Privacy Policy
What data Transitoo collects, why, who it is shared with and how to exercise your rights.
This translation is provided for information only. In the event of any discrepancy, only the French version prevails.Read the French version
1. Who is responsible for your data
SUNUTECH, a company incorporated under Senegalese law, RCCM (Trade and Personal Property Credit Register) No. SN DKR 2024 B 48740, NINEA (national business identification number) No. 011713494, with its registered office at Keur Mbaye Fall, Cité Saba 422, publisher of the Transitoo platform (hereinafter “we”).
Contact for any question about your data: contact@transitoo.cloud.
Two distinct roles, not to be confused
Our responsibility differs depending on the service:
- Transitoo Go (marketplace) and driver accounts: we are the data controller. We determine the purposes and the means of the processing.
- Transitoo for businesses (freight forwarding software): the client company is the data controller for the data relating to its customers, files and employees. We act only as a processor, on its instructions. For such data, please contact first the company that gave you access.
2.1 What you provide to us
- Account: surname, first name, telephone number, email address, password (stored as a hash, never in plain text), profile photo if you add one.
- Identity verification (drivers and carriers): identity document, driving licence, vehicle registration certificate, insurance certificate, company documents. These documents are a condition of access to jobs: without them, an account remains unverified.
- Shipments: pickup and delivery addresses, nature and weight of the goods, recipient’s contact details, instructions, photos.
- Payment: history of credit purchases and invoicing. We do not store any bank card numbers: payments are processed by our service providers (see §5).
- Communications: messages to support, reports, complaints, ratings.
2.2 What we collect when you use our services
- Geographic location — see §3, which is entirely devoted to it.
- Job data: pickup and delivery timestamps, route followed, distance, waiting time, status, delivery confirmation code, proof-of-delivery photos.
- Device and connection: model, operating system, app version, IP address, session identifier, technical error logs.
- Usage: screens viewed, jobs applied for, offers accepted or declined. This information feeds into the dispatching of trips and fraud detection.
2.3 Data from other sources
Your client company, when it creates access for you; our payment providers, to confirm a transaction; shipping lines and freight forwarders, for container tracking.
3. Geolocation, in plain terms
This is the most sensitive data we process, and we describe it as it is today rather than as it should be.
What we do: the driver app records your position while it is open, at a rate of approximately one reading every 30 seconds or every 50 metres, and more frequently during active navigation.
Why: to offer you jobs near you, to allow the shipper to track their goods, to calculate the distances and waiting times that determine your pay, and to establish what happened in the event of a dispute.
What we owe you and do not yet have: a setting allowing you to stop the collection from within the app, and collection strictly limited to the periods when you are on a job. . In the meantime, closing the app stops the collection. You can also withdraw location permission in your phone’s settings — the app remains usable, but you will no longer receive job offers.
4. Automated processing
Some decisions are made by our systems without human intervention:
- Job assignment: offered to the nearest available drivers, in successive circles. A refusal or a lack of response passes the offer on to the next driver.
- Pricing: calculated from the distance, the type of vehicle, the applicable rate schedule and the waiting time recorded.
- Fraud and abuse prevention: detection of abnormal behaviour, which may lead to the restriction or suspension of an account.
You may challenge an automated decision that affects you by writing to the address given in §1. A human review will be carried out.
5.1 Between users
For a trip to take place, certain information is shared: the shipper sees the first name, the photo, the rating, the vehicle and the position of the selected driver; the driver sees the addresses and the contact details needed to carry out the trip. Exact contact details are only revealed once the carrier has been selected — never at the application stage.
5.2 Our service providers
| Provider | Role | Data |
|---|---|---|
| Google Maps Platform | Maps, addresses, routes | Positions, addresses entered |
| Orange SMS Pro, Termii | SMS (codes, alerts) | Telephone number |
| Resend | Sending emails | Email address, message content |
| Novu | Notifications (hosted on our servers) | Identifier, content |
| Ably | Real-time tracking | Positions during a trip |
| CinetPay, PayDunya, PayTech | Payments | Amount, transaction identifier |
| Cloudflare R2 | Storage of documents and photos | Supporting documents, proofs of delivery |
| Sentry | Detection of technical errors | Logs, session identifier |
| ShipsGo | Container tracking | Container and bill of lading numbers |
| Vercel, Hetzner | Hosting | All data processed |
5.3 Authorities
Upon a lawful request from a competent judicial or administrative authority, or to establish, exercise or defend a legal claim.
We do not sell your data and do not pass it on to any data broker.
6. Transfers outside Senegal
Our application servers and databases are hosted in Europe, and several of the providers listed in §5 are established outside Senegal. Your data is therefore subject to a cross-border transfer within the meaning of Articles 49 et seq. of Law No. 2008-12 (Senegal’s law on the protection of personal data).
7. How long we keep your data
| Data | Retention period |
|---|---|
| Active account | For the entire duration of the relationship |
| Deleted account | |
| Job history and invoicing | |
| Location traces | |
| Proofs of delivery (photos, codes) | |
| Technical logs |
After these periods, the data is irreversibly deleted or anonymised.
8. Your rights
Law No. 2008-12 grants you the rights of access, rectification, objection and erasure, as well as the right not to be subjected to unsolicited marketing.
To exercise them: contact@transitoo.cloud. We respond within .
Some data cannot be deleted on request: an invoice that has been issued and the records of a disputed trip must be kept for the legally required period or for the duration of the dispute.
If you are not satisfied with our response, you may refer the matter to the Commission de Protection des Données Personnelles (CDP, Senegal’s data protection authority).
9. Security
Encryption of communications (HTTPS), passwords and codes stored as hashes, segregation of data between client companies, logging of sensitive access, encrypted daily backups, internal access restricted to what is strictly necessary.
No system is infallible. In the event of a breach likely to affect your rights, we will inform you, as well as the CDP.
10. Minors
Our services are not intended for persons under 18 years of age, and we do not knowingly collect their data.
11. Changes
Any substantial change will be notified to you in the app or by email before it takes effect. The version in force and its date appear at the top of this document.