Privacy Policy
Last updated: October 2026
1. Introduction
By using the drovox app, you trust drovox with your personal information. We are committed to maintaining that trust. This commitment begins by helping you understand the privacy practices in place at drovox. This notice explains the personal data we collect, how it is used and shared, and the choices available to you regarding that data. We encourage you to read this notice and review the privacy overview, which covers the key points of our privacy practices.
2. Overview — Scope
This notice applies to users of drovox services anywhere, including users of drovox apps, websites, features, and other services. It applies specifically to: Riders (persons who request or receive transportation), and Drivers (persons who provide transportation services independently or through partner companies). All persons addressed by this notice are referred to as "Users." Our practices are subject to the laws applicable in the places where we provide our services.
3. Data Controllers
The drovox app is the data controller for personal data collected in connection with the use of drovox services. The app manages, collects, and analyzes personal data. The purpose is to fulfill our agreements with users, such as the applicable Terms of Use, based on users' prior consent, or other transfer mechanisms available under applicable law. Verification messages are automatically received and entered into the designated field.
4. Data We Collect
drovox collects personal data provided by users, including: Profile data (name, email, phone number, address, profile photo, payment information, driving license). Precise or approximate location data for drivers and riders to enable trips and safety features. Usage data, device data, transaction information, and communications between users. Data from other sources such as business partners, verification service providers, and legal authorities.
5. How We Use Personal Data
drovox uses personal data to provide transportation and other services reliably and conveniently. This includes: enhancing user safety and service security, providing customer support, conducting research and development, enabling communications between users, sending marketing and non-marketing communications, and handling legal proceedings. drovox does not sell or share users' personal data with third parties for direct marketing purposes without user consent.
6. Safety & Security
We use personal data to help maintain the safety and security of our services and users, including: verifying user identities and eligibility to provide transportation services including background checks; monitoring unsafe driving behaviors such as speeding; preventing and detecting fraudulent activities using location, device, and profile data; and using user ratings to encourage compliance with app guidelines, including suspending accounts of low-rated or non-compliant users.
7. Information Sharing & Disclosure
drovox may share personal data with: Other users (such as sharing rider name and rating with the driver, and vehicle data and location with the rider). Service providers and business partners (such as payment processors, cloud storage providers, advertising companies). Other parties at the user's request, such as sharing location with a friend or emergency services. Legal or governmental authorities when legally required or in case of disputes.
8. Cookies & Tracking Technologies
The drovox website uses cookies and similar technologies for purposes such as: authenticating users, remembering their preferences and settings, determining content popularity, displaying and measuring the effectiveness of advertising campaigns, and analyzing website usage rates and trends. We may also allow third parties to provide analytics services and display advertisements on our behalf.
9. Data Retention & Deletion
drovox retains user data for as long as necessary for the purposes described above. Users may request deletion of their accounts at any time. drovox may retain user data after a deletion request due to legal or regulatory requirements, for safety, security and fraud prevention purposes, or due to an account issue such as an outstanding balance or unresolved dispute.
10. Your Rights & Privacy Controls
The app allows users to use and control their data, including: privacy settings, live location sharing, notification settings, and device permissions. Users can view their data, request a copy, or update their information (name, phone number, email, payment method, profile picture) directly through the app. Users may also opt out of marketing communications at any time.
11. Job Applicants
When you apply for a role through the drovox website, we collect the information you provide in the application form: your name, email address, phone number, city, years of experience, professional profile links, your CV, and your answers to the screening questions for that role. We also record the source of your visit and your IP address so we can measure how well our recruitment advertising performs. This data is used for recruitment only. It is not used for marketing and is not sold to anyone. To assess how well your CV matches the requirements of the role, the text of your CV is extracted and processed automatically by a third-party artificial intelligence service (Anthropic); only the extracted text is sent, not the CV file itself. Where your CV is a scan or a photograph and no text can be extracted from it, the file itself is sent for that purpose alone. The result is an indicative score that helps the hiring team decide which applications to read first. No applicant is accepted or rejected automatically — every decision is made by a person. Applicant data and CVs are retained for twelve months from the date of application and are then deleted automatically, unless you are hired, in which case your data moves into our employment records. If you join our talent pool, we keep the same details together with the fields you chose, so we can come back to you when a suitable role opens, and your CV is read automatically in the same way to produce a summary of your skills that helps the hiring team search. We only email you about new roles if you agree to job alerts, and you can stop them at any time. Talent pool data is kept for twelve months from the last time you confirmed you want to stay, and we write to you before then so you can choose to stay or be deleted. You may at any time request access to your data, its correction or deletion, or withdraw your consent, by writing to the address provided for that purpose. We will respond within the periods set out in the Personal Data Protection Law of the Kingdom of Saudi Arabia.
12. Suppliers
When a company registers as a supplier through the drovox website, we collect the company's details (name, unified number, VAT number, city, address, website and size), the categories it supplies, its documents (commercial registration, VAT and Zakat certificates, IBAN letter and any optional certificates), the contact person's name, job title, email and mobile number, and the conflict-of-interest declaration. This data is used to qualify, contact and contract with suppliers, and we may verify it with the issuing authorities. It is not used for marketing and is not sold to anyone. Documents are kept in private storage that is not open to the public. We keep an approved supplier's data for as long as the relationship lasts and the law requires, and delete a registration that was not approved, with its documents, twelve months after the decision. The contact person may ask to see, correct or delete their data by writing to us.
13. Partnership Requests
When an idea for a partnership is sent through the drovox website, we collect the organization's name, type and website, the idea, its track and the cities suggested, any company profile or file sent later, and the contact person's name, job title, email and mobile number, with their confirmation that they are authorized by their organization. This data is used to study the request and contact the sender about it. It is not used for marketing and is not sold to anyone. Files are kept in private storage that is not open to the public. We keep a request we agreed to for as long as the partnership lasts and the law requires, and delete a request we declined, with its files, twelve months after the decision. The contact person may ask to see, correct or delete their data by writing to us.
14. Updates to This Notice
We may update this notice from time to time. If significant changes are made, we will notify users in advance through drovox apps or other means such as email. Continued use of our services after updates constitutes acceptance of the updated notice to the extent permitted by law. We encourage users to review this notice periodically to stay informed about our current privacy practices.