Privacy Policy

Data we process

• Account: phone number, name, e-mail (optional), language, company memberships and role.
• Drivers: languages spoken, vehicle (plate, make/model, class, capacity), documents if uploaded, rating, completed job count.
• Location (drivers only): precise location only while the driver is online, on a job or has an active job — never while offline. Shown to the driver’s own companies and, during a trip, to that trip’s passenger.
• Jobs: pickup/drop-off addresses and times, flight number, passenger name, phone and language entered by the company, job status history, prices and driver payouts.
• Devices: device identifier and push notification token; session records.
• Passenger tracking page: no account; we store when the link was opened and an optional rating and comment.

Why we process it

• To provide the service: sign-in, offering and assigning jobs, live tracking, notifications, settlement statements (performance of a contract).
• Security and fraud prevention: rate limits, session protection, audit trail of job events (legitimate interest).
• Legal obligations: accounting records of completed jobs and payments kept by the companies.

Who receives it

The company you work with (or that booked your transfer) sees the data needed for the job. A driver working for several companies is shown to the others only as “busy” — never their location or job details. We use the following processors, bound by data processing agreements:

• Server and database hosting: Netcup GmbH (Germany, EU)
• Verification codes and passenger messages: Meta Platforms (WhatsApp Business), Twilio (SMS)
• Push notifications: Google Firebase Cloud Messaging, Apple Push Notification service
• Maps, address suggestions and traffic-aware times: Google Maps Platform; map tiles: OpenFreeMap
• Flight status: AeroDataBox (only the flight number and date are sent)

Retention

• Detailed location trail: 90 days, then deleted automatically. Live position is kept only in memory for a few minutes.
• Verification codes: 5 minutes. Sessions: up to 30 days of inactivity.
• Account data: until you delete your account. Completed job and payment records are kept without your identity for the companies’ statutory accounting periods.

Your rights

You can access, correct, export or delete your data and object to processing. Delete your account in the app (Profile → Delete my account), in the panel (Settings → Security), or via /account-deletion. For other requests write to [email protected]. You may also complain to your data protection authority.

Permissions in the driver app

• Location: to receive nearby jobs and share your position with your company and passenger while you are online. A persistent notification is shown whenever location is in use.
• Notifications: to alert you about new job offers, assignments and cancellations.
• Phone: only when you tap “call passenger” or “call company”.

Children

Veyrota is a business tool and not directed at children under 16.

Changes

We will announce material changes in the app and on this page before they take effect.