1. Introduction and Scope

PIKUP Enterprises, Inc. ("PIKUP," "we," "our," or "us") operates a multi-service platform connecting riders with independent drivers, customers with merchants, and senders with recipients. This Privacy Policy describes how we collect, use, store, and disclose personal information when you access or use our website, mobile application, and all related services (collectively, the "Platform"). By creating an account or using the Platform in any manner, you expressly consent to the data practices described herein.

2. Information We Collect

2.1 Information You Provide to Us:

• Account Information: Full name, email address, phone number, profile photograph, and any other information you choose to provide when creating your account.
• Verification & Identity Documents: Driver's license, national ID card or passport, facial recognition photographs, vehicle registration, proof of insurance, business license, and tax identification numbers for drivers and business partners.
• Payment Information: Selected payment method, transaction history, and payment details. We Do Not Store complete credit card numbers on our servers — payment processing is handled exclusively through PCI-DSS certified third-party payment processors.
• User Communications: In-app messages between riders and drivers, customer support chat, email correspondence, and phone call metadata. We may monitor and review communications for safety, quality assurance, and compliance purposes.

2.2 Information Collected Automatically:

• Location Data: We collect your real-time GPS location only when the app is in active use or during an active trip/delivery. For drivers, location is collected continuously while online. We use GPS, Wi-Fi, Bluetooth, and cell towers for location determination. You may revoke location permissions in your device settings, but doing so will prevent core Platform functionality.
• Device & Usage Data: Device type, operating system, IP address, mobile network, app version, crash reports, usage analytics, and unique device identifiers for security and fraud prevention purposes.

2.3 Service-Specific Data:

In addition to the above, we collect service-specific data depending on which service you use:

Rides: pickup and drop-off addresses, trip route, vehicle type, fare amount.

Food Delivery: ordered items, restaurant, special instructions, allergies, dietary preferences.

Shop & Deliver: product selections, store, prescription information (pharmacy).

Package Delivery: sender and recipient names/addresses, package description, declared value.

Freight & Cargo: cargo type, weight, dimensions, cross-carrier tracking data.

Rentals: rental period, license verification, inspection photos, odometer readings, fuel level.

3. Legal Basis for Processing

We process your personal information on the following legal bases:

• Contractual Necessity: Processing data necessary to provide the services you request, such as matching you with a driver or processing your payment.
• Consent: Where you provide explicit consent, such as for location permissions, facial recognition, or marketing communications.
• Legal Obligation: Complying with laws, regulations, court orders, and legal demands in jurisdictions where we operate.
• Legitimate Interests: For platform safety, fraud detection, service improvement, and legitimate business reasons that do not override your rights and freedoms.

4. How We Use Your Information

• Provide, operate, and improve all Platform services across all service types
• Match users with service providers (drivers, merchants) with real-time GPS tracking
• Process payments, calculate fares, and manage driver earnings (80% commission)
• Verify identities and conduct background screening for service providers
• Ensure platform safety: fraud detection, abuse prevention, SOS emergency response, and enforcement of Terms of Service
• Send operational notifications (trip updates, delivery status, receipts, driver alerts)
• Comply with legal obligations across all operating jurisdictions
• Perform data analytics to improve Platform reliability, safety, and user experience

5. Data Sharing and Disclosure

5.1 Sharing Between Platform Users:

During an active ride or delivery, we share your first name, last name initial, profile photo, vehicle details (for drivers), and real-time location with the other party involved in the transaction. For deliveries, the recipient's name and phone number are shared with the delivering driver.

5.2 Service Providers:

We share data with service providers who assist us in operating the Platform, including payment processors (MonCash, Stripe), SMS and notification providers, cloud hosting services, Google Maps for mapping and geolocation, identity verification services, and customer support platforms. These providers are contractually obligated to process data only per our instructions and maintain appropriate security measures.

5.3 Business Partners:

When you place an order with a restaurant, store, or pharmacy, we share your order details with the merchant so they can fulfill your order. We may share aggregated, non-personally-identifiable data for analytics and service improvement purposes.

5.4 Legal Compliance and Safety:

We may disclose your information — including location history, ride and delivery records, payment information, communications, and identity documents — to law enforcement, judicial authorities, government agencies, or other authorized parties when we believe in good faith that such disclosure is necessary to: (a) comply with a legal obligation, court order, subpoena, warrant, or legal request; (b) protect the rights, property, or safety of PIKUP, our users, or the public; (c) detect, prevent, or address fraud, security, or technical issues; or (d) protect against imminent harm to persons or property.

5.5 No Sale of Personal Data:

PIKUP does not sell, rent, or trade your personal information to third parties for marketing or advertising purposes. We do not share user data with advertising networks, data brokers, or analytics companies unrelated to Platform operations.

6. Data Security

We implement industry-standard administrative, technical, and physical security measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These measures include: TLS/SSL encryption for data in transit, AES-256 encryption for data at rest, role-based access controls, regular security audits, and incident response procedures. However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security. We recommend you use strong passwords and enable two-factor authentication where available.

7. Data Retention

We retain your personal information for as long as your account is active and for a reasonable period thereafter as required by legal and regulatory obligations. Specifically:

• Transaction records (rides, deliveries, payments) are retained for a minimum of 7 years for legal, tax, and accounting compliance.
• Identity verification documents are retained for the mandatory regulatory period and may be preserved for legal purposes.
• Location data is retained as part of ride and delivery records per our retention policy.
• Upon account deletion request, we remove your public profile and delete or anonymize your personal information, except where retention is required by law.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of personal information we hold about you.
• Rectification: Request that we correct inaccurate or incomplete information.
• Erasure: Request deletion of your personal information, subject to legal exceptions.
• Portability: Receive your data in a structured, machine-readable format.
• Objection and Withdrawal of Consent: Object to processing or withdraw your consent, where applicable. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise these rights, contact us at privacy@pikupenterprises.com. We may need to verify your identity before processing your request. We aim to respond within 30 calendar days.

9. Children's Privacy

The Platform is not intended for children under 13 (or the applicable digital consent age). We do not knowingly collect personal information from children. Minors under 18 must have parental or legal guardian consent to use the Platform. Unaccompanied minor rides are strictly prohibited.

10. International Data Transfers

Your data may be stored or processed in countries where PIKUP or its service providers maintain facilities, including the United States, Haiti, and the Dominican Republic. Data protection laws in these countries may differ from those in your country. By using the Platform, you consent to the transfer of your information to these countries. We implement appropriate safeguards — such as standard contractual clauses and data processing agreements — to ensure an adequate level of protection.

11. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you at least 30 days in advance via email or in-app notification. Your continued use of the Platform after the effective date constitutes acceptance of the modified Policy. We encourage you to review this Policy periodically.

12. Contact Us

For any questions, concerns, or to exercise your privacy rights:

Email: privacy@pikupenterprises.com

Address: PIKUP Enterprises, Inc., Port-au-Prince, Haiti

For urgent safety concerns during an active ride, use the in-app SOS button.