Privacy Policy

1. Data we process

Panel user account data (name, email, optional phone for OTP), booking operational data (driver name and ID document, email, phone, dates and offices), and technical API telemetry (endpoint, latency, IP, user agent) for operations and billing.

2. Purposes

Executing bookings against the rental companies, issuing vouchers, sending transactional notifications, preventing fraud and abuse, and producing per-Tenant usage metrics. We do not sell personal data or use it for advertising.

3. Sharing

With the rental company involved in each booking (required to provide the service), and with infrastructure providers (hosting, transactional email, SMS) under confidentiality agreements. Each Tenant's GDS credentials are stored encrypted.

4. Retention and security

Bookings are retained while the account is active and for applicable legal periods. We apply encryption at rest for credentials, hashing for tokens and access codes, role-based access control and audit logging.

5. Your rights

You may request access, rectification or deletion of your personal data by writing to privacy@greenflow.live. If you are a passenger, route your request through the company you booked with.