Privacy Policy
Version 1.0 · Effective 9 October 2026 · Customers, merchants, riders, staff and visitors
Purpose and scope
AUVAMX controls personal data used for platform accounts, marketplace operations, dispatch, support, fraud prevention and its business records. Merchants, payment providers, identity-verification providers and regulators may separately control activities they independently determine. This policy covers AUVAMX applications, websites, portals and support channels.
Data we process
- Account and contact: name, phone, email, role, authentication and session records.
- Customer and order: addresses, basket, order, payment status, substitutions, delivery and support history.
- Merchant: business, branch, catalogue, inventory and payout-destination verification.
- Rider and vehicle: identity-verification result, selfie/liveness result, licence, vehicle, insurance, emergency contact, availability and earnings.
- Location: customer delivery coordinates and rider coordinates while online or on an active delivery.
- Device and security: device identifiers, IP address, logs, risk signals, notification token and audit events.
How we use data
- Create and secure accounts and perform requested services.
- Process orders, payments, merchant settlements and rider earnings.
- Match riders, calculate serviceability, verify arrival and display active-delivery progress.
- Meet tax, payment, identity, licensing, safety and regulatory duties.
- Prevent fraud, investigate incidents, provide support, refunds and disputes, and maintain audit evidence.
Identity and biometric verification
Where required, AUVAMX uses authorised real-time biometric verification against the National Identification Authority or another legally authorised provider. AUVAMX does not request or retain Ghana Card images for identity verification unless specifically permitted by law. It retains only the minimum permitted verification result and audit evidence. Raw biometric templates should remain with the authorised provider.
Location and contact visibility
Customer delivery coordinates are shared with the assigned merchant and rider only as needed to fulfil an order. During an active assignment, the customer may see the rider’s live or latest reported location, and authorised Command staff may monitor it for dispatch and safety. Necessary customer and rider contact details may be visible for that delivery. Customer access to rider location ends when the delivery ends or is cancelled.
Recipients
Data may be shared with assigned order participants, authorised payment, identity, messaging, mapping, cloud and support providers, professional advisers, auditors, insurers and public authorities where disclosure is legally required.
Retention
- Orders, payments, settlements, invoices and tax records: at least six years or longer when legally required.
- Rider location history: normally 30 days, unless needed for an active delivery, safety incident, dispute or law.
- Support and dispute records: normally three years after closure.
- Security logs: normally up to 12 months, extended for a documented incident.
- Raw biometric templates or Ghana Card images: not stored by AUVAMX unless law specifically permits it.
Security and international processing
AUVAMX uses role-based access, encryption in transit, controlled secrets, session protection, audit logs, backups, monitoring and incident response proportionate to risk. International processing uses lawful transfer safeguards.
Your rights
Subject to Ghanaian law, you may request access, correction, completion, objection, restriction or deletion where retention is no longer lawful, and information about recipients. Requests may require proportionate identity verification. Complaints may be submitted to AUVAMX and the Ghana Data Protection Commission.
Children and changes
AUVAMX accounts are not intended for persons under 18. Material policy changes will be notified before taking effect, and the current version will remain available here.
Legal framework
This policy is governed by the laws of Ghana, including the Data Protection Act, 2012 (Act 843), Electronic Transactions Act, 2008 (Act 772), and other applicable payment, tax and identification laws.