To prevent unsolicited contact and protect customer confidentiality, SabayRide implements strict pre-confirmation data gating:

• Phone Number Concealment: The rental shop cannot view the customer’s phone number until the booking request has been formally accepted and confirmed by the shop.
• Pre-Confirmation Operational Visibility: Before confirmation, the shop sees only technical details necessary to assess fleet availability: requested dates, model name, and rental duration.
• Zero Commercial Data Sharing: Customer phone numbers and personal contact information are never sold or shared with third-party advertisers.

In adherence to SRS v1.3 security specifications, SabayRide enforces strict data minimization regarding personal identification documents:

• Strict Prohibition on ID Image Storage: The platform never requests, uploads, or stores scanned copies or photos of national ID cards or passports.
• Physical In-Person Verification: Customers declare possession of a valid driver’s licence within the mobile app. Verification is performed physically in person by shop staff at pickup handover.
• Zero Document Images on Servers: System architecture explicitly rejects document images, eliminating any risk of identity document exposure or breach.

We respect customer mobility freedom and device battery longevity:

• Single-Capture Position: GPS coordinates are captured exactly once, at the specific instant the user taps to submit a roadside emergency assistance ticket.
• No Continuous Background Tracking: SabayRide never runs background location listeners. We do not track or record your travel routes during the rental period.
• Purpose Limitation: Captured coordinates are transmitted strictly via notification and map link to the rental shop to dispatch roadside mechanics or replacement vehicles.

All financial transactions conform to national banking security standards:

• No Full Financial Account Storage: SabayRide never stores full credit/debit card numbers or bank account credentials. Only tokenized PayWay transaction reference identifiers are processed.
• Official ABA PayWay & KHQR: In-app digital payments are handled through the certified ABA PayWay gateway adhering to National Bank of Cambodia KHQR specifications.
• Transparent Rental & Deposit: Daily rental rates, deposit options (original passport at shop vs cash deposit), and totals are explicitly itemized before payment.

• BCrypt Password Encryption: Passwords are cryptographically salted and hashed using BCrypt. Passwords are never stored in plaintext or system logs.
• Multi-Vendor Data Isolation: Every rental shop operates in isolated logical tenancy. A shop owner can only access their own bookings, motorbikes, and revenue figures.
• Encrypted HTTPS Channels: All communication between mobile applications and the cloud server is transmitted through modern HTTPS (TLS) encryption.

In compliance with Apple App Store Rule 5.1.1 and Google Play Data Safety requirements, users retain complete sovereignty over their data:

• Right to Access & Rectification: You can review and update your name, contact details, and preferences at any time within your in-app profile.
• Right to Account & Data Deletion: You have the right to request permanent deletion of your account and personal identifiers. Email your deletion request to privacy@sabayride.com with the subject "Account Deletion Request". Our engineering team will purge all personal credentials within 7 business days.

For questions, inquiries, or privacy-related requests regarding this policy, please contact our data team: