Privacy policy

1Who is responsible

Ayde is the controller of the personal data processed through the products. Partners such as sellers or restaurants are separate controllers for the data they receive to fulfil your order.

2What we collect

Depending on the products you use, we process:

• account data: name, email, phone number, password hash, profile photo
• transaction data: orders, bookings, rides, payments and payouts
• content: posts, messages, reviews and listings you create
• device and usage data: IP address, browser, app version, pages viewed
• location: approximate location from your IP, and precise location only when you allow it (for example for a taxi pickup)
• support conversations and reports you send us

3Why we use it

We use personal data to:

• provide the products and complete orders, deliveries and bookings (contract)
• prevent fraud and keep accounts secure (legitimate interest)
• personalise recommendations and feeds (legitimate interest, can be switched off)
• send marketing messages (consent, can be withdrawn at any time)
• meet accounting, tax and legal obligations (legal obligation)

4Who we share it with

We share the data a partner needs to fulfil your order, for example your delivery address with a restaurant and driver. We use service providers for hosting, payments, maps and customer support under contracts that bind them to our instructions. We disclose data to authorities only when the law requires it.

5How long we keep it

We keep account data while your account is open. Transaction records are kept for the period required by tax and accounting law, usually up to 10 years. Other data is deleted or anonymised when it is no longer needed.

Documents and other evidence you send to claim or verify a profile, page, business or organisation are stored encrypted for 6 years after the case is closed, in line with typical anti-money-laundering, identity-check and limitation periods. A case under legal hold is kept until the hold ends. You can ask for early deletion of your documents; because fraud prevention and legal defence are legitimate interests, each request is decided case by case and documents still needed for them are kept.

6International transfers

Some service providers process data outside your country. Where that country does not offer an adequate level of protection, we use standard contractual clauses and additional safeguards.

7Your rights

You have the right to access, correct, delete, restrict and export your data, to object to processing based on legitimate interest, and to withdraw consent. See the GDPR rights page for how to exercise them. You can also complain to your data protection authority.

8Children

The products are not directed at children under 16. We delete accounts we learn belong to younger children.