Privacy Policy

Beridy Limited (“Beridy,” “we,” “us”) provides booking and dispatch software to independent transportation businesses (“Operators”). This policy covers two different relationships.

• Operator data. If you sign up for a Beridy account, we collect your data directly and are the party responsible for it.
• Rider and driver data. If you book a ride or drive for an Operator through their Beridy booking page (whether you visit it directly or it's embedded on the Operator's own website), we process your data on that Operator's behalf. The Operator determines how that data is used and is the right first contact for a privacy request about your trip.

Account information (Operators). Name, email, business name, subdomain, phone number, and billing details. Billing details are handled by our payment processor and are not stored by Beridy.

Booking information (Riders). Name, phone, email, pickup and dropoff addresses, ride and vehicle preferences, payment method notes, and any coupon codes used.

Driver information. Name and contact details, GPS location while a ride is active, and, where an Operator uses electronic visit verification (EVV), a captured signature and pickup and dropoff coordinates used to confirm a ride happened as scheduled.

Usage data. Standard web request logs and the authentication cookies needed to keep you signed in. We do not use third-party advertising trackers.

We use this information to:

• Operate the booking, dispatch, and driver features Operators rely on.
• Calculate ETAs and verify pickup and dropoff locations for EVV recordkeeping.
• Send transactional email, including booking confirmations, receipts, and account notices.
• Bill Operators for completed rides and manage subscriptions.
• Secure the Service and prevent fraud or abuse.
• Improve the Service based on how it is used.

Each Operator's data is isolated at the database level: access controls enforce that one business cannot read another business's bookings, drivers, or customers. We do not sell personal data. We share it only with the service providers below, each of which processes it solely to help operate the Service.

• Supabase: database, authentication, and file storage.
• Resend: delivery of transactional email.
• Lemon Squeezy: billing. Lemon Squeezy acts as merchant of record for subscription charges and handles payment details directly.
• Google Maps Platform: address autocomplete and geocoding for pickup and dropoff points.
• Vercel: application hosting and custom domain and SSL provisioning.

We may also disclose information where required by law, to protect rights and safety, or as part of a merger or acquisition, in which case affected Operators will be notified.

Beridy is based in Kenya and serves Operators and Riders in other countries. The service providers listed above operate infrastructure outside Kenya, including in the United States and the European Union. Where personal data is transferred out of Kenya, we rely on contractual safeguards with those providers to protect it, consistent with Kenya's Data Protection Act, 2019.

We keep Operator and ride data for as long as an account is active, plus a reasonable period after closure to allow data export and meet recordkeeping obligations, including EVV records an Operator may need for its own compliance. We delete data on request unless we are required to retain it longer by law.

Data is encrypted in transit, dashboard access requires authentication, and database access controls scope every query to the signed-in business. No system is completely secure. We will notify affected Operators if we learn of a breach affecting their data.

Under Kenya's Data Protection Act, 2019, and equivalent laws that may apply where you are located, you have the right to request access to, correction of, deletion of, or a copy of the personal data we hold about you, and to object to certain processing. To exercise these rights, email hello@beridy.com.

If you are a Rider or driver, we will typically route your request to the Operator you booked or drove with, since that business controls the data, and assist it in fulfilling the request. If you are in Kenya and believe we have not resolved your request properly, you may complain to the Office of the Data Protection Commissioner.

We use cookies only to keep you signed in and to remember basic session state. We do not use third-party advertising or cross-site tracking cookies.

Beridy is not directed at children. Rides for minors are booked by an adult on their behalf, and we do not knowingly collect account information directly from children under 16.

We may update this policy as the Service evolves. For a material change, account owners will be notified by email or in-app notice before it takes effect.

Questions about this policy or your data can be sent to hello@beridy.com.