Privacy Policy

Last updated: July 12, 2026

This document is a working template that has not yet been reviewed by an attorney. It reflects how drivway operates today, but it is not legal advice and may be revised.

1. What this policy covers

This policy explains what personal data drivway collects when you use the platform, why we collect it, who processes it on our behalf, and the choices you have. It applies to both customers and technicians.

2. Data we collect

  • Account data — name, email address, password (stored by Firebase Authentication, never by us in plain text), account role, and sign-up date.
  • Technician profile data — business name, services and prices, photos, service area, and an approximate geocoded location. Approved technician profiles are public: anyone can browse them without an account.
  • Identity verification data (technicians) — a photo of your government ID and a selfie, stored privately and visible only to you and drivway’s review team. Certification documents and proof-of-work photos you submit are handled the same way.
  • Booking and chat data — booking requests, their status, and messages between the customer and technician on a booking. Visible only to the two participants.
  • Payment data — Pro subscriptions and technician invoicing are processed by Stripe. drivway never sees or stores card numbers; we store only references such as a Stripe customer ID and subscription or invoice status.

3. Why we use it

We use this data to operate the marketplace: authenticate you, show technician profiles to customers, verify technician identity before they can be booked, deliver bookings and messages, process Pro subscriptions, prevent fraud and abuse, and comply with legal obligations. Where consent-based law applies, our legal bases are performance of contract (most processing), legitimate interest (fraud prevention, security), and legal obligation.

4. Who processes it

  • Google Firebase — authentication, database, and file storage.
  • Stripe — subscription billing, invoicing, and (where enabled) identity verification.
  • Cloudflare — website hosting and delivery.

We do not sell personal data, and we do not share it with advertisers.

5. Retention

We keep account and booking data while your account is active. Identity verification photos are kept only as long as needed to review and evidence the verification decision. When you delete your account we delete or anonymize your personal data within a reasonable period, except where we must keep records for legal, security, or dispute-resolution reasons.

6. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can edit your profile in the app, and delete your account from your account settings or by contacting us. To exercise any other right, email [email protected].

7. Cookies and local storage

drivway uses a small set of strictly necessary cookies and browser storage — see the Cookie Policy for the full list.

8. Changes and contact

We will post any changes to this policy here and, for material changes, notify you in the app or by email. Privacy questions: [email protected].