Privacy Policy

1. Introduction

ELARYSOFT SRL ("we", "our", or "us") operates the Rideshare Companion mobile application (the "App") and the web platform at rideshare-companion.ro (the "Website"). Together they are referred to as the "Service". This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.

This Privacy Policy applies to all users of the Service, including users in the European Economic Area (EEA), United Kingdom, and California, USA.

2. Information We Collect

We collect information you provide directly and information collected automatically.

2.1 Information You Provide

2.2 Information Collected Automatically

3. How We Use Your Information

4. How We Share Your Information

We share information with the following service providers, solely to operate the Service:

5. Data Retention

• Account & vehicle data: Retained while your account is active. Deleted within 30 days of account deletion request.
• Uber/Bolt synced data: Retained while your account is active and the platform is connected. Deleted with account deletion or upon disconnection request.
• Chat messages: Automatically deleted after 3 days (enforced by system cron).
• Location history: Retained for up to 12 months, then automatically deleted.
• Expense & financial data: Retained while your account is active. Deleted with account deletion.
• Fleet reviews: Retained indefinitely for marketplace integrity, but anonymized upon account deletion.
• Usage analytics: Retained in anonymized form for up to 24 months.
• Error logs: Retained for 90 days (Sentry).
• ARR document form data: Processed for document generation only; not stored after PDF export unless you choose to save it.
• Gamification data: Retained while your account is active. Deleted with account deletion.

6. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit (TLS/SSL)
• Encryption of data at rest
• Row-level security policies (RLS) in our PostgreSQL database — each user can only access their own data
• Secure authentication with JWT tokens and OAuth 2.0
• Supabase JWT to Convex auth bridge for chat security
• Regular security audits
• Access controls and employee training
• OCR processing (invoice scanning) runs locally on your device via Tesseract.js — images are not sent to our servers

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. Your Rights and Choices

7.1 All Users

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate data
• Deletion: Request deletion of your account and data
• Data Portability: Export your data in a machine-readable format
• Withdraw Consent: Opt out of optional data collection
• Disconnect Integrations: Revoke Uber/Bolt access at any time from Account settings

7.2 Device Permissions

• Location: Enable/disable GPS and background location
• Notifications: Enable/disable push notifications (document expiry, weather, surge events)
• Camera/Photos: Enable/disable access for document uploads and invoice OCR

7.3 Account Deletion

You can delete your account at any time:

1. Open the App and go to Account settings
2. Tap "Delete Account"
3. Confirm the deletion

Alternatively, visit rideshare-companion.ro/delete-account or email us at [email protected].

8. European Users (GDPR)

If you are in the European Economic Area (EEA) or United Kingdom, you have additional rights under GDPR:

• Legal Basis: We process your data based on (a) your consent, (b) contract performance, (c) legal obligations, or (d) legitimate interests.
• Right to Object: You may object to processing based on legitimate interests.
• Right to Restriction: You may request we restrict processing of your data.
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority (ANSPDCP in Romania).

Data Controller: ELARYSOFT SRL, Romania

9. California Residents (CCPA)

If you are a California resident, you have additional rights under CCPA:

• Right to Know: Request information about data collected about you
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell personal information
• Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise your CCPA rights, email [email protected].

10. Children's Privacy

The Service is not intended for children under 16 years of age.

We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected]. We will take steps to delete such information promptly.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. Our service providers (Sentry, Convex, RevenueCat, GrowthBook, CarsXE) may be located in the United States or other countries.

When we transfer data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top
• Notify you through the App, Website, or via email
• Request consent for significant changes where required by law

Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

We will respond to your request within 30 days (or sooner as required by applicable law).

14. Data Collection Summary

Summary of data collected, as required by app stores: