets us reference your payment.

Please read this carefully: when you book, your card is saved on file and, if your booking has a balance remaining, we automatically charge that balance to your saved card about 24 hours before your scheduled pickup, without asking you again. You agree to this when you complete checkout. This is the only automatic charge we make. Damage or cleaning fees described in our Terms of Service may also be charged to that card.

Stripe handles your card data under its own privacy policy and its obligations as a PCI-compliant payment processor. You can read it at stripe.com/privacy.

If you provide a phone number and check the consent box, we will text you about your booking: typically a reminder one week before, one day before, and about two hours before your pickup, plus occasional messages from our team about your specific ride. These are transactional messages, not marketing. We will not text you promotions, and we will not text you at all if you have not opted in.

• Message and data rates may apply. Message frequency varies depending on how many bookings you have.
• Reply STOP to any message to opt out. We will send one confirmation and then stop texting you. You will still receive booking emails.
• Reply START to opt back in, or update the setting on your profile page.
• Reply HELP for help, or contact us at [email protected].
• Opting out of texts does not cancel your booking and does not stop us from charging your remaining balance.

Text messages are delivered through Twilio Inc., which receives your phone number and the content of the message in order to deliver it. Mobile carriers may also process these messages. We do not share your phone number with anyone for their own marketing purposes.

We share your information only with the service providers we need to operate, and only to the extent they need it to do their job for us. They are not permitted to use your information for their own purposes.

• Stripe: payment processing, card storage, and refunds. Receives your name, email address, and payment information.
• Twilio: text message delivery. Receives your phone number and the message content.
• Resend: email delivery. Receives your email address and the message content.
• PostHog: website analytics and error monitoring. Receives the usage events and error reports described in section 2, tied to a random account identifier, along with device and browser information and your IP address (used for approximate location). It does not receive your name, email address, phone number, or pickup addresses. You can read its privacy policy at posthog.com/privacy.
• Our hosting provider: stores the site and its database on our behalf.

We may also disclose information if we are required to by law, subpoena, or court order; if we need to in order to investigate fraud or a threat to someone’s safety; or if our business is sold or merged, in which case your information would transfer to the new owner under this same policy.

We set two cookies. The first is an encrypted session cookie that keeps you signed in after you log in. It is marked HttpOnly (so it cannot be read by scripts in your browser), SameSite=Lax, and, in production, Secure. It expires on its own, and signing out deletes it.

The second is a first-party analytics cookie set by PostHog (see sections 2 and 6). It contains a random identifier that lets us recognize a returning browser so we can count visitors accurately. It is not an advertising cookie: it does not follow you to other websites and is never shared with ad networks.

We do not use advertising cookies or third-party tracking cookies. If you would rather not be included in analytics at all, opt out below. Once you do, analytics stop and the analytics cookie is no longer set in this browser:

We keep your account for as long as it is open. We keep booking and payment records for at least as long as our tax, accounting, and insurance obligations require (generally seven years), even after a booking is completed or cancelled, because those records document a financial transaction. Message logs are kept so we can show what notice was sent about a booking. Abandoned checkouts leave no record: a booking is only created once payment is actually collected.

• See and update your information. Your name, phone number, saved pickup addresses, and password can be changed any time on your profile page. Your email address is how you sign in and cannot be changed there; email [email protected] and we will update it for you. Your bookings are listed in your dashboard.
• Get a copy. Email [email protected] and we will send you the personal information we hold about you.
• Delete your account. Email [email protected] to request deletion. We will delete your account and personal details, but we may need to retain transaction records as described in section 8, and we cannot delete an account with an upcoming booking until that booking is completed or cancelled.
• Stop text messages. Reply STOP to any message, or turn the setting off on your profile page.
• Opt out of analytics. Use the switch in section 7 to exclude your browser from analytics entirely.
• Remove a review. Email us and we will take it down.

Depending on where you live, you may have additional rights under your state’s privacy law. We honor requests of this kind regardless of whether a particular law technically applies to us. We will not discriminate against you for exercising any of these rights. We may need to verify your identity before acting on a request.

Passwords are stored using bcrypt hashing, so we cannot read your password. A password reset issues a single-use link that expires in one hour. Sessions use encrypted, signed tokens. Card data never reaches our servers. Access to the admin area is restricted to authorized staff accounts.

No system is perfectly secure, and we cannot guarantee absolute security. If we learn of a breach affecting your personal information, we will notify you as required by Montana law.

This site is not directed at children, and we do not knowingly collect personal information from anyone under 18. Accounts and bookings require an adult; see the age requirements in our Terms of Service. If you believe a child has given us personal information, contact us at [email protected] and we will delete it.

If we change this policy, we will update the date at the top of this page. If the change is significant (for example, if we start collecting something new or sharing information with someone new), we will notify account holders by email before it takes effect.

Questions about this policy, or about the information we hold about you, go to [email protected]. Our mailing address is 302 N 15th Street, Billings, MT 59101.