1. Data controller
The controller of data handled by DROGA is the service owner. For privacy questions, contact burdeniuk.oleksiy.pl@gmail.com or +48 798 884 005.
2. Data we process
A transfer request may include the route, date and time, passenger count, luggage, child seats, trip type, phone or email, and optionally your name and message.
The AI assistant processes the conversation and the pages and sections viewed, actions clicked and form fields changed during the current session so it can remember information already provided. We do not record passwords or payment details. Your IP address may be used temporarily to prevent abuse.
During a live voice conversation, microphone audio and responses are sent to OpenAI over a WebRTC connection created after secure session initialization by the Vercel server. Transcripts become part of the chat. The recording fallback may use Vercel AI Gateway. DROGA does not permanently store the original or generated audio.
3. Purposes and legal bases
We use data to quote, arrange and provide a transfer, answer questions and secure the service. Processing is based on steps before a contract, performance of a contract, your consent or our legitimate interest in protecting the service.
4. Service providers
Data may be processed by providers needed to operate the service: Vercel (hosting and AI Gateway), the selected AI model provider, Resend (email), and map services based on OpenStreetMap, Photon, Nominatim and OSRM. They receive only the data needed for the requested operation.
5. Retention
If you provide contact details in chat but do not submit a booking, a summary of the conversation and session activity may be emailed to the DROGA manager so your request can be answered. We retain requests only as long as needed for contact, the ride, legal duties and potential claims.
6. Cookies and device storage
Your language, conversation and current-session activity are stored in cookies or session storage. Technical events without form-field values may appear in Vercel runtime logs. The PWA may cache essential files. We do not use advertising cookies.
7. Your rights
You may request access, correction, deletion, restriction, portability or object to processing. You can withdraw consent at any time and lodge a complaint with the Polish Data Protection Authority.
8. Transfers and updates
Some providers may process data outside the EEA using appropriate legal safeguards. We may update this policy as the service changes; the current revision date appears above.