D
Drivon
Sign In
D
Drivon
Sign In

Drivon — Privacy Policy

Last updated: February 2026

1. Who we are

Drivon is an on-demand marketplace connecting riders and customers with drivers, movers, tow trucks, mobile mechanics, tire technicians, delivery couriers, luxury chauffeurs, and mobile car-wash services. This policy explains what data we collect, why, who we share it with, and how you can access or delete your data.

2. Data we collect

  • Account: name, email, phone, hashed password, profile role (customer / supplier / admin), preferred language.
  • Location: pickup + drop-off coordinates for the orders you create. Live location while an order is in progress (drivers only).
  • Payment: we do NOT store card numbers. PayPal handles all payments; we keep only the PayPal transaction id, amount, currency, and payment status. For Turkish customers whose local currency is not directly supported by PayPal, we convert the amount to USD using European Central Bank rates via frankfurter.dev (fallback: open.er-api.com) and store both the original TRY amount and the USD amount on the transaction record for reconciliation.
  • Order history: pickup / drop-off addresses, category, fare breakdown, driver/customer id, timestamps, ratings.
  • Chat: messages between riders and drivers during an order.
  • Push notification tokens: Firebase Cloud Messaging device tokens so we can notify you about ride status, split-payment requests, and weekly earnings (drivers).

3. Third parties we share data with

  • PayPal (Live): receives your name, email, order total, currency to process the payment. See PayPal's privacy policy.
  • OSRM / Nominatim: anonymous coordinate pairs are sent to the OSRM demo server to compute road distance + reverse-geocode addresses. No account identifiers are attached.
  • Firebase Cloud Messaging: device tokens + notification payloads (no PII beyond your device id).
  • Frankfurter.dev / open.er-api.com: only the currency pair (e.g. TRY→USD) is sent — no user data.

We do NOT sell your data. We do NOT use ad-tracking SDKs.

4. Your rights

  • Access & export: download all your data as JSON fromAccount → Download my data.
  • Deletion: permanently delete your account fromAccount → Delete my account. Order history is retained anonymously for financial audit only.
  • Rectification: update your profile from the same page.
  • Portability: the JSON export uses a standard schema.

5. Data retention

  • Active accounts: as long as the account exists.
  • Deleted accounts: profile fields are erased immediately; order + payment records are kept anonymized for 7 years to comply with financial-audit regulations in Israel and Turkey.
  • Push tokens: cleared immediately on logout.

6. Security

All traffic is TLS 1.2+. Passwords are hashed with bcrypt (cost 12). Admin access requires JWT + role check. PayPal webhooks are signature-verified against our production webhook id before any DB write.

7. Children

Drivon is not intended for children under 16.

8. Contact

Questions? Email privacy@drivon.com.