Privacy Policy
Effective 11 October 2026
The short version. We collect what we need to match you with a vehicle, keep rides safe and move money correctly: your phone number, profile, identity documents (for owners and drivers), booking details and, only during an active booking, your location. We share booking details with the other party to the ride and with the service providers that run payments, SMS, maps and notifications. We do not sell your data.
- Who we are
- What we collect
- Location
- How we use it
- Who we share it with
- App permissions
- How long we keep it
- Deleting your account
- Your choices and rights
- Security
- Children
- Changes and contact
1. Who we are
CoxsRide (“we”, “us”) runs a marketplace in Cox's Bazar, Bangladesh, where tourists book a Chander Gari, E-Tomtom or Tomtom with a local driver. This policy covers the CoxsRide tourist app, the CoxsRide Vendor app, the ride-tracking links we generate, and this website.
Vehicle owners and drivers on CoxsRide are independent. When they receive your booking details they are responsible for using them only to provide your ride.
2. What we collect
Everyone
- Account: mobile number (used to sign in with a one-time SMS code), name, optional email, profile photo, preferred language.
- Device and usage: push-notification token, last sign-in time and IP address, and basic app and network information needed to keep you signed in securely.
- Communications: in-app chat messages (text, photos, shared locations), support tickets and your messages with our team.
- Reviews: ratings, comments, tags and photos you post, and reviews others post about you.
Tourists
- Bookings: vehicle, dates and times, pickup and drop-off addresses and coordinates, special requests, cancellations and their reasons.
- Saved places and emergency contacts you choose to add.
- Payments and wallet: payment method, amounts, transaction references and status returned by our payment provider, wallet top-ups, balance and history, promo codes and loyalty points. We do not receive or store your full card number, PIN or mobile-banking password; those are entered on SSLCommerz's secure page.
Vehicle owners (vendors) and drivers
- Identity and business: name, date of birth, National ID number, business name, trade licence and TIN where applicable.
- Driving: driving licence number, type, expiry and photo; for drivers you add, their name, phone, photo, NID images, licence details, experience and an emergency contact. If you add a driver, you confirm you have their permission to share this information with us.
- Vehicles: registration number, make, model, year, colour, photos, pickup point, and registration, fitness, insurance, tax-token and route-permit documents with their expiry dates.
- Payouts: bKash, Nagad or bank account details (account number, bank, branch, routing number), earnings, commission and payout history.
- Performance: acceptance rate, response time, online status, ratings and tier.
3. Location
Location is central to a ride-hire service, so here is exactly when we use it:
- While you use the app, to show nearby vehicles, pick addresses on the map and set a vehicle's pickup point.
- During an active booking only (from confirmation through the end of the ride), the app with the ride screen open sends its position to us about every 10–30 seconds, along with speed, heading, accuracy and battery level. We use this to show both sides where the vehicle is, to support SOS, to flag unsafe speeds and to resolve disputes.
- Trip sharing: if you share a live-tracking link, anyone with the link can see that ride's location for up to 6 hours.
- SOS: if you press SOS, we send your name, phone number and last known location to the CoxsRide safety team.
We do not track your location in the background when you are not in an active booking, and we do not track location for advertising.
4. How we use your information
- To create and secure your account and sign you in with a one-time code.
- To run bookings: match tourists with owners, calculate fares and fees, start rides with a ride code, and handle extensions, late returns and cancellations.
- To process payments, refunds, wallet top-ups, owner payouts and dues owners pay on cash rides.
- To verify identity, licences and vehicle documents, and to keep unsafe or fraudulent users off the platform.
- For safety: live tracking, SOS, incident and dispute handling.
- To send booking updates, ride reminders and account messages by push notification, SMS and in-app inbox.
- To provide support and respond to your requests.
- To improve the service, including crash reports and usage statistics in the Vendor app.
- To meet legal, tax and accounting obligations and to enforce our Terms of Service.
5. Who we share it with
We do not sell your personal information. We share it only as follows:
The other side of your ride
When a booking is confirmed, the owner (and their assigned driver) sees the tourist's name, phone number, photo, pickup and drop-off details and rating; the tourist sees the owner's or driver's name, phone number, photo, vehicle details, rating and live location during the ride. Reviews are visible to other users.
Service providers
| Provider | What for | What they receive |
|---|---|---|
| SSLCommerz | Card, mobile-banking (bKash, Nagad and others) and internet-banking payments | Payment amount, booking or top-up reference, your name, phone and email |
| BulkSMSBD | Sign-in codes and SMS alerts | Your mobile number and the message text |
| Google Maps Platform | Maps, place search and address lookup | Map searches and coordinates you look up |
| OpenStreetMap (Nominatim) | Turning coordinates into addresses | Coordinates being looked up |
| Google Firebase | Push notifications (both apps); crash reports and usage analytics (Vendor app only) | Device token, notification content, crash and app-usage events |
| Hosting and infrastructure providers | Running our servers, databases and file storage | Data we store, on our behalf |
Some of these providers, such as Google, may process data outside Bangladesh under their own security commitments.
Legal and safety
We may disclose information to the police, courts or other authorities when required by law or a valid legal request, or when we believe in good faith it is needed to protect someone's life or safety, investigate fraud, or defend our legal rights. Where the law allows, we will tell you about a request for your data.
Business changes
If CoxsRide is merged, acquired or sells its assets, your information may transfer to the new owner, who must keep honouring this policy.
6. App permissions
- Location (both apps): see section 3.
- Camera and photos: to take or choose your profile photo, owner and driver identity and licence documents, vehicle photos and chat images.
- Notifications: for booking requests, ride updates and alerts.
- Biometrics (Vendor app, optional): Face ID or fingerprint is checked on your device by the operating system; we never receive your biometric data.
You can turn any permission off in your phone's settings. Some features, such as booking pickup on the map or live tracking, will not work without it.
7. How long we keep it
- Account and profile: while your account is open.
- Bookings, payments, payouts, refunds and invoices: as long as needed for accounting, tax and dispute purposes, which can be several years after the transaction.
- Identity and vehicle documents: while your account or listing is active, and afterwards only as long as needed to handle disputes, fraud or legal requests.
- Ride location history: kept with the booking record for safety, dispute and insurance purposes.
- Chat and support messages: kept with the related booking or ticket.
8. Deleting your account
You can delete your account in either app under Profile → Delete Account. Your account is deactivated straight away. If you sign in again within 7 days, it is restored. After 7 days it cannot be restored, and signing in with the same number creates a new account.
Owners must first finish or cancel any open bookings, wait for any payout in progress, withdraw earnings above the payout minimum and settle any commission owed. When you delete, your vehicles are hidden from tourists straight away. Smaller leftover earnings are settled with you by our team. Drivers added by an owner can ask the owner to remove them, or contact [email protected].
After deletion we remove or anonymise your personal information, except records we must keep for legal, tax, safety or dispute reasons (see section 7). Reviews you wrote may remain without your name.
9. Your choices and rights
- Access and correction: view and edit most profile details in the app, or ask us for a copy of the information we hold about you.
- Deletion: see section 8.
- Notifications: turn off push notifications in your phone's settings. We will still send essential messages such as sign-in codes and booking confirmations.
- Permissions: withdraw camera, photo or location access at any time in your phone's settings.
To make a request, email [email protected]. We may need to confirm it is you before acting, and we aim to reply within 30 days.
10. Security
We use encrypted connections (HTTPS), one-time sign-in codes with rate limits and lockouts, short-lived access tokens, restricted staff access with two-factor authentication for administrators, and audit logs of administrative actions. No system is perfectly secure; if we learn of a breach that affects you, we will notify you and the relevant authorities as the law requires.
11. Children
CoxsRide is not intended for anyone under 18. You must be 18 or older to create an account, book a vehicle or list one. If you believe a child has given us personal information, contact us and we will delete it.
12. Changes and contact
We may update this policy as the service changes. We will post the new version here with a new effective date and, for significant changes, tell you in the app before they take effect.
Questions or requests: [email protected] · +880 1800-269743