1. Purpose
This data policy describes operational handling of customer-related records across the Movygo Inc. ("Movygo") platform.
2. Data Classes
- Identity and account data
- Order and trip operational data
- Payment and reconciliation records
- Communications, support, and dispute records
- Safety, fraud, audit, and enforcement records
3. Access Control and Logging
Access is role-based, purpose-limited, and action logged where reasonable. Sensitive operations are restricted to authorized staff or vendors under contractual controls.
4. Data Minimization
Movygo aims to collect and retain only the data reasonably necessary to operate the marketplace, maintain safety, process payments, support customer service, and comply with legal obligations.
5. Data Quality and Correction
Movygo uses reasonable efforts to keep customer records accurate and current, including correction workflows and support review processes.
6. Retention and Disposal
Records are retained according to legal, accounting, safety, fraud, and dispute requirements, then deleted, anonymized, or archived when eligible.
7. Incident Handling
Movygo maintains internal procedures for investigating potential misuse, fraud, and suspected privacy or security events, including escalation and remediation steps appropriate to the circumstances.
8. Legal Compliance and Audit Records
To support legal compliance, dispute resolution, fraud prevention, and regulatory obligations, Movygo collects and retains certain audit and consent records, including:
- Date, time, IP address, device type, and approximate location when you accept Terms, policies, or provide consent through the platform, to the extent technically available.
- Account creation and verification events.
- Order creation, assignment, status changes, cancellations, and delivery confirmations.
- Payment authorizations, charges, refunds, adjustments, and chargeback records.
- Support interactions, dispute filings, and resolution outcomes.
- Policy acceptance timestamps and version identifiers.
These records are retained for at least the duration of your account plus any applicable legal retention period, and may be used to demonstrate compliance, verify consent, investigate disputes, defend against claims, and satisfy regulatory requirements.