—, —. Contact: —.

For a ride: name, phone, email, pickup and drop-off addresses and coordinates, date and time, passengers and luggage, options, flight or train number and any notes.

For an account: also a password (stored hashed) and your language.

For a review: the rating, comment and optional city; your public name is shown only with your consent, as “J. Smith”.

Messages: what the client and the chauffeur write to each other about a ride, with the date and time. They are kept with the ride and only used to organise it.

Browser notifications, if you turn them on (“Notify me”): the subscription address given by your browser and its encryption keys, stored with the ride.

To organise and carry out the ride and contact you about it (email, SMS, WhatsApp, messages on the ride page): performance of the contract.

To send you browser notifications: your consent, which you withdraw with “Turn off”.

To keep completed rides for accounting: legal obligation.

To publish your review and remember your details on your device: your consent, which you can withdraw at any time.

To limit abuse (number of requests) and keep the service secure: legitimate interest; full IP addresses only appear in the server’s technical logs, which are limited in size and time.

Security log: actions on accounts and on the service (sign-ins and failed sign-ins, sign-outs, account changes, account deletion, decisions on rides and quotes, erasures) are recorded with the date, the identifier of who did them and the network of their IP address (never the full address), in a log protected against changes: legitimate interest (security, evidence in case of a dispute). It holds no name, no contact details, no password, no message, and not the email typed in a failed sign-in.

Only the chauffeur and —. Technical providers: the host (—) and the email sending service.

Address searches go to Photon (komoot) and the map to OpenFreeMap, directly from your browser; the route service (OSRM) only receives coordinates, without your identity.

The company’s texts (descriptions, quote answers) and the messages exchanged about a ride may be machine-translated into your language by a translation service hosted on our own servers: they are sent to no third party.

Browser notifications go through the push service of your browser’s maker (Google, Mozilla, Apple or Microsoft); their content is end-to-end encrypted.

No data is sold or used for advertising.

Completed rides: 10 years (accounting); exact addresses are reduced to the city after 3 years.

Declined, expired or cancelled requests: deleted after 12 months.

Clients with no completed ride and no activity: deleted after 24 months.

Log of emails and SMS sent: 90 days. Driver position: only the latest is kept, shown to a client only around their ride time.

Messages between client and chauffeur: kept with the ride and deleted under the same rules as its data.

Browser notification subscription: kept with the ride and deleted with it; you can turn it off at any time with “Turn off” or in your browser settings.

Account and reviews: until you delete them, or ask us to.

Security log: 12 months, then deleted automatically.

No advertising cookies and no audience measurement. Your device keeps your language, your sign-in if you have an account, your ride links and, only if you tick “Remember me”, your details and last places. “Forget my details on this device” erases it all.

You can ask for access, correction, erasure, restriction or portability of your data, and object to its processing, by writing to —. You can also complain to the French data protection authority, the CNIL (www.cnil.fr).