Privacy Policy — FazRoad Service Provider App
Part of the FazRoad roadside services platform in Saudi Arabia
Last updated: September 7, 2026This Privacy Policy explains how FazRoad ("we", "the Platform") collects, uses, shares, and protects your data when you use our Service Provider app (for tow truck drivers). By using the app, you agree to the practices described in this policy.
1. Who We Are
The FazRoad Service Provider app is owned and operated by Bravco, based in Makkah, Saudi Arabia. For any questions about this policy, contact us at bravco.sa@gmail.com.
2. Data We Collect and Why
| Data Type | Purpose |
|---|---|
| Account data: full name, phone number, email | Account creation, verification, and communication |
| Precise geolocation | Matching nearby requests and showing live trip tracking to the customer |
| Verification documents: national ID/residency permit, driving license, vehicle documents | Verifying legal eligibility to provide towing services and approving your account |
| Financial data: IBAN | Paying out your earnings from completed services |
| Vehicle data: model, plate number, tow truck type | Matching the requested service type to your vehicle |
| Order and trip data: pickup/destination locations, price, status, timestamps | Operating the service and maintaining trip records and billing |
| Device identifier (Firebase notification token) | Sending order and status notifications |
| Customer ratings and wallet/earnings transactions | Measuring service quality and managing your earnings |
3. Legal Basis for Processing
We process your data based on: (a) performance of the contract between us as your service-provider agreement on the platform, (b) compliance with legal obligations related to identity verification and towing/transport activity licensing, and (c) your explicit consent where required (e.g., location access and notifications).
4. Sharing and Third Parties
We do not sell your data and do not use it for advertising. Your data is shared only in the following cases:
- Your name (and a contact method, during an active trip only) is shown to the customer you are serving.
- Your data is processed by the following infrastructure providers, acting as our data processors:
| Provider | Purpose |
|---|---|
| Supabase | Database hosting, authentication, and storage |
| Google Firebase Cloud Messaging | Push notifications (collects device/installation token) |
| Mapbox | Maps display (may collect location/usage analytics data) |
The app does not use any third-party analytics, advertising, or crash-reporting SDKs beyond those listed above.
5. Location Data
Your precise location is only collected while the app is running in the foreground — when your status is "online" and during active trips. The app does not track your location in the background or while closed.
6. Identity Documents and Financial Data
Verification documents (national ID/residency, driving license, vehicle documents) are treated as sensitive identity data and are uploaded to private storage accessible only to authorized administrators for review and account approval. Your IBAN is used exclusively for paying out your earnings and is not shared with any party outside the payout process.
7. Notifications
We use your device's Firebase Cloud Messaging (FCM) token to send notifications about new orders, trip status, and important operational updates. You can manage notification permissions from your device settings.
8. Data Retention
We retain your data for as long as your account remains active on the platform, and for as long as necessary to comply with legal, accounting, or dispute-resolution obligations, after which it is deleted or anonymized.
9. Account and Data Deletion
You can delete your account at any time directly from within the app via: Profile → Delete Account.
Upon confirming deletion, the following are permanently erased:
- Your account and profile data.
- Uploaded verification documents (fully erased from storage).
- Location records associated with your account.
- Ratings and logs associated with your activity on the platform.
This action is final and cannot be undone once confirmed.
10. Data Security
- All data is encrypted in transit via HTTPS/TLS.
- Row-Level Security (RLS) policies are applied to prevent unauthorized database access.
- Sensitive documents are stored in private storage, separate from general account data.
11. Your Rights
Under Saudi Arabia's Personal Data Protection Law (PDPL), you have the right to:
- Access the personal data we hold about you.
- Correct any inaccurate or incomplete data.
- Delete your data (via the in-app account deletion feature, or by contacting us).
- Withdraw your consent to specific processing (such as location access) via your device settings, noting this may limit your ability to use certain app features.
To exercise any of these rights, please contact us at bravco.sa@gmail.com.
12. Children's Privacy
This app is not directed at children, and we do not knowingly collect data from individuals below the legal age of contractual capacity. If we become aware that we have collected data from a minor without appropriate legal consent, we will delete it promptly.
13. International Data Transfer
Your data may be processed or stored on servers operated by the providers listed above (such as Supabase, Google Firebase, and Mapbox), which may be located outside Saudi Arabia. Where this occurs, we ensure such transfers comply with the international data transfer requirements of the Saudi Personal Data Protection Law.
14. Changes to This Policy
We may update this policy from time to time to reflect legal or operational changes. The "Last updated" date at the top of this page will be revised accordingly, and we will notify you via the app or your registered email in the event of material changes.
15. Contact Us
For any questions or requests related to your data privacy, you can reach us at:
Email: bravco.sa@gmail.com
Address: Makkah