Privacy Policy
Effective date: January 1, 2026 • Last updated: April 2026
Drimov (“we,” “our,” or “us”) operates the premium personal driver service at drimov.com. This Privacy Policy explains how we collect, use, share, and protect information about you when you use our website or book a ride.
1. Information We Collect
Account & identity
Email address (required for login). Optional: your name and US mobile phone number (used to send your driver an SMS before pickup).
Location
Pickup and dropoff addresses you enter. If you tap “Use current location,” we request your device GPS and reverse-geocode it via the Nominatim API (OpenStreetMap). We do not store raw GPS coordinates — only the resolved address label.
Payment
We do not store card numbers. All payment data is handled by Stripe, Inc. under their own PCI-DSS certification. We store a Stripe customer ID and, after a successful payment, the last-4 digits of your card for display purposes only.
Booking & usage
Ride details (route, scheduled time, fare, payment status), feedback ratings, tip amounts, and cancellation events.
Cookies & analytics
We use essential session cookies (required to keep you logged in) and, if you consent, basic analytics cookies to understand traffic patterns. No advertising or cross-site tracking cookies are used.
2. How We Use Your Information
- To book and dispatch your ride (core service)
- To send booking confirmation, 30-minute reminder, and receipt emails via Resend
- To send you a ride-feedback and optional tip link after your trip
- To process payments and refunds via Stripe
- To contact you by SMS if your driver needs to reach you (optional, requires phone)
- To improve the website and booking experience (with analytics consent only)
- To comply with legal obligations
3. How We Share Your Information
We do not sell your personal information. We share data only with the following service providers:
- Stripe, Inc. — payment processing (PCI-DSS certified)
- Resend, Inc. — transactional email delivery
- Supabase, Inc. — database and authentication infrastructure (data hosted in AWS us-west-1)
- Vercel, Inc. — web hosting
We may disclose your information if required by law, court order, or to protect the rights and safety of Drimov, its driver, or the public.
4. Your Privacy Rights (CCPA)
As a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
- Right to know — request a copy of the personal information we hold about you.
- Right to delete — request deletion of your personal information, subject to certain exceptions.
- Right to opt out of sale — we do not sell personal information. If this changes, we will update this policy and offer an opt-out mechanism.
- Right to non-discrimination — we will not discriminate against you for exercising any of your privacy rights.
To exercise any of these rights, email us at tbarreto@drimov.com. We will respond within 45 days.
5. Data Retention
We retain ride and account data for 3 years to support receipts, disputes, and tax records, then delete it. You may request earlier deletion per Section 4.
6. Contact
Questions about this policy? Email tbarreto@drimov.com or write to Drimov, Marin County, California.