Privacy Policy

Last Updated: July 05, 2025

Vrooz is a peer-to-peer vehicle rental platform designed and operated by Trex Solutions (Pvt) Ltd ("we," "us," or "our"). We operate as an intermediary platform connecting vehicle owners with renters. We are committed to protecting your privacy and ensuring transparency in how we collect, use, and safeguard your personal information. This Privacy Policy explains our practices regarding the information we collect when you use our platform for peer-to-peer vehicle rental services in Sri Lanka.

1. Introduction

This Privacy Policy describes how Vrooz collects, uses, discloses, and protects your personal information when you access or use our website, mobile application, and related services (collectively, the "Services"). By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy.

2. About Us

Vrooz is developed and operated by Trex Solutions (Pvt) Ltd, a technology company based in Sri Lanka. As a peer-to-peer marketplace platform, we facilitate connections between vehicle owners and renters but do not own, operate, or maintain any vehicles listed on the platform. As the data controller, Trex Solutions (Pvt) Ltd is responsible for the collection, processing, and protection of your personal information in accordance with this Privacy Policy and applicable data protection laws.

3. Personal Information We Collect

We collect information to provide, maintain, and improve our Services, and to comply with applicable laws.

Information You Provide to Us

• Account Information: Name, email address, phone number, password, and profile information when you create an account
• Identity Verification: Driver's license information, national ID, passport details, and photographs for verification purposes
• Vehicle Information (for Vehicle Owners): Vehicle details, license plate, registration information, photos, insurance details, and availability when listing vehicles
• Payment Information: Bank account details, payment card information, and transaction history
• Communication Data: Messages, reviews, and feedback you send through our platform
• Support Requests: Information provided when contacting customer support

Information We Collect Automatically

• Usage Data: Pages visited, time spent on pages, search queries, and interaction patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Location Data: Approximate location based on IP address and precise location when location services are enabled
• Trip Data: Rental dates, duration, mileage, pick-up/drop-off locations, vehicle condition reports, and rental type (Self-Drive or With-Driver)

Information from Third Parties

• Background Checks: Information from government databases and screening services
• Payment Processors: Transaction information from payment service providers
• Verification Services: Identity verification and background check information
• Social Media: Information from social media accounts if you connect them to our Services

4. How We Use Your Personal Information

We use your personal information for the following purposes:

Service Provision

• Creating and managing your account
• Facilitating peer-to-peer vehicle rental bookings and processing payments between vehicle owners and renters
• Enabling communication between vehicle owners and renters
• Managing security deposits and payouts
• Providing customer support and resolving disputes

Platform Improvement

• Analyzing usage patterns to improve our Services
• Developing new features and functionality
• Personalizing your experience

Safety and Security

• Verifying user identities and vehicle ownership
• Detecting and preventing fraud, abuse, and illegal activities
• Conducting background checks and risk assessments
• Facilitating vehicle condition verification before and after rentals
• Supporting dispute resolution between vehicle owners and renters

Legal Compliance

• Complying with Sri Lankan laws and regulations
• Responding to legal requests and government inquiries
• Enforcing our Terms of Service

Marketing and Communication

• Sending service-related notifications and updates
• Providing marketing communications (with your consent)
• Sharing aggregated, anonymized data for business purposes

5. How We Share Your Personal Information

We may share your personal information in the following circumstances:

With Other Users

Privacy Protection: To maintain the privacy of both vehicle owners and renters, sensitive information is shared on a need-to-know basis and only at appropriate times:

• Basic profile information shared between vehicle owners and renters for confirmed bookings
• Exact location and contact details are shared 24 hours before trip commencement, after:
  • Security deposit is automatically captured from saved payment method (for Self-Drive rentals - standard bookings)
  • Security deposit is captured immediately at booking (for Self-Drive rentals - instant bookings)
  • Advanced payment is confirmed (for With-Driver rentals)
• Contact information to enable communication and coordination for rentals
• Trip photos, vehicle condition reports, and reviews as part of the rental process
• Driver's license information (for Self-Drive rentals) shared with vehicle owners for verification

Service Providers

• Payment processing companies for secure transactions
• Identity verification and background check services
• Customer support and IT service providers
• Cloud hosting and data storage providers
• Analytics and performance monitoring services

Legal Requirements

• When required by law or legal process
• To protect our rights, property, or safety
• To prevent fraud or illegal activities
• In connection with legal claims or investigations

Business Transfers

• In the event of a merger, acquisition, or sale of assets
• With your explicit consent

Important: We do not sell your personal information to third parties for their marketing purposes. As an intermediary platform, we share information only as necessary to facilitate peer-to-peer vehicle rentals and provide our Services.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

Types of Cookies We Use

• Essential Cookies: Required for platform functionality
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how you use our Services
• Marketing Cookies: Used for targeted advertising (with consent)

You can control cookie preferences through your browser settings or our cookie consent tool. Please note that disabling certain cookies may affect platform functionality.

7. Data Security

We implement appropriate technical, physical, and administrative measures to protect your personal information:

• Encryption of sensitive data in transit and at rest
• Secure data centers and access controls
• Regular security audits and updates
• Employee training on data protection

While we strive to protect your information, no method of transmission over the internet is 100% secure.

8. Data Retention

We retain your personal information for as long as necessary to:

• Provide our Services
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Prevent fraud and abuse

When information is no longer needed, we securely delete or anonymize it.

9. Your Rights and Choices

You have the following rights regarding your personal information:

Access and Control

• Review and update your account information
• Request a copy of your data
• Correct inaccurate information
• Delete your account and associated data

Communication Preferences

• Opt out of marketing communications
• Control notification settings
• Manage cookie preferences

Location Data

• Disable location services in your device settings
• Control location sharing preferences in the app

Account Deletion

You can request account deletion through your account settings or by contacting support. We may retain certain information as required by law or for legitimate business purposes.

10. International Data Transfers

Your information may be transferred to and processed in countries other than Sri Lanka. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses and adequacy decisions where applicable.

11. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will promptly delete it.

12. Third-Party Services

Our platform may integrate with third-party services:

• Payment processors
• Social media platforms
• Maps and location services
• SMS and notification services
• Identity verification services

These third parties have their own privacy policies, and we encourage you to review them.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Email notification
• In-app notification
• Prominent notice on our platform

Your continued use of our Services after changes take effect constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

15. Governing Law

This Privacy Policy is governed by the laws of Sri Lanka, including the Personal Data Protection Act where applicable.

16. Complaints

If you have concerns about our handling of your personal information, you may file a complaint with the Data Protection Commissioner of Sri Lanka.