Privacy Policy

Dropwayz LLC ("Dropwayz", "we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have in relation to it.

This Privacy Policy applies to all personal data collected through the Dropwayz platform accessible at https://dropwayz.com and all associated subdomains (the "Platform"), including when you create an account, make a booking, or otherwise interact with our services.

By using the Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy forms part of our Terms and Conditions, which govern your use of the Platform.

For any privacy-related questions or requests, please contact us at info@dropwayz.com.

Dropwayz LLC is a limited liability company incorporated in the State of California, United States. We are the data controller responsible for your personal data collected through the Platform.

• Company name: Dropwayz LLC
• Registered address: 3400 Cottage Way, Ste G2, Sacramento, California 95825, United States
• Contact email: info@dropwayz.com
• Platform: https://dropwayz.com

This Privacy Policy is governed by and construed in accordance with the laws of the State of California, United States, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). We handle all personal data in accordance with our obligations under California law.

We collect only the information that is necessary to provide our booking facilitation services. Below is a full account of the personal data we hold.

Account Information

When you request a quote or book, we collect your email address. If you sign in with that email address, your bookings appear in your Passenger account. We use your email address which is used to identify your account, send booking confirmations, and deliver login verification codes. If you choose to sign in via Google, we receive your name and email address from Google. We do not store passwords — authentication is handled exclusively via one-time passcode sent to your email, or via Google OAuth.

Booking Information

When you make a booking, we collect and store the details necessary to arrange and fulfil your transfer, including your full name, phone number, pick-up and drop-off locations, travel date and time, flight number (where provided), vehicle preferences, passenger count, any extras requested (such as child seats), and any notes you provide for the driver. We also retain your booking reference, transfer price, currency, booking status, and the timestamps of when your booking was created and last updated.

Reviews and Ratings

If you choose to leave a review or rating on a completed booking, we store the content of that review and the rating score in association with your booking record.

Session Data

We use strictly necessary cookies only: to keep you signed in, to protect forms against cross-site request forgery, and to let a guest return to their own quote and booking. They serve no advertising or tracking purpose. Our hosting provider (Cloudflare) measures page performance without cookies, and Google Maps is loaded on pages where you enter addresses (see "Who we share data with").

Payment Information

We do not collect, store, or process your payment card details. All payment transactions are handled directly and securely by our third-party payment processor. The only payment-related data we retain is the transfer price and currency associated with your booking, for record-keeping purposes.

We use your personal data only for the purposes for which it was collected, or for compatible purposes you would reasonably expect. Specifically, we use your data to:

• Create and manage your Passenger account.
• Process and confirm your transfer bookings.
• Assign a suitable Transport Partner from our network to fulfil your booking.
• Share necessary booking details with the assigned Transport Partner and driver to enable them to provide your transfer.
• Send you booking confirmations, login verification codes, and other transactional communications via email.
• Handle cancellations, amendments, refund requests, and customer support queries.
• Display your booking history and status within your Passenger Portal.
• Publish your reviews and ratings on completed bookings to maintain service quality.
• Maintain accurate business records and fulfil our legal and regulatory obligations.
• Conduct internal analysis to understand how our services are being used and to improve the Platform. This is done using data we already hold and does not involve sharing your data with third-party analytics providers.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

We do not currently send marketing communications. If we introduce marketing communications in the future, we will only do so with your explicit prior consent, and you will always have the right to opt out.

As a California-incorporated company, our data processing is governed by the CCPA and CPRA. In addition to our obligations under California law, we process personal data on the following bases:

• Performance of a contract — the majority of our processing (account management, booking processing, Transport Partner assignment, and transactional communications) is necessary to deliver the services you have requested under our Terms and Conditions.
• Legitimate business interests — we process certain data, such as booking records and internal service analysis, based on our legitimate interest in operating a reliable and improving service, provided this does not override your rights.
• Legal obligation — we may retain or disclose data where required to comply with applicable law, including financial record-keeping requirements.
• Consent — for any non-essential cookies or future marketing communications, we will rely on your freely given and informed consent.

We do not sell, rent, or trade your personal data to any third party for any purpose. We share your data only in the following limited circumstances:

Transport Partners and Drivers

When a booking is assigned, we share the booking details necessary to fulfil your transfer with the assigned Transport Partner (or, where none of our partners can serve it, another licensed transport provider arranged by Dropwayz) and their driver. This includes your name, phone number, pick-up and drop-off locations, travel datetime, flight number (if provided), vehicle type, passenger count, extras, and any passenger notes. Transport Partners are independent third-party operators and are required to handle your data responsibly and only for the purpose of completing your transfer.

Payment Processor

Your payment is processed by our third-party payment processor. When you make a payment, you provide your card details directly to them. Dropwayz does not receive or store your card information. Please refer to the payment processor's privacy policy presented at the time of checkout for details on how they handle your data.

Email Service Provider

We use the following service providers, each processing data on our behalf only to provide their service: Stripe (payments; you enter card details directly with Stripe); Resend (sending our emails, including quotes, confirmations and sign-in codes; processes your email address and the email content); Google (address search and maps on our pages, which receive what you type and your IP address; route distance and duration calculation, which receives pick-up and drop-off locations; and Google sign-in, if you choose it); Sentry (error monitoring, which receives technical error reports without request contents or payment data); Cloudflare (delivers our website and measures page performance); and Railway (hosts our application, database and encrypted backups).

Hosting Provider

Our application and database are hosted by Railway in the Netherlands (European Union); encrypted database backups are stored by Railway in the United States. Our website is delivered by Cloudflare from locations close to you. The providers process data on our behalf under their terms and industry-standard security measures.

Legal and Regulatory Disclosure

We may disclose your personal data to law enforcement agencies, regulators, courts, or other public authorities if required to do so by applicable law, or where necessary to protect the rights, safety, or property of Dropwayz, its users, Transport Partners, or the public.

Business Transfers

In the event that Dropwayz undergoes a merger, acquisition, reorganisation, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you via your registered email address if such a transfer occurs and if this Privacy Policy changes as a result.

Dropwayz is incorporated and operated in the United States. Your personal data is stored and processed in the Netherlands (application and database) and the United States (email delivery, payments, error monitoring and encrypted backups), and is shared with transport providers in the United Arab Emirates to perform your transfer.

By creating an account and using the Platform, you acknowledge and consent to your personal data being transferred to and processed in the United States.

We take appropriate steps to ensure that your data is handled securely regardless of where it is processed, and that our service providers maintain adequate security and confidentiality standards.

We retain your personal data for as long as your account is active and for a reasonable period thereafter, in order to fulfil the purposes outlined in this Policy, comply with our legal obligations, resolve disputes, and enforce our agreements.

In general:

• Account data — retained for as long as your account remains active. If you request account deletion, we will delete or anonymise your account data within a reasonable timeframe, subject to any legal retention requirements.
• Booking records — retained for operational, legal, and record-keeping purposes. We may retain completed booking records indefinitely where there is a legitimate business or legal reason to do so, unless you request deletion and no legal obligation requires us to keep them.
• Reviews and ratings — retained as part of the Transport Partner performance record and may be anonymised rather than deleted upon a deletion request.
• Session cookies — expire automatically after a short period or upon logout and are not retained beyond your session.

If you have questions about retention of specific data, please contact us at info@dropwayz.com.

We use cookies solely to keep you securely logged in to the Platform and to maintain your session while you use our services. These are strictly necessary cookies — without them, the Platform cannot function and you would not be able to access your account.

We do not use advertising cookies, tracking cookies, or third-party analytics cookies. Your use of the Platform is not tracked across other websites.

If we introduce any non-essential cookies in the future, we will update this Policy and implement a consent mechanism on the Platform before setting them.

You can control cookies through your browser settings, but disabling our session cookies will prevent you from logging in and using the Platform.

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:

• All data transmitted between your device and the Platform is encrypted using HTTPS.
• Authentication is handled via secure one-time verification codes or Google OAuth, meaning no passwords are stored on our systems.
• Our Platform is hosted on infrastructure with encrypted storage and network-level security controls.
• Access to personal data within Dropwayz is restricted to personnel who require it to perform their role.

While we take all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security. In the event of a data breach likely to result in a risk to your rights, we will notify you and any relevant authorities as required by applicable law.

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have specific rights regarding their personal data. Regardless of your location, we extend the following rights to all users of the Platform:

• Right to know — you may request information about the personal data we collect, use, and share about you.
• Right to access — you may request a copy of the personal data we hold about you.
• Right to correction — you may request that we correct inaccurate personal data we hold about you.
• Right to deletion — you may request that we delete your personal data. We will honour such requests where we are not required by law to retain the data. Some booking records may be retained in anonymised form.
• Right to opt out of sale — we do not sell your personal data. This right is therefore not applicable, but we commit to never selling your data.
• Right to non-discrimination — we will not discriminate against you for exercising any of your privacy rights.
• Right to withdraw consent — where processing is based on your consent (such as future marketing communications), you may withdraw that consent at any time.

To exercise any of these rights, please contact us at info@dropwayz.com. We will respond within 45 days as required under California law, or sooner where possible. We may need to verify your identity before processing your request.

If you are located outside the United States and believe you have additional rights under the laws of your jurisdiction, please contact us and we will endeavour to accommodate your request in good faith.

We may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or applicable legal requirements. The date at the top of this page indicates when the Policy was last updated.

Where changes are material, we will notify you by email to the address registered on your account before the changes take effect. Continued use of the Platform after an updated Policy is published constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact us at:

• Email: info@dropwayz.com
• Address: Dropwayz LLC, 3400 Cottage Way, Ste G2, Sacramento, California 95825, United States
• Platform: https://dropwayz.com

We aim to respond to all privacy-related enquiries promptly and within the timeframes required by applicable law.