1 Information we need
Account and contact information includes your name, username, phone number, email, saved addresses and protected login credentials. Service information includes request details, the applicant's relationship to the document holder, consents or authorisations, required documents, and the ID and face images needed to verify a document service applicant.
Trip information includes pickup and drop-off locations, time, passenger details and numbers, luggage, child seat requirements and the airport information you provide. We request only what is needed to arrange and carry out the booking safely. Booking does not require continuous background location tracking.
Transaction and support information includes payment amounts, references and status, refunds, communications, complaints and delivery evidence. Technical information includes device, browser and connection details, internet address, and access and security logs needed for operation and protection. Optional usage information is subject to the relevant tool notice and appropriate consent.
2 Purposes and grounds for processing
We process the information needed to create your account, fulfil your request, verify eligibility, arrange the service, take payment, deliver documents and communicate with you. Where permitted by law, the basis is the contract or steps before entering it. We also process information necessary to meet specific legal obligations, such as financial recordkeeping or responding to a competent authority's request.
Where explicit consent is required, we request specific consent before processing and explain the purpose, information, parties involved and how to withdraw it. This is particularly relevant to verification data, information requiring special protection, optional marketing and any overseas transfer requiring consent. We do not use document or face images for advertising or to train general-purpose AI models.
Necessary records are used to detect unauthorised activity, protect rights and resolve complaints within the limits of the law. We do not introduce a new purpose incompatible with the disclosed purpose without an appropriate lawful basis and notice to you or consent where required.
3 Other people's data and identity checks
If you provide another person's information or book for them, you must rely on their consent or valid legal authority. We provide the relevant privacy notice and request any required consent where applicable. A family relationship alone does not authorise access to their information or documents.
The platform does not provide independent accounts for children to enter into contracts. Information about a minor required for a document or trip is supplied by their guardian or another legally authorised person, subject to the applicable consents and safeguards. A child's age and approximate weight are requested where needed to select a suitable seat and are not used for marketing.
The first identity check for document services uses ID and face images captured with the in-app camera and reviewed by authorised personnel. It is not government certification or automated facial recognition. The review result, reference and date are retained separately from the temporary images. Verification does not replace checks of authority to apply for another person on each request.
4 Who receives information
Only necessary information is shared with the service office assigned to the document request, the competent authority where the procedure requires submission, and the delivery provider handling delivery. Partners do not access requests not assigned to them or documents they do not need.
For trips, the passenger's name, contact number, trip locations and necessary execution details are shared with the transport company and driver. Booking and driver details are sent to the account holder and the relevant passenger. Transport companies do not receive images from government document services.
Payment providers use the transaction information needed to collect payments and issue refunds according to their legal roles and policies. Card information is entered through the secure payment interface. Full card numbers and card security codes are not stored in ordinary app data.
Hosting, operations and technical support providers may receive limited access under appropriate contractual safeguards and instructions. Information may also be disclosed to a competent authority where a valid legal obligation requires it, limited to what is necessary. We do not sell your personal data.
5 Device permissions and digital tools
Camera permission is requested when needed for verification or document capture, photo access when an allowed attachment is uploaded, and location permission if you choose to use your location for a trip. You can manage permissions on your device. A feature may be unavailable if its necessary permission is refused. Manual location entry is available where the service supports it.
Support may include an automated assistant. This is identified during use, with an option to reach a staff member. Do not send ID images or confidential payment information to the assistant. Any transfer of chat information to an external provider is subject to notice, applicable legal limits and appropriate safeguards.
Necessary storage tools or cookies support website operation and session security. Non-essential analytics, advertising and interface interaction recording tools are activated only with the notice and choice required by law. Privacy settings identify the tools actually used, their purposes and durations, and how to change your choices. These tools must not capture document images or the contents of identity, payment or password fields.
6 Retention and deletion
Document images and service attachments are deleted thirty days after delivery of the final output. This includes the ID and face images used for the first verification, thirty days after delivery of the first service. For an active complaint or dispute, only the evidence necessary for that case is retained until closure and then deleted, unless a specific legal obligation requires otherwise.
Core account information and saved addresses remain while the account exists, subject to correction and deletion request rights. The verification result and necessary audit information are retained separately. Images do not become a permanent part of the account profile. Administrative and security audit records are retained for at least twelve months under the approved retention schedule. Order and financial records follow a separate legally required retention period; their retention alone does not justify keeping document images.
Draft attachments are deleted after thirty days without editing, following a warning. After two years without a login or service request, we send a notice with an option to keep the account. If you do not respond within thirty days, the account is deleted, except for information required for a legal obligation or active claim. Choosing to keep the account resets the inactivity period.
Some records may need limited retention for a legal obligation or active dispute. We explain the reason and scope of an exception on request. Deletion procedures cover processing providers and backups through a documented deletion cycle. Backups are not used as a substitute for keeping deleted images in operational storage.
7 Your rights and how to exercise them
Subject to the law, you may ask to know about, access and obtain your information, correct or complete it, request deletion, restrict its processing or object to processing. You may withdraw consent for processing that relies on it. Withdrawal does not affect the lawfulness of prior processing. A feature that needs that processing may no longer be available if there is no other lawful basis.
Request account deletion through app settings or hello@inzerv.co. We verify the requester's identity in a way proportionate to the sensitivity of the action, and explain the effects, expected timeframe and any information that must be retained and why. Deleting an account does not automatically cancel an active service request or remove your right to money owed to you or an existing lawful obligation.
A document holder or passenger may exercise their rights even if they do not own the account. We do not disclose other individuals' data when responding. Requests are handled under the applicable legal procedures and deadlines. You may complain to the Personal Data Protection Center or the competent authority and seek a judicial remedy.
8 Security and overseas transfers
We apply safeguards appropriate to the sensitivity of the information, including protection of transmission and storage, access limited by role, logging of sensitive access and permission management. No system can prevent every incident. If an incident occurs, we take containment measures and make the notifications legally required to the competent authorities and affected individuals.
A service outside Egypt or an approved operating arrangement may require an overseas data transfer. Before transfer, the notice identifies the recipient, country, purpose, lawful basis and safeguards, and the required consents, licences or permits must be obtained. General acceptance of this policy is not blanket consent to an unspecified transfer.
Updates are published with their effective date. We notify you of material changes and request fresh consent where required. For privacy enquiries or to exercise your rights, email hello@inzerv.co with a clear subject. Do not include unnecessary sensitive information.