Privacy Policy

This policy explains what data Fastaxi processes, why, and how long we keep it. The personal data operator is [sole proprietor or LLP name], BIN [BIN], address: [address]. Processing follows the Law of the Republic of Kazakhstan “On Personal Data and Their Protection”.

1. Data minimisation

We collect only what is needed for rides, safety and legal compliance. You sign up with Telegram, with no passport and no mandatory email.

2. What we process

Riders:

• Telegram ID, name and username, interface language;
• phone number verified through Telegram (only for verification and ride communication);
• pickup and destination addresses, location while ordering and riding, saved places;
• ride history, ratings, ride chat messages and support requests;
• technical data: IP address, device type and a device fingerprint hash for fraud prevention.

Drivers, additionally:

• surname and name, IIN (stored encrypted), driving licence number and expiry date;
• vehicle details and photos of documents, the car and a selfie for moderator review;
• location while online, accepted and completed orders, pass payment records.

3. Why we process data

• placing and fulfilling orders, calculating prices, navigation;
• verifying drivers and preventing fraud;
• ride safety, handling SOS signals and complaints;
• user support and ride notifications;
• accounting for driver payments and complying with the law.

4. Who receives data

• the other side of the ride — only the name, rating, car details and position on the map; phone numbers are never shared;
• Telegram — for sign-in, the Mini App and bot notifications;
• Stripe — for card payments of driver passes on the website;
• map providers (2GIS, OpenFreeMap) — IP address and map area when the map loads;
• government authorities — upon lawful request.

Transfers outside the Republic of Kazakhstan are based on a separate consent.

5. Where data is stored

Databases with personal data are hosted in line with the data localisation requirements of the Republic of Kazakhstan. Data is encrypted in transit, and specific fields (IIN, licence number) are encrypted in the database.

6. Retention

• ride location points — 90 days, after which only the total distance is kept;
• ride chat messages — 180 days; with an open complaint or SOS — until the request is closed plus 180 days;
• documents of rejected drivers — 180 days;
• security log — at least 1 year;
• ride history — while the account exists; after deletion rides are kept without personal data for accounting and disputes.

After a driver is verified we keep a pseudonymous hash of the IIN from which the number cannot be restored. It prevents free orders from being granted again on re-registration.

7. Your rights

At any time you can:

• see what data we keep about you and download a copy in “Settings” in your account;
• correct inaccurate data;
• withdraw consent to marketing messages;
• delete your account: the profile is anonymised within 15 working days.

If you have an active ride or an unfinished payment, you can delete the account once they are completed.

8. Cookies

The website uses only necessary cookies for sign-in and protection against request forgery. See the Cookie Policy.

9. Contacts

Personal data requests: [email protected].