Privacy Notice
Effective as of February 18, 2026, and supersedes and replaces any prior Privacy Notice.
Advance Transit, Inc. (“we,” “our,” “us,” “organization”) respects your privacy and is committed to protecting the personal information you provide or that we obtain from or about you, including through our processors. This Privacy Notice applies when you use our website, interact with us apart from our website (such as through telephone calls, emails and filling out forms or applications). This Privacy Notice also applies to use of our Access AT Mobile App (the “APP”), and Addendum A to this Privacy Notice covers certain aspects specific to personal information processed through that App. While various laws define personal information differently, in general terms it means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to individuals (or under certain laws a household). This Privacy Notice describes the types of personal information we collect, how we use it, and the choices you may have regarding that information. Where we use the terms “process” or “processing” in relation to personal information, that means any operation or set of operations performed, whether by manual or automated means, on personal information or on sets of personal information, such as the collection, use, storage, disclosure, analysis, deletion or modification of personal information. A “processor” means an individual who, or legal entity that, processes personal data on our behalf (under certain laws a processor may be referred to as a service provider). As used in this Privacy Notice, the term “disclose” means to disclose, provide to, or provide access to personal information to those outside our organization, and includes situations where the personal information is obtained and processed directly by them on our behalf.
1. Categories of Personal Information We Process
We process the following types of personal information:
Identifiers, such as such as your name, email address, physical/postal address, and/or phone number, when you voluntarily provide that information (e.g., through forms, newsletter sign-ups)
Technical Data, such as your IP address, browser type and version, time zone setting, browser plug-in types, device type, operating system and platform of the devices you use to access this website
Usage Data, about how you use our website, such as the pages you visit, time spent on those pages, and your interactions with the website
Communication Data, such as your preferences in receiving marketing communications from us and communication history, including copies of email and other correspondence if any
Cookies, such as cookies necessary to operate and use the website; cookies that perform analytics of how the site is used; cookies that set preferences for how users use the website
2. Sources from Which We Obtain Your Personal Information
We obtain personal information directly from you, including any forms you fill out, and any publications you subscribe to. Information also may be obtained about you from our processors.
3. Our Purposes for Processing Your Personal Information
We use your personal information to:
- Provide, operate, and maintain our website and services
- Improve, personalize, and expand our website and user experience
- Understand and analyze how you use our website
- Communicate with you, including sending you updates and promotional messages when you’ve opted in
- Respond to your inquiries and provide customer support
- Detect and prevent fraudulent or unauthorized activity
- Protect our interests and rights, and in some case the interests and rights of others
- Comply with legal obligations
We also use your personal information for the purposes identified in Section 4 below.
a. Cookies
Cookies are small text or data files that are placed on your computer or other device that you use to access our website. Cookies provide a sort of memory for web pages. Cookies may be distinguished by who is setting the cookie on your device when you visit a website. A “first party cookie” refers to cookies set by us as the controller or operator of the site or by a processor acting on our behalf. On the other hand, a “third party cookie” refers to cookies that are set by other controllers that do not operate the particular site. Also, cookies are sometimes characterized by their duration. A “session cookie” is a cookie that is automatically deleted from your computer or device when you close your browser, whereas a “persistent cookie” is a cookie that remains stored in your computer or device until a defined expiration date and/or until you take steps to remove it.
We use necessary cookies to enable use of our website, and non-necessary cookies to enhance your browsing experience, and perform analytics to enable us to understand how our website is used and to improve our website. These cookies may remember your preferences and settings and enable third-party tools that assist with analytics and communication.
You may be able to adjust your cookies preferences and even remove and disallow cookies through your browser settings. While you may be able to adjust your browser settings to remove necessary cookies, these cookies are not optional if you wish to use the features of the website or services to which they relate. While the non-necessary cookies identified above are optional, we recommend their use in order to provide certain direct or indirect benefits to you (e.g., the efficiency of use and improvement of our site or services).
4. Processors
We use the following tools and services provided by our processors outside our organization to deliver and optimize our website:
eTransit Platform
Our website is powered by the eTransit platform, a multi-tenant web application developed and maintained by Station Four. eTransit enables real-time transit data integration, trip planning tools, service alerts, and other features. It may collect and process data necessary to deliver these services, such as IP addresses, location inputs, and browser types.
You can learn more about eTransit and its privacy practices at its website: https://www.stationfour.com/privacy-policy
Google Analytics
We use Google Analytics to understand how visitors engage with our website. Google Analytics collects information such as your IP address, browser type, referring/exit pages, and time spent on pages. This helps us evaluate and improve site performance.
You may learn more about "How Google uses information from sites or apps that use our services", (located at www.google.com/policies/privacy/partners/, or any other URL that Google may provide from time to time).
To provide website visitors the ability to prevent their data from being used by Google Analytics, it has developed the Google Analytics opt-out browser add-on for websites using the supported version of Google Analytics JavaScript (analytics.js, gtag.js) located here: https://tools.google.com/dlpage/gaoptout
You can learn more about Google Analytics and its privacy practices at its website: https://developers.google.com/analytics
Microsoft Clarity
Microsoft Clarity provides session replays, heatmaps, and user interaction metrics. This helps us analyze user behavior and improve design and usability.
You can learn more about Microsoft Clarity and its privacy practices at its website: https://clarity.microsoft.com/
SendGrid
We use SendGrid, a service provided by Twilio, to manage email communications. This includes transactional emails, alerts, and newsletters (when subscribed). Personal data such as your email address may be processed to send and track communications.
You can learn more about Twilio and its privacy practices at its website: https://www.twilio.com/en-us
We may disclose certain of your personal information to one or more of these processors so that they can provide the services we have engaged them to provide.
5. Disclosure of Personal Information to Third Parties
We do not sell your personal information.
We may share some or all of your personal information with third-parties (who are not our processors), and for the reasons, identified below:
|
Category of Third Party |
Purpose for Disclosing Personal Information |
|
insurers
|
in connection with obtaining liability and/or other insurance coverage to protect our rights, interests, and property, and in some cases the rights, interests and/or property of others; in connection with claims brought by or against our organization and/or our personnel as needed |
|
legal counsel
|
for legal representation and advice, including in connection with claims by and against our organization and/or its personnel; to protect our rights, interests, and property, and in some cases the rights, interests and/or property of others |
|
government authorities (such as state departments of transportation that are involved with our activities) |
to comply with applicable laws, regulations, rules and the like, including any reporting obligations; to comply with legal process or governmental requests or orders served on us, including to meet national security requirements, and in connection with investigations; to perfect our interests in property or rights |
|
law enforcement authorities
|
to comply with legal process or governmental requests or orders served on us, including to meet national security requirements, and in connection with investigations; protect the security and integrity of our software, systems, products and services; protect and enforce our rights, policies, and agreements; protect the interests of users of our websites, mobile apps (if any), and services, the interests of others acting on our behalf, and the public (where applicable), from harm and/or illegal activities; detect, prevent and/or otherwise address fraud, security or technical issues; respond to an emergency which we believe in good faith requires us to disclose information to assist in preventing the death, serious bodily injury, or harm to any individual, or harm to the rights, business interests or property of individuals or entities
|
|
courts and other tribunals
|
to comply with legal process, orders and the like issued by such tribunal, including to meet national security requirements, as well as investigations; in connection with claims brought by or against our organization and/or its personnel; to protect our rights, interests, and property, and in some cases the rights, interests and/or property of others; protect the security and integrity of our software, systems, products and services; protect and enforce our rights, policies, and agreements; protect the interests of users of our websites, mobile apps, and services, the interests of others acting on our behalf, and the public (where applicable), from harm and /or illegal activities; detect, prevent and/or otherwise address fraud, security or technical issues, respond to an emergency which we believe in good faith requires us to disclose information to assist in preventing the death, serious bodily injury, or harm to any individual or their property, or harm to the business interests or property of individuals or entities
|
|
experts; investigators
|
in connection with claims brought by or against our organization and/or its personnel; to protect our rights, interests, and property, and in some cases the rights, interests and/or property of others |
|
litigants and their legal counsel |
in connection with claims brought by or against our organization and/or its personnel |
|
healthcare providers |
respond to an emergency which we believe in good faith requires us to disclose information to assist in preventing the death, serious bodily injury, or harm to any individual; to assist in litigation for a client |
Notwithstanding any restrictions or limitations on our use of your personal information, we may transfer, sell or assign your personal information to third parties as a result of the sale, merger, consolidation, change in control, transfer of substantial assets, or a bankruptcy, reorganization or liquidation proceeding, involving us.
6. Data Security
We have put in place security measures intended to protect the personal information we process. We take reasonable administrative, technical, and physical measures to safeguard against unauthorized access to, use, alteration, destruction, disclosure and transfer of, and accidental loss, alteration, and destruction, of the personal information we process.
Unfortunately, no data transmission over the Internet or method of storage can be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, we cannot ensure or guaranty the security of any personal information. Any personal information you transmit to us is at your own risk.
7. Data Retention
Your personal information (other than cookies, which are covered in Section 3.a above) is maintained in paper and/or electronic documents/records in accordance with our document retention policy. Time periods generally range from 3 to 7 years.
In some cases certain personal information may be retained for an extended period of time, or even indefinitely (depending on the circumstances) as follows:
- to comply with legal obligations;
- to protect or enforce our rights or defend us against claims and legal actions;
- to prove ownership of property
- to prove resolution of claims/disputes
- for historical reasons pertaining to our business (for example, to analyze trends over time, understand past business practices, support future strategies and decision making, provide context for current operations, support research and historical analysis, and/or document significant events in our organization’s history)
While we maintain such personal information, we continue to apply our security standards and procedures to protect it.
We destroy your personal information when it will no longer be retained by us, using methods designed to render the personal information unreadable, undecipherable and irretrievable.
8. Your Rights
Depending on your location and applicable laws, you may have certain rights in connection with your personal information, including the right to:
- Confirm whether or not your personal information is being processed, and if so to access and obtain a copy of your personal information
- Correct your personal information
- Delete your personal information
- Object to or restrict to processing of your information
- Withdraw consent at any time for processing of your personal information based on consent
- Opt out of sale of personal information, or sharing of personal information for behavioral, cross-contextual, or targeted advertising
- Lodge a complaint with a supervisory authority
If you believe you have a right to and wish to exercise any of these rights, please contact us at rideAT@advancetransit.com. We will determine whether such right(s) are applicable to you, and we will respond in accordance with applicable law. Please note that none of the rights might apply to you, and even where they do there might be exceptions to or limitations on our obligation to comply with your requests.
9. Children's Privacy
Our website is not intended for children under the age of 13, and we do not market to or intend to solicit personal information from children under the age of 13 from our online activities or otherwise. Children under the age of 13 may be able to use the Access AT service, and in such cases we may process their personal information provided to us by their parents or legal guardians. We do not otherwise knowingly collect or process any personal information of individuals under the age of 13, except with permission of such child’s subjects’ parent(s) or legal guardian(s), or where otherwise required by applicable law. We take children’s privacy seriously, and encourage parents, and legal guardians where applicable, to play an active role in their children’s online experience at all times. If you have reason to believe a child under the age of 13 has provided us with any personal information not authorized by a parent or legal guardian, please contact us using one of the methods provided in Section 14 and request that such information be deleted from our records.
10. Provision of Comments
Our Facebook, LinkedIn, Instagram, or other social media sites/pages where applicable, may contain features that allow you to disclose information and content, including personal information, via blogs, reviews, public profiles, and the like (collectively defined here as “Comments”). All Comments are provided by you voluntarily and at your sole discretion. Please note that Comments are public information and can be read, collected, and used by us, other users of such forums, and the general public. Comments could be used by persons outside our organization to send you unsolicited messages or for other purposes. We are not responsible for the personal information or other information or content you choose to submit in Comments.
11. Opt-Out/Unsubscribe
If you sign up/subscribe to our newsletter(s) or other publications or notifications or marketing content (if any) and you no longer wish to receive the same, you may unsubscribe by using the opt-out/unsubscribe link located within each newsletter or other publication.
12. Third Party Services
Our website may contain links to third party websites or services (“Third Party Services”). If you access any Third Party Services, you will leave our website. We do not control those Third Party Services or their privacy practices, which may differ from our practices. We are not responsible for the privacy practices or content of Third Party Services. We do not make any warranty or representation regarding, nor do we endorse, any such Third Party Services or the information or content appearing on their websites or any of the products or services described therein, or the accuracy of the same. The personal information you choose to provide to or that is collected by these Third Party Services is not covered by our Privacy Notice. We encourage you to review the privacy notices/policies of such Third Party Services before submitting your personal information. If you decide to access linked such Third Party Services, you do so at your own risk.
13. Changes to This Privacy Notice
We may change our Privacy Notice at any time. Changes to our Privacy Notice will be effective when posted and the new effective date will be identified. If we have referenced this Privacy Notice in connection with a contract with you that requires other specific means of providing you with notice of changes to the Privacy Notice, we will provide notice to you as required by the contract. You should review the Privacy Notice from time to time to check for changes.
14. Contact Us
If you have any questions or concerns about this Privacy Notice or your personal information, you may contact us at:
Advance Transit, Inc.
Van Chesnut Transit Operations Center
120 Billings Farm Road
White River Junction, VT 05001
rideAT@advancetransit.com
(802) 295-1824
ADDENDUM A – ACCESS AT MOBILE APP
This Addendum supplements our general Privacy Notice and covers our processing of personal information specific to our Access AT mobile application (the “App”) for on-demand transit services. The other provisions of our general Privacy Notice apply to our processing of personal information in connection with the App, except that if there is any inconsistency between those provisions and the ore specific provisions of this Addendum, the provisions of this Addendum will apply instead.
1. Categories of Personal Information We Process
We process the following types of personal information in connection with use of the Access-AT App:
- Identifiers, such as such as your name, email address, physical/postal address, and/or phone number, when you voluntarily provide that information (e.g., through contact forms, newsletter sign-ups) that are in your profile that may be accessed through the service
- Technical Data, such as your IP address
- Account Information: To log in and manage your rides, we collect your phone number and/or email address. This information links you to your paratransit eligibility profile.
- Precise Location Data: Should you decide to make use of the Access-AT app to book or track your trips, the app will collect the precise geolocation (GPS) of your mobile device when the app is running in the foreground (on-screen) or background (if you have granted permission). This is necessary to:
- Confirm your pickup and drop-off locations.
- Track your vehicle’s arrival in real-time.
- Provide accurate ETAs.
- Ride History: We maintain a record of your past and upcoming trips, including dates, times, and origin/destination addresses.
- Device Information: We collect technical data such as your device model, operating system (iOS/Android), and unique device identifiers to ensure app stability and security.
2. Sources from Which We Obtain Your Personal Information
We obtain personal information directly from you in connection with use of the App, and from technological means, including geolocation and trip data, as described above in Section 1.
3. Our Purposes for Processing Your Personal Information
Data collected through Access-AT is used strictly to:
- Fulfill Service Requests: Dispatch vehicles to your requested pickup location and navigate drivers to your destination.
- Communications: Send you automated SMS text messages, push notifications, or emails regarding vehicle arrival, ride delays, or service cancellations.
We also use your personal information for the purposes identified in Section 4 below. We also may disclose personal information connected with the App as described in this Addendum as described in Section 5 of the Privacy Notice.
4. Processors
The Access-AT service is powered by software from Via Transportation, Inc. ("Via"), a third-party technology provider. When you use the Access-AT app, Via collects and processes your data on behalf of Advance Transit to facilitate your rides. While Advance Transit is the data controller, Via acts as the data processor.
For more information on Via’s data practices, you may review their Privacy Notice. https://ridewithvia.com/legal/privacy
5. Permissions & User Control
You have control over the following settings within your mobile device:
- Location Services: You can disable location tracking at any time in your device settings. However, doing so may require you to manually enter pickup addresses and may prevent you from seeing your vehicle’s live location.
- Notifications: You can opt out of push notifications, though we recommend keeping them enabled to receive critical alerts about your ride status.