Legal

Privacy Policy

Last updated: June 7, 2026

1. Introduction

LexBran Group, LLC d/b/a RidePermit ("RidePermit," "we," "us") provides an e-bike compliance platform for California K–12 school districts. This Privacy Policy explains what information we collect from parents, students, and district staff, how we use it, and the choices you have. By using our website or services you agree to the practices described here.

2. Information we collect

  • Account information — name, email, phone number, and district affiliation for parents and staff.
  • Student permit data — first name, grade, school, bike class, and proof-of-training completion. We do not collect Social Security numbers or biometric identifiers.
  • Payment information — processed by our PCI-compliant payment processor; we do not store full card numbers.
  • Usage data — pages viewed, device type, and approximate location for security and product improvement.

3. How we use information

We use information to issue and verify permits, deliver training records to districts, process optional insurance, respond to support requests, and comply with legal obligations including the California Consumer Privacy Act (CCPA) and the Family Educational Rights and Privacy Act (FERPA) where applicable.

4. Sharing

We share permit and training records with the student's school district. We share payment data with our processor. We do not sell personal information. We may disclose information when required by law or to protect the rights and safety of users.

5. Children's privacy

RidePermit is designed for use by parents and districts on behalf of K–12 students. Accounts must be created by a parent or authorized district employee. We collect the minimum student data required to issue a permit. For detailed information about our compliance with the Children's Online Privacy Protection Act (COPPA) and the rights of parents with respect to student data, see §5.1 below.

5.1 COPPA Compliance — Children Under 13

RidePermit is designed for use by parents and legal guardians on behalf of K–12 students, some of whom may be under the age of 13. We comply with the Children's Online Privacy Protection Act (COPPA), 15 U.S.C. §6501 et seq., and the FTC's COPPA Rule, 16 C.F.R. Part 312.

No direct collection from children.

RidePermit does not knowingly collect personal information directly from children under the age of 13. All accounts are created by and held by parents or legal guardians who are at least 18 years of age. Student information — including name, date of birth, grade, school, and e-bike details — is entered by the parent or legal guardian on the child's behalf. We do not invite, encourage, or accept information submitted directly by children under 13.

Parent is the account holder.

The parent or legal guardian is the sole account holder on RidePermit. The student does not have an account, does not log in, and does not interact directly with the platform. All data related to the student is submitted, managed, and controlled by the parent or legal guardian.

What student data we collect.

Through the parent's permit application we collect the following information about the student:

  • First name and last name initial
  • Date of birth (used for age verification only)
  • Grade level
  • School name and district
  • E-bike make, model, class, and serial number
  • Safety training completion timestamp

How we use student data.

Student data is used solely to:

  • Issue and verify the permit
  • Validate age and bike class against California Vehicle Code §313
  • Share training and permit records with the student's school district
  • Generate the QR-coded permit sticker

We do not use student data for advertising, marketing, analytics, or any purpose unrelated to permit issuance and verification.

Parental rights under COPPA.

As the parent or legal guardian you have the right to:

  • Review the personal information we have collected about your child
  • Request correction of inaccurate information about your child
  • Request deletion of your child's information from our systems
  • Refuse further collection or use of your child's information

To exercise any of these rights contact privacy@ridepermit.com. We will respond within 30 days.

Data sharing involving children.

We share student permit and training records only with the student's enrolled school district. We do not sell, rent, or share student data with advertisers, data brokers, or any third party for commercial purposes. We do not share student data across districts.

If you believe we have inadvertently collected information directly from a child under 13 without parental consent, please contact privacy@ridepermit.com immediately and we will delete that information promptly.

6. Data retention and security

We retain permit records for the duration of the permit plus seven years to support district audits, then delete or de-identify the data. We use encryption in transit and at rest and follow industry-standard access controls.

7. Your rights

California residents may request access to, correction of, or deletion of their personal information, and may opt out of certain sharing. To exercise these rights, contact privacy@ridepermit.com.

8. Changes

We may update this policy from time to time. Material changes will be communicated via email or an in-product notice.

9. Contact

LexBran Group, LLC d/b/a RidePermit · 22431 Antonio Pkwy B160-689 · Rancho Santa Margarita, CA 92688 · privacy@ridepermit.com