Pullova

Effective Date: March 18, 2026
Last Updated: March 18, 2026

This Privacy Policy explains how Pullova Technologies Inc. (“Pullova”, “we”, “our”, or “us”) collects, uses, processes, and protects personal information when individuals use the Pullova Rideshare mobile application, website, and related transportation services.

This policy applies to: Riders, Drivers, Fleet operators, and Corporate ride program users.

1. INFORMATION WE COLLECT

Pullova collects personal information necessary to operate the rideshare platform.

A. Account Information
When users create an account, Pullova may collect: full name, email address, phone number, profile photo, and account login credentials.

B. Identity Verification Information
Drivers may be required to provide: driver’s license information, vehicle registration, vehicle insurance documentation, and background check information where permitted by law.

C. Location Data
Pullova collects location information necessary to provide rideshare services including real-time GPS location, pickup and drop-off locations, trip route information, and device IP-based location signals. Location data allows the platform to match riders with drivers and manage trip operations.

D. Device and Usage Information
Pullova may automatically collect: device identifiers, operating system version, IP address, app usage activity, and crash logs and diagnostics.

E. Payment and Transaction Data
Payments are processed through secure third-party payment processors. Pullova may retain transaction history, billing address, and payment confirmations. Pullova does not store full payment card numbers.

2. OTP AUTHENTICATION CONSENT

Pullova uses One-Time Password (OTP) authentication to verify identity and secure user accounts. OTP messages may be sent for account registration, login authentication, password reset, suspicious activity verification, and account recovery.

OTP Opt-In Consent
During account registration, users are presented with the following notice: “By providing your phone number you consent to receive verification codes and security messages from Pullova.” Entering a phone number and verifying the OTP constitutes consent. OTP messages are transactional service communications.

OTP Opt-Out
Users may opt out by replying STOP. However, disabling OTP may prevent login verification, account recovery, and security protections.

3. COOKIE POLICY

Pullova websites and web portals use cookies and similar technologies to maintain login sessions, improve service performance, analyze usage behavior, and prevent fraud.

Types of cookies include: Essential cookies (required for system functionality), Analytics cookies (help analyze platform usage), and Security cookies (used to detect suspicious activity). Users may disable cookies through browser settings.

4. AI & ALGORITHM TRANSPARENCY

Pullova uses automated systems and algorithms to operate rideshare services. These systems may support driver-rider matching, route optimization, demand forecasting, dynamic pricing models, and fraud detection. Algorithms analyze operational data such as driver availability, rider location, traffic conditions, and historical trip data. These systems are designed to improve efficiency and safety. Users may request additional information about automated decision-making.

5. BIOMETRIC DATA DISCLOSURE

Pullova may use biometric technologies to verify identity for safety and fraud prevention, including driver selfie verification and facial comparison technologies. Biometric data may be used to confirm driver identity, prevent account misuse, and enhance platform security. Pullova does not sell biometric information and retains biometric data only for as long as necessary.

6. HOW WE SHARE INFORMATION

Pullova may share personal information with: drivers and riders to coordinate trips, payment processing providers, cloud infrastructure vendors, messaging providers such as Twilio, Telnyx, and Bird, and law enforcement when legally required. Pullova does not sell personal information.

7. DATA RETENTION

Pullova retains personal information only as long as necessary to provide services, comply with legal obligations, prevent fraud, and resolve disputes. Retention periods may vary depending on regulatory requirements.

8. WASHINGTON MY HEALTH DATA ACT (MHMDA)

For Washington State residents, Pullova complies with the Washington My Health Data Act. Trips to locations such as hospitals, clinics, and pharmacies may constitute consumer health data. Pullova allows Washington residents to request deletion of such data, request access to data collected, and restrict processing of consumer health data. Pullova does not sell consumer health data.

9. DATA PROCESSING ADDENDUM (CORPORATE CLIENTS)

For corporate ride programs, corporate clients act as data controllers and Pullova acts as a data processor. The Data Processing Addendum addresses security safeguards, confidentiality obligations, incident notification, and cross-border transfers. Corporate clients may request the full DPA from Pullova.

10. USER PRIVACY RIGHTS

Depending on jurisdiction, users may have rights to access personal data, correct inaccurate information, request deletion, restrict processing, and request portability of data. Requests may be submitted to: privacy@pullova.com

11. INTERNATIONAL DATA TRANSFERS

Pullova may transfer personal information across jurisdictions in order to operate its services. Appropriate safeguards may include contractual confidentiality protections, secure cloud infrastructure, and data protection agreements.

12. CONTACT INFORMATION

Privacy inquiries may be directed to:
Pullova Technologies Inc.
Privacy Office
Email: privacy@pullova.com