Privacy Policy
Last updated: April 26, 2026
1. Introduction
Garuda Drive Inc. (“Garuda Drive”, “we”, “us”, or “our”) operates a peer-to-peer car sharing platform in Canada. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website, mobile application, or services (collectively, the “Platform”).
By accessing or using the Platform, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our Platform.
2. Information We Collect
2.1 Information You Provide
- Account information: Name, email address, phone number, date of birth, and password when you register.
- Identity verification: Government-issued ID, driver’s licence number, and selfie photos for identity verification.
- Payment information: Credit/debit card details, billing address. Payment data is processed by our secure payment provider and is not stored on our servers.
- Vehicle information (Hosts): Vehicle Identification Number (VIN), make, model, year, registration documents, insurance certificates, and photos.
- Profile information: Profile photo, biography, and preferences.
- Communications: Messages sent through the Platform, support requests, and feedback.
2.2 Information Collected Automatically
- Usage data: Pages visited, features used, search queries, and interaction patterns.
- Device information: IP address, browser type, operating system, device identifiers.
- Location data: Approximate location based on IP address; precise location with your consent via the mobile app.
- Cookies and tracking: See our Cookie Policy for details.
3. How We Use Your Information
- To create and manage your account and verify your identity
- To facilitate bookings between hosts and renters
- To process payments and prevent fraud
- To provide customer support and resolve disputes
- To send transactional emails and booking confirmations
- To send marketing communications (with your consent)
- To improve our Platform through analytics and research
- To comply with legal obligations under Canadian law
- To enforce our Terms of Service and Community Guidelines
4. How We Share Your Information
We do not sell your personal information. We may share it with:
- Other users: Hosts see renter names, ratings, and booking details. Renters see host names, photos, ratings, and vehicle information.
- Service providers: Payment processors, identity verification providers, cloud hosting, analytics, and email service providers who operate under strict confidentiality agreements.
- Insurance partners: Information necessary to administer the $2M CAD liability coverage included with each trip.
- Law enforcement: When required by law, court order, or to protect the safety of users or the public.
- Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to users.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account and associated data at any time (subject to legal retention requirements).
6. Your Rights (PIPEDA & Provincial Privacy Laws)
Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, you have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Withdraw consent for non-essential data processing
- Request deletion of your data (subject to legal requirements)
- File a complaint with the Office of the Privacy Commissioner of Canada
To exercise these rights, contact us at privacy@garudadrive.com.
7. Security
We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security audits. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
8. Children’s Privacy
Our Platform is not directed to individuals under 21 years of age. We do not knowingly collect personal information from anyone under 21. If we become aware that a minor has provided us with personal information, we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice on the Platform at least 30 days before the changes take effect.