Privacy
Privacy Policy
Your data belongs to you. Here's exactly what we collect, why we collect it, and how we protect it.
Effective: February 24, 2026
·
Last updated: February 24, 2026
·
Lagos, Nigeria
01 Who We Are
DriveRight Technologies Ltd is the data controller responsible for your personal information. We operate a WhatsApp-based ride-hailing service in Lagos, Nigeria.
This Privacy Policy explains how we collect, use, and protect your personal data when you use DriveRight — whether as a passenger booking rides or a driver providing transportation services.
Our commitment: We only collect data we genuinely need to operate the service. We never sell your personal data to third parties. Ever.
02 What Data We Collect
Here is every category of data we collect and why:
| Data Type | What It Includes | Who It Applies To |
|---|
| Contact info | WhatsApp phone number, name you provide | Passengers & Drivers |
| Location data | Pickup address, drop-off address, live GPS during trips | Passengers & Drivers |
| Trip data | Trip history, fares paid, routes taken, timestamps | Passengers & Drivers |
| Payment data | Transaction records (we do not store card numbers) | Passengers |
| Driver documents | Licence, vehicle registration, insurance, selfie photo | Drivers only |
| Conversation data | Messages sent to Demi for service purposes | Passengers & Drivers |
| Device data | WhatsApp device type (collected automatically by WhatsApp) | Passengers & Drivers |
| Rating data | Ratings and feedback given after trips | Passengers & Drivers |
03 Why We Collect It
We collect your data for the following specific purposes:
- To provide the service — match passengers with drivers, calculate fares, process payments
- Safety and security — GPS tracking during trips, SOS response, incident investigation
- Quality improvement — using ratings and feedback to improve driver and passenger experience
- Driver onboarding — verifying driver documents and eligibility
- Customer support — resolving complaints, processing refunds, answering queries
- Legal compliance — meeting obligations under Nigerian law
- Communications — sending trip confirmations, receipts, and service updates via WhatsApp
We do not use your data for advertising, profiling, or any purpose not listed above.
04 How We Use WhatsApp
DriveRight operates through WhatsApp Business API. This means:
- All conversations with Demi pass through WhatsApp's servers, which are governed by Meta's Privacy Policy
- Messages are end-to-end encrypted between your phone and WhatsApp's servers
- We receive the content of messages you send to DriveRight in order to respond and operate the service
- We do not have access to your other WhatsApp conversations — only messages sent directly to DriveRight
WhatsApp tip: You can lock your DriveRight chat in a private folder on WhatsApp for extra privacy. Go to the chat → tap the chat name → Archive or Lock.
05 Who We Share Data With
We share your data only with the following parties, and only to the extent necessary:
- Your matched driver — receives your first name and pickup location when a ride is confirmed
- Your passenger (drivers) — receives passenger first name and pickup location only
- Paystack — processes payments securely. Governed by Paystack's Privacy Policy
- Google Maps — used to calculate distances and routes. No personal data shared
- Twilio — our WhatsApp messaging provider. Handles message delivery
- Nigerian authorities — only when required by law, court order, or to protect safety
We never sell, rent, or trade your personal data to any third party for commercial purposes.
06 How We Protect Your Data
We take data security seriously. Our protections include:
- All data stored in encrypted databases hosted on secure cloud infrastructure
- Payment card data is never stored on our servers — handled entirely by Paystack
- Driver documents are stored securely and only accessible to authorised operations staff
- Access to customer data is restricted to DriveRight staff who need it to do their jobs
- Regular security reviews of our systems and third-party providers
In the event of a data breach that affects your personal data, we will notify you via WhatsApp within 72 hours of becoming aware of the breach.
07 Your Rights
You have the following rights over your personal data under Nigerian data protection law (NDPR):
- Access — request a copy of all data we hold about you
- Correction — ask us to correct inaccurate data
- Deletion — request that we delete your account and personal data
- Portability — receive your trip history in a readable format
- Objection — object to how we use your data in certain circumstances
To exercise any of these rights, message "MY DATA" to DriveRight on WhatsApp or email privacy@driveright.co. We will respond within 7 business days.
To delete your account: Message "DELETE MY ACCOUNT" to DriveRight on WhatsApp. Your account will be deactivated within 24 hours and your personal data deleted within 30 days, except where we are required to retain it by law.
08 Data Retention
We retain your data for the following periods:
- Trip records — 3 years (required for financial and legal compliance)
- Payment records — 7 years (required by Nigerian financial regulations)
- Driver documents — duration of driver relationship + 2 years
- Conversation logs — 12 months, then anonymised
- Deleted accounts — personal data removed within 30 days of deletion request
09 Children's Privacy
DriveRight is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has used our service, please contact us immediately at privacy@driveright.co and we will delete the data promptly.
10 Contact Us
For any privacy-related questions or to exercise your rights:
- WhatsApp: Message "PRIVACY" to DriveRight
- Email: privacy@driveright.co
- Address: Lagos, Nigeria
This Privacy Policy is governed by the Nigeria Data Protection Regulation (NDPR) and the laws of the Federal Republic of Nigeria.