Privacy Policy

1. Who we are

TaxiFlow is a service provided by:

2. When TaxiFlow acts as controller and when we act as processor

TaxiFlow generally acts as a data controller when we process personal data for our own business purposes, such as operating our website, handling contact requests, sales, support, billing, security, product administration, and service improvement.

When TaxiFlow provides software, apps, booking systems, dispatch systems, dashboards, or related platform services to taxi companies or other business customers, the relevant customer will generally act as the data controller for service data processed within its business operations, while TaxiFlow will generally act as a data processor or sub-processor on that customer’s behalf.

3. What personal data we may collect

Depending on how our services are used, we may process the following categories of personal data:

• Identity and contact data, such as name, phone number, email address, and business details
• Account and profile data, such as login details, permissions, roles, settings, and verification status
• Booking and transport data, such as pickup address, destination, booking times, ride notes, fare-related data, and booking history
• Driver and vehicle-related data, such as driver name, status, availability, vehicle information, and location data where relevant features are used
• Communication data, such as support requests, emails, forms, SMS-related operational messages, and correspondence
• Technical data, such as IP address, browser type, device details, logs, session information, and troubleshooting data
• Billing, payment, and transaction-related data where relevant services are used

4. Booking without prior login

TaxiFlow may allow users to place a booking without logging in first. In that case, the user can still submit a booking by providing the information needed to process the ride, such as phone number and booking details.

To manage the booking, communicate ride updates, reduce duplicate records, maintain service continuity, and allow the user to later access booking history, TaxiFlow may automatically create a customer profile or account record linked to the provided phone number and related booking information, even if the user did not complete a traditional sign-up flow in advance.

5. Phone number and OTP access

Where supported, users may later access their bookings, ride history, or related account data by verifying their phone number through a one-time password (OTP) process.

We use phone number verification and OTP-based access to help confirm user identity, protect account access, and reduce unauthorized access to booking information.

6. How we use personal data

We use personal data to:

• provide, operate, manage, and improve the TaxiFlow service
• create, manage, and fulfill bookings and related service flows
• communicate booking confirmations, updates, support messages, and operational notices
• authenticate users, verify phone numbers, process OTP access, and secure accounts
• monitor performance, quality, reliability, and system security
• detect, prevent, and investigate abuse, fraud, unauthorized access, and technical incidents
• comply with legal, regulatory, contractual, and accounting obligations
• maintain internal records, reduce duplicate customer profiles, and support service continuity

7. Legal basis for processing

We process personal data where necessary to perform a contract, provide a requested service, comply with legal obligations, pursue legitimate business interests, or where you have given consent.

Where consent is required, such as for certain non-essential cookies or optional communications, you may withdraw that consent at any time.

8. How we share personal data

We may share personal data with the following categories of recipients where necessary:

• our customers and their authorized administrators where TaxiFlow is used as a platform for their business
• hosting, infrastructure, cloud, communications, messaging, security, analytics, payment, and technical service providers
• professional advisers, auditors, legal representatives, and public authorities where required by law or necessary to protect rights and safety
• business counterparties in connection with a merger, restructuring, financing, acquisition, or sale of assets where legally permitted

We do not sell personal data.

9. International data transfers

Some service providers or technical sub-processors may process personal data outside the EU/EEA. Where that happens, we aim to ensure that appropriate safeguards are in place in accordance with applicable data protection law.

10. Retention of personal data

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, as required by contract or law, or as needed to establish, exercise, or defend legal claims.

Retention periods may vary depending on the type of data involved, such as support records, booking data, customer account records, verification logs, security logs, customer agreements, or accounting records.

11. Security

We use reasonable technical and organizational measures designed to protect personal data, including access controls, permission management, verification flows, logging, monitoring, secure development practices, and system protection measures appropriate to the risks involved.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Your rights

Depending on applicable law, you may have the right to request:

• access to your personal data
• correction of inaccurate or incomplete data
• deletion of personal data
• restriction of processing
• objection to certain processing
• data portability where applicable
• withdrawal of consent where processing is based on consent

You may also have the right to lodge a complaint with the relevant supervisory authority.

13. Account deletion and data deletion requests

Where TaxiFlow supports account or profile access, users may request deletion after verifying access to their account, including by phone number and OTP where applicable.

Because some users may first interact with TaxiFlow by booking without a prior login, deletion requests may still relate to a profile or account record that was automatically created from the first booking and linked to the submitted phone number.

If you want your account or profile deleted, you may request deletion through the app where such functionality is available, or by contacting us at info@taxiflow.io.

Upon receiving a valid deletion request, we will delete or anonymize personal data that no longer needs to be retained. Certain information may need to be retained for a limited period for legal, security, fraud prevention, accounting, dispute resolution, operational integrity, or regulatory reasons.

14. Cookies and similar technologies

TaxiFlow may use cookies and similar technologies to operate the website, maintain security, remember preferences, analyze usage, and improve the user experience. Please see our Cookie Policy for more information.

15. Children’s privacy

Our services are not intended to knowingly collect personal data from children in violation of applicable law. If you believe that personal data relating to a child has been processed improperly, please contact us so we can investigate.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data processing practices. The latest version will always be published on this page.

17. Contact