Privacy Policy
1. Data Controller
The data controller responsible for the processing of your personal data is the entity owning the Vukea platform (hereinafter "Vukea", "we", or "the platform"), operating from New York.
Privacy Contact:
Email: vukea3030@gmail.com
Phone: +1 646 904 1770
2. Personal Data We Collect
We may collect the following categories of data:
- Identification Data: name, surname, ID document (if applicable).
- Contact Data: email address, phone number.
- Account Data: encrypted credentials, preferred language, profile settings.
- Vehicle Data (Drivers): make, model, license plate, color, photographs.
- Trip Data: pickup and destination points, start and end time, approximate route, price, payment method.
- Geolocation Data: location of the driver's device and, when the trip is active, the passenger's approximate location.
- Payment Data: payment tokens provided by our providers (like Stripe), last digits of the card, and transaction status. We do not store your full card number or CVV.
- Technical Data: IP address, device type, operating system, browser, error logs.
- Support and Safety Data: support tickets, trip evidence (photos, documents), incident reports.
3. Purposes and Legal Bases for Processing
Tratamos tus datos personales para las siguientes finalidades:
3.1 Service Provision
To create and manage your account, connect passengers with drivers, calculate fares, process payments, display trip histories, and allow ratings.
Legal Basis: performance of a contract (Terms of Use) and pre-contractual measures.
3.2 Security and Fraud Prevention
To verify identity and documents (drivers), prevent misuse, block suspicious accounts, analyze incidents, and manage trip evidence.
Legal Basis: Vukea's legitimate interests and compliance with legal obligations.
3.3 Service Improvement and Analytics
To analyze platform performance, detect errors, improve user experience, and create anonymized statistics (e.g., average wait times or high-demand areas).
Legal Basis: legitimate interests. When we use cookies or identifiers for advanced analytics, we may request your explicit consent (see Cookie Policy).
3.4 Communications and Marketing
To send you notifications related to your account or trips (confirmations, alerts, status changes) and, in some cases, promotional communications, referral programs, or gamification.
Legal Basis: performance of contract, legitimate interests, and, where required, your consent for commercial communications.
3.5 Legal Compliance
To respond to requests from authorities, manage claims, and comply with applicable tax, accounting, or transportation regulations.
Legal Basis: compliance with legal obligations.
4. Data Retention Time
We keep your personal data only for the time necessary to fulfill the described purposes:
- Account Data: as long as you maintain your active account and up to a maximum of 5 years from your last significant use, unless you request deletion earlier and there is no legal reason to retain it.
- Trip and Billing Data: for the period necessary to comply with tax/accounting obligations (e.g., 5–10 years depending on local law).
- Geolocation Data: generally for a much shorter period (e.g., 12–24 months), and may be kept in an aggregated or anonymized form for statistics.
- Support Tickets and Trip Evidence: while the incident is being managed and for the time necessary to address possible claims (e.g., up to 5 years).
- Marketing Data: until you revoke your consent or object to the processing.
Once the above periods have passed, we may anonymize your data so that it is no longer possible to identify you, retaining only aggregated information for statistical and business purposes.
5. Who We Share Your Data With
We may share your data with:
- Drivers / Passengers: we share the minimum necessary data (name, approximate location, photo, vehicle plate, etc.) so the trip can be carried out safely.
- Payment Service Providers: e.g., Stripe or other processors to manage payments and collections.
- Technology Providers: hosting, email services, analytics tools, log storage, etc.
- Authorities and Public Bodies: when necessary to comply with the law or respond to official requests.
- Asvisors and Auditors: to the extent necessary for consulting, auditing, or legal defense tasks.
In all cases, we seek to ensure that these third parties only process your data according to Vukea's instructions and with appropriate security measures.
6. International Data Transfers
Some of our providers may be located outside your country. When an international data transfer occurs, we will ensure it is done with appropriate safeguards (e.g., standard contractual clauses or other mechanisms recognized by law).
7. Information Security
We implement reasonable technical and organizational measures to protect your personal data frente a pérdidas, accesos no autorizados, alteración o divulgación indebida.
No obstante, ningún sistema es completamente infalible. Si detectamos una brecha de seguridad relevante, actuaremos con la diligencia necesaria y, cuando sea exigible, notificaremos a las autoridades y a las personas afectadas.
8. Your Data Rights
Depending on applicable law (which may vary by state), you may exercise some or all of the following rights:
- Access your personal data.
- Request the rectification of inaccurate or incomplete data.
- Request the deletion of your data when it is no longer necessary or when you withdraw your consent.
- Request the limitation of processing in certain circumstances.
- Object to processing for certain purposes, especially direct marketing.
- Solicitar la portabilidad de tus datos a otro proveedor de servicios.
To exercise these rights, you can contact us at vukea3030@gmail.com. We may request additional information to verify your identity before attending to your request.
9. Cookies and Similar Technologies
We use cookies and similar technologies for the platform to function correctly, remember your session, save preferences, and, if you authorize it, perform analytics and improve the product.
You can get more information in our Cookie Policy and configure your preferences through the cookie banner or your browser settings.
10. Minors
The platform is not directed at minors under 18 years of age (or the legal age of majority in your country). We do not knowingly collect data from minors without verifiable consent from their parents or guardians.
11. Changes to this Policy
We may update this Privacy Policy to reflect changes in the platform, legal requirements, or new internal practices. We will publish the updated version on this page and indicate the last update date.
12. Contact
If you have questions about this Policy or how we process your data, you can contact us at:
Email: vukea3030@gmail.com