Draft, to be checked by a lawyer

Privacy notice

Version 2026-10-22

1. Who is responsible

GK Coding (address: to be added) is responsible for the processing of your personal data in the Vanzo apps and on vanzo.gkcoding.dev. Contact for privacy questions and requests: george.kassih@gkcoding.dev.

2. What is stored and why

• Account: email address, name, phone number, language. To sign you in and to let the other side of a trip contact you. Phone numbers are shown to the other side only while a trip is under way.
• Trips: pickup and drop-off addresses, times, prices, the van size, your note and item photos. To carry out the order and for receipts and tax records.
• Location (drivers): only while you are online: the last position (to offer you orders nearby, kept 2 minutes); during a trip the route points (to show the customer the van and for disputes, kept 30 days). Never when you are offline.
• Photos: item photos and the delivery photo (30 days), report and support request photos (90 days).
• Driver documents and vehicle: to check that you may drive for Vanzo; stored encrypted and shown only to Vanzo's admin through short-lived links.
• Payments: card brand, last 4 digits, the payment status and Stripe references; for drivers the Stripe account and payout state. The full card number is entered at Stripe and never reaches Vanzo.
• Ratings, reports and support requests: stars, comments, your requests and messages with their photos, our answers, and notes our support team keeps about a request or about you, to keep the service safe and to handle problems.
• Terms accepted: which version of the Terms and of this Privacy notice you accepted and when (customers in the app, drivers at sign-up, this notice when you create your account and after each new version), to show what applies to you.
• Blocked driver sign-ups: if a driver account that Vanzo suspended is deleted, Vanzo keeps a one-way code (HMAC) of its email address, never the address itself, so that the address cannot sign up as a driver again.
• Driver applicants: if you apply to drive for Vanzo before signing up in the app, the name, email address, phone number, city and where you heard of Vanzo, the stage of your application and our notes about it. Once you sign up with the same email address, the application is linked to your driver account.
• Messages to drivers: which Vanzo messages (announcements) reached you, by notification or email, and when you last read them. Drivers also get reminders by notification and email before a document expires.
• Push tokens: to send you notifications about your trips.
• News from Vanzo (optional): only if you switch it on in the app (Account; off unless you do): that you agreed, when, and which version of the text you agreed to, and each time you switch it off again. Vanzo then sends you offers by notification or email; every email has a link to unsubscribe at once. Which campaigns reached you is kept 1 year. No tracking pixels, no link tracking (consent, Art. 6(1)(a) GDPR; you can withdraw it at any time).
• Promo codes and invitations: the code used on a trip and its discount; your own invitation code, which invited friends took a first trip (never their name) and your reward codes. To stop rewards for inviting yourself, Vanzo compares one-way codes (HMAC) of the card used and of a random id of the app installation, never the card number or the device itself.
• Business accounts: if your company invites you, your role (admin or booker), your cost centre, the invitation (your email, who invited you, its status) and which of your trips were booked under the company. The company's admins see your name and email; the company receives an invoice listing those trips with the cost centre and districts. When you delete your account, your memberships end; the business trips stay with the company's invoices.
• Vanzo Delivery: when you send an item, its description, weight class, declared value and photos; the name and phone number of the recipient (and of a sender other than you) and your note for the recipient; the 4-digit handover code and a tracking link. The driver sees the names and phone numbers only while the delivery is under way, and takes a photo of the item at pickup and at a handover without the code. The tracking page shows only the status, the time window, the arrival time and the van's position on the way: no names, phone numbers, addresses or prices. Vanzo sends the recipient nothing; you share the code and the link yourself. Please tell the recipient that you pass their name and number to Vanzo.

Legal bases: carrying out the contract (Art. 6(1)(b) GDPR), legal obligations such as tax law (Art. 6(1)(c)), and Vanzo's legitimate interest in a safe service and in handling disputes (Art. 6(1)(f)).

3. How long data is kept

4. Who receives data (processors)

• Stripe (payments and driver payouts): your email address and payment data; for drivers also country, identity and bank details, which Stripe collects itself.
• Google Maps Platform (address search and routes): the search text and the addresses of a trip, without your name.
• Firebase Cloud Messaging and Apple Push Notification service (notifications): your device's push token and the notification text.
• The email provider (sign-in codes, document reminders, messages to drivers and, if you agreed, news from Vanzo): your email address and the email text.
• The server host (GK Coding's server; provider and location to be added): all data above; uploaded files are stored encrypted.

Some of these providers may process data outside the EU; such transfers rely on the EU standard contractual clauses or the EU-US Data Privacy Framework (to be confirmed for each provider). The customer and the driver of a trip see the data they need for it (first name, rating, the van, addresses, phone number during the trip).

5. No tracking

Vanzo uses no analytics, no advertising and no tracking tools. Logs contain no addresses, locations, phone numbers or email addresses.

6. Your rights

• Access and portability: download all your data in the app (Account → Download my data).
• Deletion: delete your account in the app (Account → Delete account).
• Correction, restriction and objection: write to the contact above.
• Complaint: you can complain to the Austrian data protection authority (Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at).

Prices · Terms for customers · Terms for drivers · Delete your account · Vanzo home page