Privacy notice

Who operates Sidecar?

GSV EE (Ετερόρρυθμη Εταιρεία)
Pergamou 26, Athens, Greece
Contact: Support contact form.

Information we use

• Account information, sign-in identifiers and optional social sign-in information.
• Rider Pass details you choose to provide, including your name, photo, interests, languages, boundaries and social links. Some choices may reveal sensitive information; leave them unspecified if you prefer.
• Plans, requests, memberships, group and direct messages, notifications, commendations, reports and blocks.
• Selected cities and saved preferences. “Locate me” asks for device permission and sends coordinates to OpenStreetMap’s Nominatim service to resolve a place name; the resulting city or position may be remembered on your device.
• Payment references and promotion status. Stripe processes card details. Optional Stripe Identity checks use Stripe-hosted ID and selfie submission; Sidecar does not receive raw ID images through its verification flow.
• Technical information involved in hosting, error reporting and third-party requests, such as IP address and browser information.

Why we use it

We process information to provide accounts, plans, conversations and purchased promotions; maintain security and investigate reports; and meet legal obligations. Depending on the purpose, the legal basis is performing our service agreement, legitimate interests in operating a safe service, legal obligations or consent.

Optional sensitive self-description should only be shared deliberately. You can remove it from your profile; removing it does not undo information someone has already seen. We do not infer faith, gender or cultural identity from photos or location. The operator must review the consent arrangements for any special-category data before collecting it.

Who can see it

Public profile and plan information can be visible to other visitors. Group conversations are limited to eligible members; direct messages are available to their participants. Reports are handled privately rather than published as ratings.

Lovable Cloud provides hosting, account, data and error-reporting services. Stripe handles payments and optional identity verification. Google Maps receives technical requests when you open Map. Google hosts our web fonts. OpenStreetMap resolves requested locations. Social sign-in providers process their own sign-in flows. External social links are governed by the destination’s policies.

Providers may process information outside the EEA. Applicable provider contracts and transfer safeguards require operator review; this notice does not certify that review is complete.

Support messages

When you contact support, we privately store your name, reply email, topic, message and submission time to handle your request. These messages are not visible to other visitors. Do not include unnecessary sensitive information.

Retention and your rights

Records are kept while needed to provide the service. Safety evidence and payment records may need to be kept longer for legal obligations or legitimate safety purposes. Exact retention periods and deletion procedures still require operator review.

You may request access, correction, deletion, a portable copy, restriction or object to relevant processing. Where consent applies, you may withdraw it. Use the Support contact form; ownership checks may be required. You may also complain to your local data protection authority, including the Hellenic Data Protection Authority in Greece.

For device storage and external services, see our Cookies notice.