Privacy policy

Who we are

Tavo is run by Tavo LLC, 27 Netto Court, Plainview, NY 11803, USA. Transportation companies use Tavo to schedule rides, assign drivers and record payments. Questions about this policy go to greg@hellotavo.co.

Tavo works for the transportation company that set up your account. That company decides what information goes into its account and is responsible for it. Tavo stores and processes it on the company’s behalf.

What we collect

Your account. Your email address, your name, and your role in the company. Your password is stored only as a one-way hash, so nobody at Tavo can read it.

Ride records. What the company enters for each ride: the customer’s name and phone number, pickup and drop-off addresses, the pickup time, flight numbers, passenger count, notes, the fare, miles driven, and how a payment was made. Tavo records the amount and method of a payment. It does not take card payments and never sees card numbers.

Drivers. A driver’s name, phone number and vehicle, as entered by the company.

Activity. A history of changes to each ride and who made them, so a company can see what happened.

Texts. When a company has confirmation texts switched on, Tavo sends a customer one text before their ride asking them to confirm, and keeps the text it sent and the reply it got.

Your device. If you allow notifications, a push token so the app can notify you. The app keeps your sign-in on your phone in its secure storage. If you unlock the app with Face ID or a fingerprint, that check happens on your phone and Tavo never receives your biometric data.

We do not collect your location, we do not use advertising or tracking tools, and we do not sell or rent personal information to anyone.

How we use it

Only to run the service: showing rides to the right people, sending the notifications and confirmation texts the company has switched on, checking flight times for rides with a flight number, keeping the records secure, and helping when someone asks for support.

Who we share it with

Only with the services Tavo needs to run, and only what each needs:

Railway, which hosts our servers and database.
Twilio, which delivers confirmation texts, when a company has them switched on. It receives the customer’s phone number and the text.
Flight data providers (FlightAware or Aviationstack), when flight tracking is switched on. They receive a flight number and date, never a name or phone number.
Expo and Apple or Google, which deliver push notifications to your phone if you allow them.

We may also disclose information if the law requires it, or to protect the safety of people using the service.

How long we keep it

For as long as the company’s account is active, so its ride history and records stay complete. When a company closes its account, or asks us to delete information, we delete it within 30 days, apart from anything we are legally required to keep.

Your choices

You can ask to see, correct or delete your information, or to have your account deleted, by emailing greg@hellotavo.co from the address on your account. If a company entered your details as a customer, you can ask that company or us directly. A customer can stop confirmation texts at any time by replying STOP.

Security

Information travels over encrypted connections, each company’s data is kept separate from every other company’s, and drivers see only their own rides. No system is perfectly secure, but we work to protect what is entrusted to us and will tell affected companies promptly if something goes wrong.

Children

Tavo is a business tool for transportation companies and is not meant for children. We do not knowingly collect information from anyone under 13.

Changes

If we change this policy we will update the date at the top of this page, and tell companies using Tavo about any significant change before it takes effect.