Privacy Policy

Version 2026-04 · Last updated: April 1, 2026

In compliance with Law No. 29733 — Peruvian Personal Data Protection Law and its Regulation D.S. No. 003-2013-JUS

1. Data Controller

Company	Cjuiro Paz Katherin Lucy (trade name: Remisse)
Tax ID	10732775248
Address	Jr. Arica 280, Miraflores, Lima, Peru
Email	privacidad@remisse.com
Phone	+51 996 533 169
Department	Compliance and Privacy

2. Personal Data We Collect

We collect only the data necessary to provide the service:

Passengers and users

Full name, phone number, email address
GPS location (trip origin and destination)
Trip history and ratings
Personal preferences (temperature, music, notes)
Payment data (processed by Izipay — Remisse does not store card data)
IP address and device data (for security)

Drivers

Full name, national ID, date of birth
Driver's license number and category
SOAT, vehicle registration, background check
Profile photo and vehicle photos
Real-time GPS location (only during active trips)
Bank details for payouts (encrypted)

Companies (hotels and fleets)

Legal name, tax ID, registered address
Legal representative information
Electronic billing information

3. Purpose of Processing

Service delivery: coordinating transfers between passengers and drivers
Security: verifying driver identity and preventing fraud
Billing: issuing electronic receipts in compliance with SUNAT
Communications: sending trip confirmations and WhatsApp/email notifications
Legal compliance: responding to Peruvian authority requests
Service improvement: anonymized statistical analysis

We do not use personal data for third-party advertising or sell it to any company.

4. Legal Basis for Processing

Data processing is based on:

Contractual performance: data necessary to provide the contracted service
Consent: preference data and marketing communications
Legal obligation: billing data required by SUNAT and Peruvian law
Legitimate interest: platform security and fraud prevention

5. Data Transfers to Third Parties

We share data only with providers necessary for the service:

Provider	Data Shared	Country
Izipay	Payment data (card, Yape, Plin)	Peru
Twilio / WhatsApp	Phone, notification text	USA
Mapbox	GPS coordinates (anonymized)	USA
Google (Analytics, Clarity, Firebase)	Site analytics; driver app push notifications	USA
Anthropic (Claude)	Chat messages you send our "Remi" assistant, and — only when you're logged in and ask about your own bookings — your active trip details	USA
Voyage AI	Search text you type into the help/FAQ assistant	USA
Sentry	Technical error/crash reports (stack traces, request context) — used only to fix bugs, never for marketing or profiling	USA
Nubefact	Billing data	Peru
SUNAT	Electronic receipts	Peru

Transfers to the USA are made with providers certified under international security standards.

About our AI assistant: "Remi" (our chat and help-search assistant) is powered by Anthropic's Claude and Voyage AI. Messages you send it are processed by these providers to generate a response — we don't use your conversations to train any AI model, and by default we don't share more of your account data with them than what a conversation naturally requires (e.g. looking up your own active trip when you ask about it). You can always reach a human instead through WhatsApp or the contact form.

6. Data Retention Period

Trip data: 5 years (tax and legal obligation)
Active account data: while the user maintains the account
Data after cancellation: 30 days grace period, then anonymized
Driver documents: 3 years after contract termination

7. Your Rights (ARCO Rights)

Under Law 29733, you have the right to:

Access

Know what data we hold about you and how we use it

Rectification

Correct inaccurate or outdated data

Deletion

Request erasure of your data when no longer necessary

Objection

Object to the processing of your data for specific purposes

How to exercise your rights:

Send an email to privacidad@remisse.com including:

Full name and registered phone number
The right you wish to exercise
Copy of your national ID or identity document

We will respond within a maximum of 20 business days.

If you believe your rights have been violated, you may file a complaint with the General Directorate of Personal Data Protection of the Ministry of Justice and Human Rights of Peru (MINJUS).

8. Data Security

TLS/HTTPS encryption on all communications
Passwords hashed with bcrypt (minimum 12 rounds)
Short-lived JWT tokens (15 minutes)
Database with restricted access and encryption at rest
Encrypted daily backups
Audit logs for all sensitive actions

9. Cookies

We use technically necessary cookies for the service to function. See our Cookie Policy for more information.

10. Minors

Our services are intended for users 18 years and older. We do not intentionally collect data from minors. If we detect data belonging to a minor, we will delete it immediately.

11. Modifications

This policy may be updated. Material changes will be notified by email or through a prominent platform notice at least 30 days in advance. The current version will always be available on this page.

12. Contact

Privacy email: privacidad@remisse.com

Address: Jr. Arica 280, Miraflores, Lima, Peru