Privacy Policy

Controller: Asis Taxi. Trading name: ASIS TAXI. Privacy and support contact: asistaxisupport@gmail.com; 068 243 3333.

Customer: name, email, required phone number, optional profile picture, pickup/destination addresses and coordinates, ride history, selected-driver requests, chat messages, support tickets, ratings, payment references and device/push token. Driver: work-account data, vehicle data, partner-application documents where submitted, and live precise location while online. We use these data to authenticate users, provide, secure and support requested rides, and meet applicable legal obligations. Fields required to create an account or book are identified in the app; profile photos, saved addresses, ratings and notification permissions are optional.

Customer location is used only when the customer asks the device to set a pickup. Driver precise location is collected after a deliberate Go Online action and should stop after Go Offline or sign-out; the native driver app can use a foreground/background location service while online. It is used for dispatch and live ride tracking. Google Maps receives map, place-search, geocoding and routing requests. Firebase Cloud Messaging and Expo may receive device tokens and notification payloads when notifications are enabled. Google Maps is a third-party service and may involve international transfers.

Supabase hosts authentication, database, storage and realtime processing. Vercel Web Analytics receives aggregate page-view measurements, including page path, referrer, approximate location, device/browser type and timestamp; it does not use third-party cookies or tie measurements to an ASIS TAXI account. Query parameters are removed before page-view events are sent. The current code supports cash bookings; card checkout/provider integration is not configured. If card payments are enabled later, the provider should process hosted or tokenized checkout and the policy must be updated before launch. We use access controls, row-level security, authenticated server operations and transport encryption, but cannot promise absolute security.

Subject to applicable law, you may request access, correction, deletion, restriction, objection and portability through the contact above. Customers may submit an account-deletion request in the app or at /account-deletion. Drivers request deletion/deactivation through the company. Deletion is not suspension: records needed for legal claims, safety, tax, accounting or fraud prevention may be retained or anonymised only for verified periods. The Albanian Commissioner for the Right to Information and Protection of Personal Data receives data-protection complaints.

The bases are performance of a requested ride/account service; legal obligation where a verified Albanian obligation applies; legitimate interests for service security, fraud prevention and dispute handling after a balancing assessment; and consent for optional push notifications or optional analytics, if introduced. Consent may be withdrawn as easily as it is given. ASIS TAXI states that it serves rides within Albania, including visitors already in Albania; GDPR territorial scope must be re-assessed before actively targeting people in the EU/EEA or monitoring them there. The app does not state an automated decision with legal or similarly significant effects.

Material changes must be communicated before or when they take effect, as the law requires.