Legal
Privacy Policy
Thetripman Inc., doing business as TRVOO ("TRVOO", "we", "us"), operates a ride-sharing platform that connects riders with independent drivers. This policy explains what personal information we collect, why, how long we keep it, who we share it with, and the choices you have. It is written to comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial law. If you use TRVOO outside Canada, additional rights may apply under your local law.
1. What we collect
Information you give us
- Account — name, email address, mobile phone number, city, profile photo (optional), password (stored only as a salted hash), and, if you use Google sign-in, the Google account identifier and verified-email status described in section 4.
- Driver onboarding — driver's licence, vehicle registration, insurance, municipal licence (where required), background-check results, tax identification and bank or payout account details.
- Payment method — handled by our payment processor, Stripe. We store only a token, the card brand, last four digits and expiry; we never see or store your full card number.
- Consents and preferences — the versions of this policy and the Terms you accepted, marketing and video-recording opt-ins, and when you gave or withdrew them.
- Support & safety reports — messages, ratings, complaints and any attachments you send us.
Information collected automatically
- Trip data — pickup and drop-off locations, route, timestamps, distance, duration, fare, tip and payment status.
- Location — riders: while requesting and during a trip. Drivers: continuously while online and available, so we can match and route trips and reconstruct incidents. We do not track drivers when they are offline.
- Device and usage — device type, operating system, app version, IP address, language, push-notification token, crash logs and the screens you use.
2. How we use it
- Create and secure your account, verify your identity, and send one-time login codes.
- Match riders with drivers, calculate fares (including transparent surge pricing), navigate, and complete trips.
- Charge fares, tips, cancellation and no-show fees; pay drivers; issue receipts and tax documents.
- Send transactional notifications about your trips by push, SMS or email.
- Investigate accidents, disputes, fraud and safety incidents; enforce our Terms.
- Meet legal obligations — tax, accounting, insurance, transportation-licensing and lawful requests from authorities.
- Improve routing, pricing and reliability using aggregated or de-identified data.
- Send marketing email only if you opt in; every message includes an unsubscribe link (CASL).
3. SMS / text messages
Where an SMS option is available, you may provide your mobile number and affirmatively agree during sign-up or in settings to receive recurring automated text messages from the TRVOO account and trip notifications program. Messages may include account verification codes, pickup and drop-off alerts, and trip updates. Message frequency varies with your usage. Standard message and data rates may apply. Reply STOP to opt out at any time and HELP for help. Consent to receive text messages is not a condition of purchasing a ride. Opting out of SMS does not close your account; you can use email and in-app notifications instead.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All the above categories exclude text messaging originator opt-in data and consent; this information won’t be shared with any third parties.
4. Sign in with Google
If you choose to sign in with Google, we request only the openid, email and profile scopes. Google provides your Google account identifier, name, primary email address, profile picture and verified-email status. We use this information only to create, secure and sign you into your TRVOO account and to display the profile information you chose to provide through Google. We do not access your Google contacts, calendar, files, mail or other Google services.
We store the Google account identifier and the profile information above with your TRVOO account for as long as the account remains open, subject to section 8. We share it only as described in section 6 with service providers acting for us, or when legally required. We do not sell Google user data, use it for advertising, or allow people to read it except when necessary for security, support or legal compliance. TRVOO's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect Google in your TRVOO account settings and can also revoke access through your Google Account connections. Disconnecting Google stops future Google sign-in but does not by itself delete your TRVOO account or information already retained under this policy. You can close your TRVOO account and request deletion as described in section 9.
5. In-trip video
In-trip video recording is off by default. A rider may opt in to have their trips recorded for their own playback and optional sharing. When recording is on, the driver and any co-riders are notified before the trip and may decline, in which case that trip is not recorded. Recordings are stored encrypted in the same region as your account, are visible only to the rider who requested them (and to TRVOO staff solely for a safety investigation), and are deleted when the rider deletes them, closes their account, or after our default retention period, whichever comes first. You can withdraw the opt-in at any time in settings.
6. Who we share it with
- Drivers and riders — to complete a trip, a driver sees the rider's first name, pickup/drop-off and rating; a rider sees the driver's name, photo, vehicle, plate and rating. Phone numbers are masked where the platform supports it.
- Service providers acting for us — Stripe (payments and driver payouts), Google Cloud (hosting), Twilio (SMS), Google Maps (routing and addresses), Firebase (push notifications and web hosting), email delivery, and background-check providers for drivers. Each is bound by contract to use the data only to provide the service.
- Insurers and authorities — when required to process an insurance claim, comply with law, a court order or a lawful request, or to protect the safety of a person.
- Business transfer — if TRVOO is acquired or merges, your information may transfer to the successor under this policy.
We do not sell personal information and we do not share it with third parties for their own marketing.
7. Where it is stored
Your account and trip data are hosted on Google Cloud in the region matching the city you registered in — for Canada, the Toronto region (northamerica-northeast2). Some providers above (for example Stripe, Twilio and Google) process data in the United States and other countries; while there it may be accessible to those countries' authorities under their laws. Support staff may also access operational data from outside your region. By using TRVOO you consent to these transfers, which we protect with contractual safeguards.
8. How long we keep it
- Account profile — for as long as your account is open, then deleted within 30 days of closure except as noted below.
- Trip, payment and payout records — 7 years after the transaction, as required by Canadian tax and accounting law.
- Driver licensing and background-check documents — for the period required by the municipal or provincial licensing authority, then deleted.
- Precise location history — 90 days, after which it is reduced to the trip start/end and route summary kept with the trip record.
- In-trip video — until deleted by the rider, at account closure, or 90 days, whichever is first; longer only if placed on legal hold for an investigation.
- Consent records — for the life of the account plus 3 years, to evidence consent.
- Safety and fraud investigation files — 7 years.
9. Your rights & choices
- Access and portability — request a copy of the personal information we hold about you in a portable format.
- Correction — update your profile in the app, or ask us to fix anything inaccurate.
- Deletion — close your account in settings or by emailing us; we delete or anonymise your data except what we must keep under section 8.
- Withdraw consent — turn off marketing email, SMS (reply STOP), video recording or location permissions at any time. Some features will stop working without the related data.
- Complaints — contact us first (section 13). You may also complain to the Office of the Privacy Commissioner of Canada or your provincial regulator.
We respond to requests within 30 days and will not discriminate against you for exercising your rights.
10. Security
All traffic is encrypted in transit (TLS 1.2+) and data is encrypted at rest. Passwords are hashed, login codes are single-use and expire in minutes, and card data never touches our servers. Access to personal data is restricted to staff who need it and is logged. No system is perfectly secure; if we discover a breach that creates a real risk of significant harm we will notify you and the Privacy Commissioner as required by law.
11. Children
TRVOO is for adults. You must be at least 18 to hold an account. We do not knowingly collect information from anyone under 18; if you believe a minor has an account, contact us and we will delete it.
12. Changes to this policy
When we change this policy we publish the new version here with a new version number and effective date, and the app asks you to review and accept it the next time you sign in or register. Earlier versions remain available on request.
13. Contact
Privacy Officer, TRVOO
Email: privacy@trvoo.com
Support: support@trvoo.com
Legal Entity Name: Thetripman Inc.
Mailing Address: 37 Hyde Park Dr, Richmond Hill, ON L4B 1V2, Canada