Privacy and security policy

1. Controller

Naguebona C.A. (“Naguebona”, “we”) processes personal data to operate the platform that connects passengers and independent drivers in Venezuela. Contact: [email protected] · 0412-1234567.

2. Data we process

Passengers: name, courtesy title, phone, email, national ID, addresses/aliases, location during rides, trip history, payments, tips, in-ride chat/calls, uploaded photos/incidents, and tokenized card data (never full PAN or CVV).

Drivers: additionally identity and vehicle documents, photos, Pago Móvil, bank account, online location, fares, settlements and GPS traces.

Staff: account data and, when required, KYC verification results.

Technical: IP, device type, audit logs and, when applicable, chat/call transcripts for safety moderation.

3. Identity verification (Didit.me)

We use Didit.me to run the “Compliance Flow” (document + liveness and related checks). Didit processes biometric and document data as our verification provider. Results (Approved / Declined / In Review) and a session reference are stored on your Naguebona profile. Separate Didit applications/API keys are used for passengers, drivers and employees.

4. Purposes

Provide the matching and payment service; safety and fraud prevention; customer support; legal/regulatory compliance; service improvement.

5. Sharing

We share data with payment processors, KYC provider (Didit), messaging/email providers, and authorities when required by law. We do not sell personal data.

6. Retention and security

Data is kept while the account is active and for the period required by Venezuelan law or legitimate claims. We apply access controls, encryption of secrets (MI_MAMA) and audit logging. No method is 100% secure.

7. Your rights

You may request access, correction or deletion of your data (subject to legal retention) via [email protected].

8. Changes

We may update this policy. The latest version is always available at /legal/privacidad. Material changes may be notified in-app or by email.