Privacy Policy

1. Controller

The controller of personal data is TRIAFLOW MOBILITY TECHNOLOGIES, LDA ("TriaFlow", "we" or "us"), tax and registration number (NIPC) 519474155, with its registered office at Rua A, Lote 66, Armazém RC, Quinta São João das Areias, 2685-012 Sacavém, Portugal, which operates the Motorista platform (motorista.club). In this policy, "Motorista" means the brand and platform operated by TriaFlow, and "driver" means the TVDE driver who uses the platform. Privacy contact: hello@motorista.club.

We have not appointed a data protection officer; all requests are handled through this contact.

2. Data we process

Account: identifier, name, email, phone, profile photo, if any, role (owner or driver), city, language, sign-in records and your consent choices. If you sign in with Google, we receive from Google the data you allow on Google's consent screen, such as your name, email address and profile photo.

Profile and invoicing: date of birth, address, emergency contact, tax number (NIF), IBAN and invoicing choice. NIF and IBAN are stored separately and encrypted, and are shown partly masked on the usual screens.

Documents: identity document (passport, residence permit or, if you give the consent described in section 3, citizen card), driving licence, TVDE driver certificate, vehicle documents (registration certificate, periodic inspection, insurance policy and green card) and their review status.

Rentals: listings, applications, accepted agreements (version, date and language), payments and proofs, invoices, handover and return checklists with photos, incidents, accidents, fines and tolls, star ratings and the decisions of TriaFlow's operations team ("Operations"), with their reasons.

TVDE earnings (drivers): the data in Uber's and Bolt's weekly reports relating to the driver, which we receive from these platforms as TVDE operator, in particular earnings and their components (fares, tips, tolls, cash collected, taxes, fees, campaigns and other adjustments), the trip log (date, time and vehicle plate) and the driver's identification on those platforms.

Payments: Stripe collects card details; we receive the card brand, last four digits and payment status.

Technical data: IP address, device and browser type, security and error logs, and technical signals Cloudflare uses to tell people from automated programs.

Location: your approximate city, estimated from your IP address, and, only if you allow it in your browser, your location, to suggest your city.

Waitlist: email, language and where you signed up.

Source of the data: we collect data directly from you, except for: earnings, the trip log and platform identification, which we receive from Uber and Bolt; ratings, checklists and incident reports made by the owner or by the driver linked to the same vehicle; fine, parking and toll notices, which we receive from the authorities, toll concessionaires or the vehicle owner; accident data, which we may receive from insurers; payment status and summary card details, which we receive from Stripe; and Google sign-in data, which we receive from Google. If you give us an emergency contact, please tell that person that their data is processed under this policy.

3. Why we use data and on what basis

To create and manage the account, review documents, publish listings, handle applications, conclude and perform the Terms and Conditions, the TVDE Vehicle Allocation and Use Agreement and the TVDE Driver Services Agreement, process card holds (pre-authorisations of the amount, not charges), payments and refunds, calculate and pay the weekly settlements (deducting from earnings the rent, where it has not been paid in advance, and other amounts owed) and provide support — legal basis: performance of a contract or steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).

To comply with the legal obligations we are subject to, in particular those under Law 45/2018 of 10 August, the Portuguese Highway Code (Código da Estrada), Law 25/2006 of 30 June and tax and accounting legislation, such as checking TVDE driver and vehicle requirements, communicating with IMT, I. P., and other authorities, identifying the driver in traffic-offence and toll proceedings and issuing and keeping invoices and accounting records — legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR).

To protect the platform and users against fraud and abuse, monitor errors, receive technical alerts, estimate your city from your IP address to suggest it to you, keep a record of decisions and establish, exercise or defend legal claims — legal basis: our legitimate interest in the security and proper functioning of the platform, in showing content suited to your city and in defending our rights (Article 6(1)(f) GDPR). You can object to this processing (see section 8).

On the basis of your consent (Article 6(1)(a) GDPR), which you can withdraw at any time, we process data for: usage analytics, as described in the Cookie Policy; browser location; joining the waitlist; sending promotional messages; and copying your citizen card, which is only allowed with your consent (Article 5(2) of Law 7/2007 of 5 February). Consent to copy the citizen card is optional: you can provide your passport or residence permit instead. If you withdraw it, we delete the copy of your citizen card and ask you for another valid identity document; the rest of your data is kept as set out in section 6.

4. Who we share data with

With the owner and the driver linked to the same vehicle: the owner sees the driver's first name, surname initial and rating; the driver sees the owner's first name and surname initial and the ratings of the owner and the vehicle; once the first step of the rental is completed, that is, payment of the deposit, if any, and the card hold for the first week's rent or, alternatively, payment of that rent in advance, owner and driver see each other's phone number and the driver sees the handover location.

With Uber and Bolt: the data needed to register the driver and vehicle in TriaFlow's fleet and for weekly settlements. Uber and Bolt process this data as independent controllers, under their own privacy policies.

With authorities and public bodies where the law requires, in particular: IMT, I. P., the Tax and Customs Authority, police and courts.

With the vehicle owner and with the authorities and bodies responsible for traffic, parking and tolls: the driver identification data, when required in a fine, parking or toll case relating to the rental period.

With insurers in case of an accident, and with accountants and lawyers who provide services to us under a duty of confidentiality.

With providers that process data on our behalf, as processors and under contract: Supabase (authentication, database and files, with servers in the European Union, in Ireland); Vercel (website hosting, with server functions in Dublin, and, only with your consent, visit and performance measurement); Resend (email delivery); Sentry (error monitoring, configured without IP addresses or cookies, and, only with your consent, performance measurement, with data hosted in the European Union, in Germany); Cloudflare (Turnstile form protection); and Google (Google Analytics, only with your consent).

Stripe processes payments and, for fraud prevention and its own legal obligations, also processes data as an independent controller under Stripe's privacy policy.

When you sign in with Google, Google processes the sign-in data as an independent controller, under Google's privacy policy.

We do not sell personal data.

5. Transfers outside the European Economic Area

Some providers (Supabase, Vercel, Resend, Sentry, Cloudflare, Google and Stripe) are companies based in the United States or use sub-processors based there, so data may be processed outside the European Economic Area (EEA), or accessed from outside the EEA, even when it is hosted in the European Union. These transfers rely on a European Commission adequacy decision (Article 45 GDPR) or on appropriate safeguards under Article 46 GDPR, such as the standard contractual clauses approved by the European Commission. You can ask for information about the applicable safeguards, and a copy of them, at hello@motorista.club.

6. How long we keep data

We keep data only for as long as it is needed for the purposes for which it is processed. The periods below take into account the retention periods set by law and the applicable limitation periods (Article 21(1) and (3) of Portuguese Law 58/2019 of 8 August). When those periods end, the data is deleted or anonymised.

Driver identification (drivers): name, tax number, tax and home address, number, date and issuer of the identity document, number and issuer of the driving licence, TVDE driver certificate number and the log of each rental (plate, actual handover and return times, owner). We keep this data for 5 years after the return of the last vehicle; each new rental restarts the period. Until then, traffic, parking and toll authorities can ask for the driver to be identified.

Fine, parking and toll cases: when we receive a notice, we keep the data that case needs until 3 years after the last act in it (notice, identification sent, defence, decision, payment, instalment payment, enforcement, reimbursement requested or paid); each new act restarts the period. Only the team that handles these cases can access this data, and it is never used to rate or block drivers or to set the prices that apply to them. They are processed only to the extent that the law requires or permits (Article 10 GDPR).

Account: after the account is closed, name, email, tax number and role are kept only to the extent that they appear in the records listed in this section, and for their respective periods. Date of birth, emergency contact, preferences and profile photo are deleted within 90 days of account closure.

Document images: citizen card, passport or residence permit, up to 24 months after the last rental; the copy of the citizen card is deleted earlier if you withdraw your consent to it being copied. Driving licence, TVDE driver certificate and vehicle documents, up to 5 years after the last rental.

Agreements and acceptances: 10 years after the rental ends. Checklists, photos, incidents and Operations decisions: 5 years after the rental ends.

Invoices, payments, earnings settlements and deposit movements: 10 years, as required by tax law (Article 52 of the Portuguese VAT Code).

Security and access logs: 12 months; error logs: 90 days. Usage analytics: up to 14 months. Waitlist: up to 24 months after sign-up or until you ask to leave. Consent records: 5 years after the consent ends.

Ratings: 90 days after the account is closed, the ratings you gave stop being linked to you, including through the rental record, and remain only, without a name, in the average of whoever was rated (owner, vehicle or driver); the ratings you received are deleted. No rating is deleted at the moment of closure. A rating under dispute stays until the dispute ends. Ratings you received are not carried over to a new account.

Platform identification (drivers): the driver's Uber and Bolt identifier, the active link to the platform account, the record linking that identifier to the driver's technical code and the phone number, email and name used for the fleet registration are deleted or anonymised 90 days after leaving TriaFlow's fleet; closing the account also counts as leaving. If a settlement or dispute is still open, the period starts only when it ends. Settlement records and reports keep only a pseudonymised technical code, which is no longer linked to the platform identifier and does not directly identify the driver, for 10 years.

If a record is needed in a dispute, or an authority orders it to be kept, we keep it until the end of the related proceedings.

7. Required data and automated decisions

Account data, documents (except the copy of the citizen card, which you can replace with your passport or residence permit) and payment data are needed to conclude and perform the agreements and to comply with legal obligations; without them you cannot publish listings, apply for a rental or enter into the agreements.

The platform applies automatic rules that only check objective conditions set by the agreements and the law: for example, a vehicle cannot be rented for a week in which a required document is not valid. These checks are necessary to conclude and perform the agreements (Article 22(2)(a) GDPR). You can always ask for a person at TriaFlow to review the situation, express your point of view and contest the decision.

8. Your rights

You can ask for access, rectification, erasure, restriction of processing and portability of your data, and object to processing based on legitimate interests. You can withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, write to hello@motorista.club, preferably from the email linked to your account. We reply within one month, extendable by two further months where necessary, taking into account the complexity and number of requests (Article 12(3) GDPR). We may ask you for additional information to confirm your identity; do not send identity documents in your first message. To delete your account, use the "Delete your account" page.

You can complain to the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (www.cnpd.pt).

9. Security

We check your account and role before showing protected information. Documents are kept in private storage and open through temporary links. NIF and IBAN are stored separately and encrypted. The site uses HTTPS. These measures reduce risk, but no system is completely secure.

10. Cookies, minors and changes

For cookies and similar technologies, see the Cookie Policy.

The service is not intended for anyone under 18.

We update this policy when the service or our data practices change and announce important changes. This policy is published in Portuguese and English, with the same content and the same value.