Privacy Policy

Effective Date: May 22, 2026

TOLACARD ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use the TOLACARD platform, including our mobile application, website, and all related services (collectively, the "Platform").

1. Information We Collect

1.1 Information You Provide

  • **Account Information:** Name, mobile number, and profile photo
  • **Payment Information:** Payment method details processed securely through Stripe (we do not store full card numbers)
  • **Ride Information:** Pickup and drop-off addresses, ride history, and preferences
  • **Communications:** Messages sent through the concierge or support channels

    • 1.2 Information Collected Automatically

  • **Location Data:** GPS coordinates when you request a ride or use location-based features. We collect precise location during active rides and approximate location at other times (with your permission).
  • **Device Information:** Device type, operating system, unique device identifiers, and app version
  • **Usage Data:** Features accessed, timestamps, session duration, and in-app interactions
  • **Log Data:** IP address, browser type, and error logs

    • 1.3 Information from Third Parties

  • **Stripe:** Payment processing and verification data
  • **Mapbox:** Location and mapping services for ride routing
  • **Telegram:** If you connect your Telegram account, we receive your Telegram user ID

    • 2. How We Use Your Information

    We use the information we collect to:

  • Create and manage your account
  • Process ride requests and match you with drivers
  • Calculate fares and process payments
  • Send ride status notifications and important service updates
  • Power the AI concierge and customer support
  • Manage membership benefits and event reservations
  • Improve platform safety, reliability, and performance
  • Comply with legal obligations and prevent fraud

    • 3. Location Data

    Location data is essential to the ride experience. We use it to:

  • Connect you with nearby drivers
  • Provide accurate pickup and drop-off routing
  • Calculate distance-based fares
  • Display live driver tracking during active rides

    • You can disable location permissions in your device settings, but this will significantly limit ride functionality.

    4. Sharing Your Information

    We do not sell your personal information. We share data only in the following circumstances:

  • **With Drivers:** We share your first name, pickup location, and destination with the driver assigned to your ride
  • **With Service Providers:** Stripe (payments), Mapbox (mapping), and cloud infrastructure providers who process data on our behalf under strict confidentiality agreements
  • **For Legal Compliance:** When required by law, court order, or to protect the rights and safety of our users or the public
  • **Business Transfers:** In connection with a merger, acquisition, or sale of assets, your information may be transferred with appropriate notice

    • 5. Data Retention

    We retain your personal information for as long as your account is active or as needed to provide services. Ride history and transaction records are retained for a minimum of 3 years for legal and accounting purposes. You may request deletion of your account and associated data at any time.

    6. Your Rights

    Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Request deletion of your account and personal data
  • Opt out of non-essential communications
  • Withdraw location permissions through your device settings

    • To exercise these rights, submit a support request at drivetola.com/support.

    7. Data Security

    We implement industry-standard security measures including encryption in transit (TLS), encrypted storage, and access controls. However, no system is completely secure. We encourage you to use a strong, unique password and to notify us immediately of any suspected unauthorized access.

    8. Children's Privacy

    The Platform is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has created an account, we will promptly delete the associated information.

    9. Third-Party Links

    The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies.

    10. Changes to This Policy

    We may update this Privacy Policy from time to time. We will notify you of material changes via the app or email at least 14 days before they take effect. Continued use of the Platform after changes constitutes acceptance of the updated policy.

    11. Contact Us

    If you have questions or concerns about this Privacy Policy or your personal data, please contact us at:

    TOLACARD

    drivetola.com/support