Privacy Notice
Last updated: January 2025
This Privacy Notice applies once you tap the ‘Get offer’ button to get a cash loan offered by the third-party provider EmpreX Tecnologia e Correspondente Bancário LTDA (Partner) in the inDrive's mobile applications, websites and platform (collectively, the "Platform") according to the Loans Terms of Use.
The inDrive Controller IDB INTERMEDIACAO E AGENCIAMENTO DE SERVICOS EM SITES LTDA (“inDrive, “we” or “us”) processes your personal information as described in this Privacy Notice.
For the Partner to calculate your offer, inDrive shares with the Partner the depersonalised data about your activity at the Platform. This data may derive from your personal information but is shared in a form that does not reveal your identity before you proceed with application for the loan.
To facilitate the application process and the loan repayment inDrive will share with the Partner the following information about you:
- Personal and contact details: full name, birthday, gender, email, phone number;
- CPF;
- PixKey;
- Residence address;
- IP address;
- Information about you as a driver: driver and taxi license, information about the vehicle and ownership over it;
- Information on your rides at the Platform: e.g. anonymised driver and order ID, fare for the order, revenue, ride start location and time;
- Information on the amount deducted from your revenue to repay the loan.
To arrange loan receipt and repayment inDrive will receive the following information about you from the Partner:
- Offers: e.g. amount, origination fee, loan term;
- Cash loan contract between you and the Partner;
- Credit dates: e.g. credit issue date, credit withdrawal date;
- Disbursed amount;
- Information on payments due and made: e.g. total amount due, amount paid, percentage of payout for ride, direct payments to the Partner, information about overdue payments.
Please, note that we do not collect, access or store data provided by you for the KYC. This information is processed by the 3rd-party provider (ClearSale) under its Privacy Notice.
If you do not want your data to be processed for the purposes described above, please, do not tap the ‘Get Offer’ button. We carry out such processing based on the contract that you enter into once you tap ‘Get offer’.
We may process and exchange with third parties some information about you and/or use it based on our legitimate interest of providing to you better user experience, safe services, and tailored offers for the following purposes:
- To optimise your experience of getting offers and applying for the loan, we will receive from the Partner activity data regarding your loan application process;
- To facilitate the application process for other services and products at the Platform we may share information indicated by you in the cash loan application with another provider offering the corresponding product or service as described in the relevant privacy notice.
- For risk scoring purposes and fraud prevention we may exchange with the Providers information described in this Privacy Notice.
- For the credit eligibility check after you tap the ‘Get offer’ button, we may share your identification data (e.g. phone number, national identifier) and information related to your driver account at the Platform (e.g. socio-demographic data, information about your activity as the driver) with credit risk assessment, scoring and debt collection providers (“Providers”). We will receive from these Providers information related to your credit eligibility which might include some financial details.
- We may analyse and otherwise process information described in this Privacy Notice to improve inDrive services and products, and provide you with better conditions for the services and products offered at the Platform.
For the purposes described in this Privacy Notice we may transfer your information to a parent, subsidiary, or an affiliate of inDrive corporate group outside of your country of residence as described in InDrive Privacy Policy.
If you want to object to our processing of your personal information that is based on the legitimate interest, please, contact us at https://indrive.com/pt-br/contacts/support.
We keep your personal information for as long as you have an account with us. We may retain certain information after account termination for legitimate reasons:
- We will retain transactional information for as long as needed to meet our tax obligations. Tax law generally requires us to retain information for 10 years.
- We will retain correspondence and other documentation for as long as this is required for compliance with statutory document retention obligations. Commercial law generally requires us to retain commercial correspondence for 6 years.
- If there is a legal claim or dispute or any possibility thereof, we will retain corresponding information until the claim is satisfied/dispute is resolved or the statute of limitation expires. The statute of limitation will depend on your location but will generally require retention for 3-7 years.
- We will also retain data relevant to prevent fraud, to ensure users safety, to comply with our legal obligations for a period needed to fulfil these purposes.
You have privacy rights as specified in the General Personal Data Protection Act (LGPD).
Confirmation. You have the right to request confirmation whether we process your personal data.
Information about recipients. You have the right to request information about the public and private entities with whom we share your personal data. You can send your requests by contacting user support at https://indrive.com/pt-br/contacts/support.
Accessing, receiving and updating your information. You may access, review and update your information either in your account settings in the app or by contacting us at https://indrive.com/pt-br/contacts/support. You may also request a copy of all information on you which we process. You may receive your data in a structured, commonly used and machine-readable format to the extent such data has been processed by automated means.
Deleting your account and data. You can delete your account through the app settings or request the deletion of your account and your data by contacting us at https://indrive.com/pt-br/contacts/support. You may be asked to verify your account and identity. We will not be able to delete your account if there is an unsettled debt or an unresolved issue related to your account (for example, an unresolved complaint). We may retain certain information after your account is deleted provided there is a legitimate basis for such retention (see section “How we store your information”).
Sharing location information. Your device may have controls that determine what information we collect. For example, you can prevent your device from sharing location information through your device’s system settings.
Objections and withdrawal of consent. You have the right to object to us processing your information where processing is based on our legitimate interests. You can also withdraw consent to processing at any time where processing is based on your consent. In particular, you may exercise these rights by:
- Possibility of refusing consent. You have the right to obtain information regarding the possibility of refusing consent to the processing of your personal data when we request your consent, as well as the consequences of refusing consent.
- Opting out of push notifications. You can opt out of receiving push notifications through your device settings or through the app settings.
- Unsubscribing from marketing emails and messages. You can opt out of marketing emails and messages by using the “unsubscribe” link or the mechanism noted in such emails and messages.
- Opting out of marketing calls. You can opt out of receiving marketing calls during a call or by contacting us at https://indrive.com/pt-br/contacts/support.
- Managing cookies. You can delete cookies and modify your cookie settings in your web browser settings.
Restrictions. You can request that we limit our use of your data. We may continue to process your data after such a request to the extent required or permitted by law.
Right to complain to the supervisory authority. You also have the right to lodge a complaint with the National Data Protection Authority (ANPD).
inDrive Data Protection Officer (DPO) in Brazil is Baptista Luz Advogados that you can contact by writing at https://indrive.com/pt-br/contacts/support.
To get more details about our privacy practices and the modifications to the privacy notices check InDrive Privacy Policy.