Privacy Policy

Last Updated: [2025-11-28]

Welcome to ToDrive, a peer-to-peer car rental platform designed for users in Cambodia. This Privacy Policy explains how we collect, use, disclose, store, and protect your information when you use the ToDrive website and mobile applications.

By using ToDrive, you agree to the data practices described in this Privacy Policy.

1. Introduction

ToDrive (“we”, “our”, “us”) provides a platform connecting vehicle owners (“Hosts”) with renters (“Guests”). We are committed to protecting your privacy and handling your personal data responsibly.

This Privacy Policy applies to:

• ToDrive Android & iOS applications
• ToDrive website
• All features and interactions on the platform

2. Information We Collect

We collect information to verify identity, enable rentals, process payments, protect security, and improve user experience.

2.1 Personal Information

• Full name
• Phone number
• Email address
• Date of birth
• Residential address
• Profile photo

2.2 Identity Verification

For safety and to comply with rental standards:

• Driving license (front & back)
• National ID or Passport
• Selfie verification (if required)
• Facial match confirmation used for fraud prevention
• Additional documents for Hosts (vehicle registration, insurance proof)

2.3 Payment Information

Processed securely through ABA PayWay or other payment partners:

• Name on card/account
• Tokenized payment credentials (we never store full card numbers)
• Billing information
• Transaction history
• Refund records

2.4 Rental & Platform Activity

• Rental history
• Host vehicle listings
• Messages between Guests and Hosts
• Reviews, ratings, and feedback
• Support conversations

2.5 Location Information

• GPS location (with permission)
• Approximate location from IP
• Pickup and drop-off coordinates
• Route information (optional for safety)

2.6 Device & Technical Data

• IP address
• Device model, operating system
• App version, browser type
• Crash reports (via Crashlytics or similar tools)
• Advertising identifiers (where applicable)
• Network information

2.7 Photos & Media

• Car images
• Inspection and damage photos
• Identity document photos
• Optional profile images

2.8 Cookies & Tracking (Website)

We use cookies, local storage, and analytics tools to:

• Improve website performance
• Measure usage
• Provide personalized content

You can disable cookies through your browser settings.

3. App Permissions Required

ToDrive requires the following permissions to operate:

Location Permission

Used for:

• Showing nearby available cars
• Determining pickup/drop-off areas
• Fraud prevention & safety
• Navigation assistance

Camera Permission

Used for:

• Uploading driving license
• Car inspection photos
• Profile verification
• Safety checks

Photo Library / Media Access

Used for:

• Uploading identity documents
• Uploading car photos (Hosts)
• Uploading damage or inspection images

Notifications

Used for:

• Booking confirmations
• Payment status
• Rental reminders
• Safety alerts
• Messages between Guests & Hosts

File Storage (Android)

Used to temporarily store uploaded documents or photos.

We never access any files without user action.

4. How We Use Your Information

We use your information for:

4.1 Platform Functionality

• Account creation and profile management
• Listing cars (Hosts)
• Searching and booking cars (Guests)
• Displaying location-based results
• Rental coordination

4.2 Payments & Billing

• Processing payments via ABA PayWay
• Fraud and chargeback prevention
• Refund processing
• Generating invoices or receipts

4.3 Safety & Verification

• Identity and driving license checks
• Fraud detection and prevention
• Dispute investigation
• Traffic incident review
• Location-based safety checks

4.4 Communication

• Booking confirmations
• In-app messages
• Customer support
• Policy updates
• Promotional messages (optional)

4.5 Platform Improvement

• Analytics
• Crash detection
• Feature testing (A/B testing)
• Performance optimization

We do not sell personal data to third parties.

5. Host-Specific Data Usage (Car Owners)

If you list your vehicle on ToDrive, we collect and use:

• Vehicle details (model, plate number, photos)
• Insurance information
• Vehicle registration documents
• Host location to display nearby availability
• Car condition photos
• Communication with Guests

This information is visible only to users who need it to complete the rental.

6. Guest-Specific Data Usage (Renters)

If you rent cars on ToDrive, we collect and use:

• Driving license information
• Pickup & drop-off details
• Payment history
• Rental behavior
• Safety or incident reports
• Profile verification information

7. Information Sharing & Disclosure

We share information only when necessary to operate ToDrive.

7.1 Service Providers

Including but not limited to:

• ABA PayWay (payment processing)
• Google Maps (location services)
• Google Login / Facebook Login
• Analytics tools (Google Analytics, Crashlytics)
• Cloud hosting providers (AWS)

7.2 Hosts & Guests

For rental transactions:

• Hosts receive Guest contact information
• Guests receive Host location & contact information

Shared only when required for the booking.

7.3 Fraud & Legal Compliance

We may disclose information:

• To resolve disputes
• For fraud investigation
• To comply with Cambodian law enforcement requests
• To protect safety, property, and rights

8. Data Retention

We retain data only for legitimate business or legal purposes:

Data Type	Retention Period
Account information	While account is active
Identity documents	Account lifetime + 2 years
Transaction records	5–7 years
Car inspection photos	90–365 days depending on disputes
Location data	Up to 30 days (short retention)
Crash logs	App-defined lifecycle

Users may request deletion of certain data unless legal obligations require retention.

9. Data Security

We use industry-standard protection including:

• SSL/HTTPS encryption
• Secure tokenized payments
• Encrypted storage
• Access controls & role-based permissions
• Regular security audits
• Suspicious activity monitoring

While we take strong measures, no system is completely secure. Users are encouraged to protect their account credentials.

10. Your Rights

You may:

• Access your personal information
• Update or fix your data
• Request deletion of your account
• Request a copy of your data
• Withdraw consent for certain processing
• Disable location services anytime
• Opt-out of marketing communications

We respond to requests within 7–14 business days.

11. Data Deletion Process

You can delete your data by:

1. Using the Delete Account option inside the app
2. Emailing our privacy support team

After requesting deletion:

• Most personal data is permanently removed
• Some records may remain for fraud prevention, financial audits, or legal reasons

12. International Data Transfers

Our servers or third-party partners may store your data outside of Cambodia. We apply strong contractual and technical safeguards to ensure your data remains protected.

13. Marketing & Communication

We may send:

• Booking updates
• Account notifications
• Safety alerts
• Promotions or special offers (optional)

You may opt-out anytime via:

• Email unsubscribe link
• App notification settings

14. Children’s Privacy

ToDrive is intended for users 18 years of age or older. We do not knowingly collect the data of minors.

15. User Responsibilities

You agree to:

• Provide accurate and truthful information
• Update your driving license and identity documents when required
• Not misuse the platform for illegal activities
• Protect your account credentials
• Upload only your own photos and documents

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the “Last Updated” date and may notify users through the app or email.

17. Contact Information

For privacy-related questions or data requests:

ToDrive Privacy Team

Email: support@todrive.com

Phone: [Insert Phone Number]

Website: https://todrive.com