Legal

Privacy Policy

01

Who is the data controller

[LEGAL ENTITY], registered at [ADDRESS]. Contact: privacy@safrah.app.

02

What we collect

Account info (name, email, phone, password hash). Booking info (travel dates, driver chosen, pickup/drop-off, special notes). Payment info (handled by [PAYMENT PROCESSOR]; we never see full card numbers). Communications (messages exchanged in-app or via support email). Technical (IP address hashed for spam mitigation, browser, device info).

03

Why we use it

Pending review

To run the booking marketplace. To prevent fraud, comply with anti-money-laundering rules, and respond to lawful requests. To improve the product. To send marketing emails (consent — opt out anytime).

04

Who sees your data

Drivers see your name, contact details, and booking notes only after a match is confirmed. Sub-processors include our payment processor, hosting provider (Vercel + Supabase), email sender (Resend), error monitoring (Sentry). All bound by data-processing agreements. We do not sell personal data.

05

International transfers

Pending review

Some sub-processors are based outside Georgia and the GCC. Transfers rely on Standard Contractual Clauses or equivalent safeguards.

06

How long we keep it

Account: until you delete it. Bookings: 7 years for tax/accounting compliance. Marketing consent: until you opt out. Server logs: 30 days.

07

Your rights

Pending review

You can request access, correction, or deletion of your personal data at privacy@safrah.app.

08

Cookies

Strictly-necessary cookies for login and session. Optional analytics cookies (consent-gated).

09

Children

Safrah is not for children under 13.

10

Updates

Material changes will be emailed to all account holders 14 days before they take effect.

Questions about this privacy policy?

We're happy to walk you through anything that isn't clear. Reach out and a real human will reply.

Contact us Back to top

Document slug: privacy