QuicReach is committed to continually improving the safety of our platform and contributing to safety in the communities where we operate. QuicReach has a specialized team dedicated to working with law enforcement agencies — the Public Safety Response Team (“PSRT”). This team reviews and responds to each law enforcement request QuicReach receives. The PSRT team has processes in place to assist law enforcement on a 24/7 basis, including emergency requests, through our Public Safety Portal or via email at support@quicreach.com.

QuicReach is also committed to the privacy of our users’ data. QuicReach stores and maintains user data as described in our Privacy Notice and Terms of Use applicable to each jurisdiction where QuicReach operates. QuicReach discloses data to law enforcement in accordance with applicable laws and QuicReach’s core principles.

This guide is not intended to provide legal advice. It also does not create any enforceable rights, and QuicReach reserves the right to update or change this guide without notice to law enforcement.

PSRT Overview

QuicReach’s PSRT team processes requests from law enforcement in India, in accordance with the instructions of the relevant data controller.

Upon receiving legal process, a preservation request, or an emergency disclosure request, QuicReach may disclose the requested data if doing so would be consistent with:

• Indian law, including the Information Technology Act, 2000 (IT Act);
• Local law of the requesting authority, and any other applicable laws;
• QuicReach’s core principles, as described below; and
• QuicReach’s user policies, including the Privacy Notice and applicable Terms of Use.

Law enforcement should use the Portal as the primary means for contacting the PSRT. The Portal provides the central point of contact for law enforcement to communicate with PSRT specialists when submitting legal process, preservation requests, or emergency disclosure requests. Law enforcement may also use the Portal to obtain status updates on submitted legal process or to ask questions.

Only law enforcement and government personnel authorized to obtain evidence in connection with official legal proceedings may use the Portal. Portal accounts should be created using an official law enforcement or government email account.

The PSRT can also be reached at support@quicreach.com. Email requests must be submitted from an official law enforcement or government email account, and include the requesting law enforcement official’s name, title, badge number or similar identifier (if applicable), agency, and direct contact information.

Requirements for Legal Process, Preservation Requests, and Emergency Disclosure Requests

When submitting any request to QuicReach, law enforcement should identify the specific account(s) implicated by the request. When possible, law enforcement should provide a unique identifier associated with the account(s), such as an email address, phone number, and/or license plate number.

Names alone often are not unique identifiers, nor are dates of birth (to the extent collected). QuicReach may also be able to identify accounts that are relevant to a law enforcement investigation by searching for information related to a specific trip.

For such requests, information about that trip — such as user identification information mentioned above, and a date, time, trip ID, or pickup or drop-off location — should be provided.

Legal process, preservation requests, and emergency disclosure requests must be addressed to the appropriate QuicReach entity:Plot No-304, Orchid Blue, Bodh Ashram Surya Nagar, Firozabad-283203, Uttar Pradesh.

Firozabad-283203, Uttar Pradesh.

Legal Process

All law enforcement requests for data must be supported by legal process (with the exception of emergency requests, discussed below). QuicReach reserves the right to reject legal process for any reason, including requests that do not have a valid legal basis, are overbroad, vague, or otherwise inappropriate, or if QuicReach cannot verify the legitimacy of the request. QuicReach may also require a valid Indian court order (via mutual legal assistance, mutual legal assistance agreement) to disclose certain types of records to authorities ini India.

To be valid, legal process submitted to QuicReach must generally:

• be addressed to the appropriate QuicReach entity;
• be issued in compliance with the local law of the requesting authority;
• be issued by an appropriate authority, such as a judge;
• be signed by an appropriate authority, such as a judge;
• be dated;
• provide a date to return the responsive materials, if applicable; and
• specifically identify the targeted account(s), reasonably identified; the type(s) of information within the account to be disclosed; and any applicable date range.

Preservation Requests

Law enforcement may seek the preservation of account records. Upon receipt of such a request, QuicReach may take steps to preserve any records or other information in its possession regarding the subject of the preservation request, pending the issuance of legal process. A preservation is a one-time “snapshot” of the records or content in an QuicReach user’s account at the time we receive the preservation request; it is not an ongoing, real-time preservation of those records. QuicReach reserves the right to reject preservation requests for any reason.

Emergency Disclosure Requests

To the extent consistent with India and local law, QuicReach may voluntarily disclose user data to a law enforcement entity if QuicReach has a good-faith belief that an emergency involving danger of death or serious physical injury to any person requires disclosure without delay of information related to the emergency. Requested data must be limited to data necessary to specifically address the ongoing emergency.

Emergency disclosure requests may be submitted via the Portal, or via email with an Emergency Disclosure Form attached. Because of its commitment to safety on its platform, QuicReach has processes in place to respond to emergency requests on a 24/7 basis.

To submit an emergency disclosure request, law enforcement must:

• certify that they are authorized by law to obtain the requested records;
• certify that the request is, in fact, related to an emergency involving danger of death or serious physical injury that requires disclosure without delay of information relating to that emergency;
• state that there is a significant risk that the emergency may materialize if there is a delay caused by obtaining valid local legal process;
• specifically identify the targeted account(s), reasonably identified; the type(s) of information within the account to be disclosed; and any applicable date range; and
• if required by law, follow-up with legal process.

QuicReach evaluates emergency disclosure requests on a case-by-case basis, including on an exigent basis, and will determine in its sole discretion whether to produce the sought-after data. QuicReach may request additional information or documentation to aid in its evaluation of an emergency disclosure request.

QuicReach’s User Notice Policy

QuicReach may notify users of law enforcement requests for their data, unless notice is prohibited under applicable law.

As part of QuicReach’s safety investigation procedures, QuicReach may choose to contact an individual identified in a law enforcement request in connection with any alleged safety incident. QuicReach will not initiate such contact if it reasonably believes, in its sole discretion, that such contact may:

• pose immediate risk of serious injury or death to a member of the public; or
• pervert the course of justice or prejudice the administration of justice.

When submitting a request, law enforcement may ask that QuicReach not contact anyone associated with the request due to the foregoing reasons or other valid reasons as the case may be.

QuicReach’s Core Principles

QuicReach evaluates requests from law enforcement authorities in India with reference to QuicReach’s core principles. QuicReach may not disclose data if doing so would be inconsistent with those principles.

QuicReach’s core principles for law enforcement requests include:

• All requests must comply with applicable law, and be appropriately scoped.
• QuicReach will not enable real-time and ongoing access to precise and intact trip data by allowing unsupervised access into its internal systems.
• Requests related to criminal investigations must relate to conduct that would constitute a crime in India.
• Local law must provide a mechanism for challenging legal process.

Information Available From QuicReach

This section describes the general categories of user data that may be available from QuicReach. It is meant to provide a guide regarding some of the most commonly requested data types, and is not meant to be exhaustive.

QuicReach collects and maintains user data in accordance with its Privacy Notice and applicable Terms and Conditions. The data QuicReach collects and maintains may vary from account to account, such as when a QuicReach user deletes their account information. Accordingly, the types of data QuicReach provides in response to valid legal process may vary.

Basic Subscriber Information

Basic subscriber information maintained by QuicReach for riders and drivers may include:

• name;
• email;
• phone number;
• date of account creation; and
• account status.

Device Information

Device information includes information about the user’s mobile device.

Vehicle Information

Vehicle information that QuicReach may provide includes:

• license plate data;
• make and model;
• vehicle insurance;
• vehicle registration; and
• vehicle identification number (VIN).

Billing Information

Means and source of payment information that QuicReach may provide includes:

• partial credit card (first six and last four of the credit card number) or bank account numbers (drivers and deliverers only);
• credit card expiration date;
• associated credit card zip code; and
• other payment instruments.

Other billing information that QuicReach may provide includes:

• information about particular transactions, like amount, date and time the transaction was made, and the payment instrument used.

Trip Information

Trip information generally includes:

• a breakdown of the amounts charged to the rider for the trip;
• the pick-up and drop-off locations (latitude and longitude); and
• information about the rider(s) and the driver, including the name, and rating. Note that drivers and riders enter their names as seen in app, so they are not necessarily their given names or could be abbreviated (e.g. “Chris” for “Christopher”).

Location Information

QuicReach may collect GPS location information from the mobile devices of its drivers and riders. A driver’s location information may be captured when the QuicReach app is running on the driver’s mobile device on or off trip as long as the driver is logged in to receive trips. Riders have the option in their device settings to opt out of the collection of their GPS information, and if they choose to do so, the rider’s GPS will not be captured.

Other User Profile Information

Other user profile information about the user that QuicReach may provide include:

• rating(s) (one to five stars);
• written feedback/comments; and
• profile photograph(s).

Driver Profile Information

QuicReach may retain the following information about its driver:

• date of birth;
• vehicle information (as described above); and
• driver’s license number

Communications Information

QuicReach may capture certain information about communications between its users on the QuicReach app, such as when a driver and rider use the app to communicate with each other. This may include non-content records associated with such communications, or in the case of text messages through the app, the contents of those communications.

Records of communications may include:

• to/from information; and
• date and time of the communication.

Contents of communications may include messages sent between users on the app.

Customer Service Records

Customer service records QuicReach may retain include:

• recordings of customer support calls; and
• other customer support communications.

Other Business Records

Other business records QuicReach may retain include:

• driver’s license copies.

QuicReach may be able to provide additional data not listed here. Law enforcement requests should clearly detail the data sought, consistent with the guidelines provided above.