Privacy Policy

1. Data controller

This Privacy Policy governs the processing of personal data carried out through the DriverX mobile application, the driverx.cl website, administrative panels, support channels and related services, collectively the “Platform”.

Controller: ALTO Consultora e Inversiones Limitada · RUT 76.167.963-5 · Quilaco, Biobío Region, Chile · contacto@driverx.cl · +56 9 7513 1969.

2. Legal framework and scope

DriverX processes personal data lawfully, fairly, transparently, proportionately and only for the disclosed purposes. This Policy takes into account Chilean Law No. 19,628 on Protection of Private Life, Law No. 21,719 modernizing personal data protection in Chile and creating the Personal Data Protection Agency, Law No. 19,496 on Consumer Protection and other applicable rules.

It applies to users who use the Platform to register, request quotes, request, book or pay for city rides, airport transfers, tours and other available services.

3. Personal data we may process

3.1 Identification and contact

• First and last name.
• Email address and phone number.
• Profile photo, when provided.
• Internal identifier, account information and information provided to support.

3.2 Authentication and security

• Email, protected credentials, session tokens and access logs.
• Information received from Google Sign-In or other authorized providers.
• Data required to verify email or phone.

3.3 Location, rides and bookings

• Approximate or precise device location, when authorized.
• Origin, destination, stops, route, date, time, distance and duration.
• History of requests, bookings, rides and tours.

3.4 Payments and wallet

• Transaction identifier, amount, currency, date and status.
• Payment method, payment token and partial data supplied by the processor.

DriverX does not directly store the full card number or security code.

3.5 Technical information

• IP address, device model, operating system and app version.
• Language, time zone, technical identifiers and notification token.
• Error, diagnostic, security and Platform activity logs.

3.6 Support and communications

• Questions, complaints, messages, tickets and information voluntarily attached.
• Support history and data needed to resolve incidents.

4. Purposes of processing

1. Create, verify and manage user accounts.
2. Authenticate identity and protect session security.
3. Allow quotes, requests, bookings and delivery of rides, transfers and tours.
4. Calculate routes, distances, duration, availability and estimated fares.
5. Provide drivers with the information needed to perform the service.
6. Manage payments, top-ups, refunds, receipts and balance movements.
7. Send confirmations, operational updates, support replies and security alerts.
8. Prevent fraud, impersonation, abuse and unauthorized access.
9. Handle questions, complaints, emergencies and incidents.
10. Comply with legal, tax, accounting and contractual obligations.
11. Improve Platform quality, security and performance.
12. Prepare internal statistics using aggregated or anonymized data.
13. Send promotional communications when authorized or legally permitted.

5. Legal bases

Depending on the purpose, processing may be based on the data subject’s consent, performance of a contract or pre-contractual measures, compliance with legal obligations, legitimate interests that do not override the rights of the data subject, establishment or defense of legal claims, and other grounds authorized by Chilean law.

When processing relies on consent, consent may be withdrawn without affecting processing carried out before withdrawal or processing that must continue under another legal basis.

6. Device permissions and sensitive data

Location

Used to select origin and destination, calculate routes and fares, determine coverage and facilitate the meeting between user and driver.

Camera and photos

Used to upload a profile photo, attach evidence to support requests or operate other features requiring images.

Notifications

Used to provide updates about bookings, rides, payments, support, security and relevant service changes.

Biometric authentication

When fingerprint or facial recognition is enabled, validation is generally performed by the operating system. DriverX seeks not to receive or store biometric templates, only the authentication result provided by the device.

7. Drivers, providers and third parties

To perform a ride, DriverX may share with the assigned driver the user’s name, pickup point, destination, location needed for the meeting, passenger count, special instructions and a contact method when necessary.

DriverX may also use providers for infrastructure, hosting, databases, maps, geocoding, routing, authentication, payments, email, notifications, support, analytics, diagnostics, fraud prevention and professional advice.

Technology services may include Google, Google Maps Platform, Google Sign-In, Firebase, Expo, Mercado Pago and infrastructure providers. Each provider may apply its own privacy policy.

DriverX does not sell or rent personal databases to third parties for independent advertising.

8. International transfers

Some providers may store or process information outside Chile. DriverX will adopt reasonable safeguards, considering the receiving country, purpose of transfer, contractual obligations of the provider and applicable technical and organizational protections.

9. Retention and security

Data will be retained for as long as necessary to fulfill the disclosed purposes, handle complaints, maintain operational records and comply with legal, tax, accounting, contractual or judicial obligations.

• Account data is retained while the account remains active.
• Ride, payment and booking records are retained for applicable periods.
• Support tickets are retained as needed for traceability.
• Technical and security logs may be retained for reasonable periods to prevent fraud and detect errors.

DriverX applies technical and organizational measures such as encrypted communications, password hashing, role-based access control, session protection, backups, monitoring, system updates and restricted staff access.

10. Data subject rights

Data subjects may exercise rights recognized under Chilean law, including access, rectification, deletion or cancellation, objection, restriction, portability, review of automated decisions and withdrawal of consent.

Requests may be submitted to contacto@driverx.cl or through the public privacy request form.

11. Account deletion

Users may request account deletion through the function available on the Platform or through DriverX’s enabled contact channels.

When processing the request, DriverX will deactivate the account and delete or anonymize data that is no longer necessary. Information related to transactions, rides, security, fraud prevention, complaints or legal obligations may be retained for applicable periods.

12. Minors and user responsibilities

DriverX is intended for persons over 18 years of age or with sufficient legal capacity to contract. The Platform is not designed for minors to manage an account independently.

Users must provide accurate information, protect their credentials, report suspicious access and avoid providing third-party personal data without authorization.

13. Communications, changes and contact

DriverX may send operational communications about rides, payments, support and security. Commercial communications may be sent where there is authorization or another applicable legal basis.

This Policy may be updated due to legal changes, new features, providers or security measures. The current version will always state its latest update date.

Privacy contact: ALTO Consultora e Inversiones Limitada · RUT 76.167.963-5 · Quilaco, Biobío Region, Chile · contacto@driverx.cl · +56 9 7513 1969.