Privacy Policy

How we collect, use, and safeguard your data.

Last Updated:

Overview

Driviro ("we", "us", "our", "Platform") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our driving school management platform.

We comply with:

GDPR / DSGVO|Germany & United Kingdom
CCPA / CPRA|United States
PIPEDA|Canada
LGPD|Brazil
LFPDPPP|Mexico
PIPL|China
PDPA|Taiwan
DPDPA 2023|India
APPI|Japan
PIPA|South Korea
Privacy Act 1988|Australia & New Zealand
Federal Law No. 152-FZ on Personal Data|Russia
POPIA|South Africa
PDPL|United Arab Emirates & Saudi Arabia
Data Protection Act|Kenya

Information We Collect

1.1 Personal Information You Provide

Account Creation

Full name, email address, telephone number, physical address, date of birth, driver's license or learner's permit details, government identification copy, and parent/guardian contact info (for minors).

Booking Services

Driving lesson preferences, schedules, pickup/drop-off locations, driving progress history, instructor reviews, and skills checklists.

Payment Processing

Secure billing details, invoices, transaction history, and encrypted payment tokens (processed directly via PCI-DSS compliant Stripe).

Communication

In-app chat history, email correspondence, feedback submissions, support requests, and telephone call logs.

1.2 Information Collected Automatically

Device Details: Device type, operating system, browser, identifiers
Usage History: Pages visited, features used, session times
General region derived from IP address, and precise GPS coordinates collected during active scheduled driving lessons for safety monitoring and course verification.
Log Details: IP addresses, access times, system error logs

Sensitive Information

We process sensitive information (such as health conditions or government IDs) only with explicit consent and solely to provide safe, compliant instruction and accommodate special needs. Providing this information is contractually required to register and book lessons.

How We Use Your Information

Service Delivery

Create and manage accounts, process lesson bookings, and handle payments.

Service Improvement

Analyze platform usage, develop features, and optimize experience.

Communication

Send schedules, confirmations, policy updates, and response tickets.

Legal & Safety

Comply with legal laws, prevent fraud, and enforce safety terms.

Legal Basis for Processing

Driviro SaaS, LLC (registered at 1209 North Orange Street, Wilmington, DE 19801, USA) acts as the Data Controller. Under applicable data protection regulations, processing is based on the following grounds:

Consent: Explicit approval given for specific uses
Contract: Fulfilling lesson booking services with you
Legal Obligation: Complying with regulatory requirements
Legitimate Interests: Platform optimization and fraud prevention
You have the right to withdraw consent at any time. Withdrawal does not affect lawful processing prior.

Information Sharing

No Sale or Sharing: We do not sell your personal information, nor do we share it with third parties for cross-context behavioral advertising.

We share data only with: Service Providers (secure payment/hosting), platform users (to facilitate bookings), legal authorities, and with your explicit consent.

A
Service Providers: Payment/hosting systems
B
Platform Users: Instructors and pupils
C
Legal Authorities: When required by law
D
Consent: With your explicit approval

Data Security

We implement technical and organizational measures to safeguard your information:

Encryption

Data encrypted in transit (TLS/SSL) and at rest.

Access Controls

Access strictly limited on a need-to-know basis.

Secure Infrastructure

Hosting via industry-standard secure servers (Supabase).

Security Audits

Regular assessments and vulnerability testing.

While we enforce rigorous physical and digital safeguards, no system is 100% secure. In the event of a confirmed data breach, we will notify affected users and supervisory authorities within 72 hours, as required by law.

Data Retention & Deletion

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our specific retention standards are as follows:

Account Profiles

Account Profile Details: Retained for the active lifetime of your account plus 60 days following account closure.

Transactions & Billing

Billing & Transaction Logs: Retained for 7 years to comply with national tax, audit, and financial regulations.

Certifications & Logbooks

Driving Lessons & Skill Checklists: Retained for 5 years to verify certifications and comply with regional licensing authority audits.

Upon receiving a valid deletion request, we will securely delete or anonymize your personal information within 30 days, subject to any statutory legal overrides.

Cookies & Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance user experiences, analyze usage, and keep sessions secure.

Essential

Essential Cookies: Required for core system operations, security, logging in, and booking lessons.

Performance

Performance & Analytics: Used to understand user behavior, page load times, and error occurrences (Google Analytics).

Preferences

Preference Settings: Used to remember language preferences, active region selection, and styling states.

Your Privacy Rights

Regional Privacy Disclosures

Select your country/region to review compliance rights.

Privacy Standard

CCPA / CPRA (California Consumer Privacy Act)

United States

Under the California Consumer Privacy Act (CCPA/CPRA) and other state privacy laws (including Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, Texas TDPSA, Oregon OPA, etc.), US residents have specific rights to know, access, delete, correct, and limit the use of their personal and sensitive information. Driviro does not sell or share your personal information for cross-context behavioral advertising.

Specific Rights:

  • Right to Know/Access personal data collected
  • Right to Delete personal data
  • Right to Correct inaccurate personal data
  • Right to Opt-Out of the sale or sharing of personal data
  • Right to Limit use of sensitive personal data
  • Right to Non-Discrimination for exercising privacy rights
Regulatory AuthorityCalifornia Privacy Protection Agency (CPPA)
Regulatory Authority

To Exercise Your Rights:

Contact our privacy office at .

We will respond within the required legal timeframe (typically 30 days).

International Data Transfers

Your data is processed in the US and other secure locations using Standard Contractual Clauses (SCCs) and Data Privacy Framework safeguards. Regional citizen data for China, Russia, UAE, and Saudi Arabia is stored locally in compliance with regional residency laws.

Children's & Minors' Privacy

Compliance with COPPA & Minors Protection

We do not knowingly collect information from children under 13. Accounts for minors under the age of majority must be authorized by a parent or legal guardian, who holds full management rights.

California "Shine the Light" & DNT Signals

Under California Civil Code Section 1798.83, California residents may request disclosures regarding personal information shared with third parties for direct marketing. Driviro does not disclose personal information to third parties for their direct marketing purposes.

Do Not Track (DNT): We do not track users across third-party websites and therefore do not respond to browser Do Not Track (DNT) signals.

Automated Decision-Making & Profiling

We do not utilize automated decision-making systems or profiling algorithms that result in legal obligations, financial impact, or similarly significant effects on our users.

Questions About Privacy?

General Privacy Inquiries

privacy@driviro.io

GDPR/UK Inquiries (DPO)

dpo@driviro.io

CCPA / CPRA Inquiries (United States)

ccpa@driviro.io

Support Helpdesk

support@driviro.io

If you are unsatisfied, you may lodge a complaint with your local regulatory authority:

Regulatory AuthorityUnited StatesCalifornia Privacy Protection Agency (CPPA)