Legal
Privacy Policy
Effective date: 1 May 2025
1. Introduction
Siza Technologies Ltd ("Siza", "we", "us") is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights in relation to it.
This policy applies to all users of the Siza Platform, passengers, drivers, fleet owners, advertisers, and visitors to our website.
2. Data We Collect
- Account data: Name, phone number, email address, profile photo, and identity documents (for KYC verification of drivers).
- Location data: Real-time GPS coordinates during trips and, for drivers, during active sessions on the platform. Location is used for matching, routing, and safety monitoring.
- Payment data: Wallet balances, transaction history, and payout details. We do not store raw card data, payment processing is handled by our licensed payment partners.
- Usage data: App usage patterns, trip history, ratings, and device identifiers (operating system, device model, app version).
- Communications: In-trip chat messages and support tickets. These are retained for safety review and dispute resolution.
3. How We Use Your Data
- Providing and improving the Siza Platform and matching services
- Processing payments and managing wallets
- Verifying driver identity and vehicle compliance
- Sending trip confirmations, OTPs, receipts, and service updates
- Detecting and preventing fraud and abuse
- Complying with legal and regulatory obligations
- Providing customer support
4. Legal Basis for Processing
We process your personal data on the following legal bases:
- Contract performance, to provide the services you requested
- Legitimate interests, fraud prevention, safety, platform improvement
- Legal obligation, regulatory compliance in Mauritius and Nigeria
- Consent, where you have explicitly agreed (e.g. marketing communications)
5. Location Data
- Passengers: Location is collected during trip booking and active trips only. We do not track your location when the app is closed.
- Drivers: Background location is collected while you are online on the Driver app to enable dispatch and safety monitoring. You can go offline at any time to stop location sharing.
6. Sharing Your Data
We share your data only as necessary:
- With Drivers/Passengers: Limited trip-relevant details (first name, vehicle info, ETA) are shared between matched parties.
- With Fleet Owners: Trip and earnings data relating to their registered vehicles and drivers.
- Service providers: Cloud hosting (MongoDB Atlas), push notifications (Firebase), media storage (Cloudinary), email delivery (Resend), and payment processors, all under data processing agreements.
- Regulators: Where required by law in Mauritius or Nigeria.
We never sell your personal data to third parties.
7. Data Retention
Account data is retained for as long as your account is active and for 7 years thereafter for legal and audit purposes. Trip records are retained for 5 years. Location data is aggregated and anonymised after 90 days. Chat messages are retained for 12 months.
8. Your Rights
Depending on your jurisdiction, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data (subject to legal retention requirements)
- Restrict or object to certain processing
- Receive your data in a portable format
- Withdraw consent where processing is based on consent
To exercise these rights, contact privacy@sizaride.com. We will respond within 30 days.
9. Cookies and Tracking
Our website uses essential cookies for functionality and analytics cookies (via Plausible Analytics, privacy-first, no personal profiling) to understand site usage. No advertising trackers or third-party cookies are used.
10. Security
We use industry-standard encryption (TLS in transit, AES-256 at rest), access controls, and regular security reviews to protect your data. In the event of a data breach affecting your rights, we will notify you and relevant authorities as required by law.
11. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via in-app notification or email at least 14 days before they take effect.
12. Contact
For privacy queries, contact our Data Protection Officer at privacy@sizaride.com or write to: Siza Technologies Ltd, Port Louis, Mauritius.