Last updated: April 2026
We collect account info (name, email, phone, ID), trip data (pickup, dropoff, route, times), and payment info. ID verification data is processed by Stripe Identity and deleted after verification.
To verify users, match passengers with drivers, process payments, enable safety features (trip tracking, emergency contacts), and improve the service. We never sell your data.
Only with service providers (Stripe, Flutterwave, Mapbox, Supabase) strictly to operate the platform. Law enforcement only with valid legal process.
You can access, export, correct, or delete your data at any time. Email privacy@concordxpress.ca or use Account → Data & privacy in the app. We respond within 30 days.
Account data kept while your account is active + 30 days after deletion. Trip history kept 7 years for tax and safety records. ID verification data deleted after verification passes.
Your data may be processed in Canada, USA, and EU where our service providers operate. All transfers use appropriate safeguards (SCCs, adequacy decisions).