Privacy Policy
Last updated: April 2026 · Version v1.0-2026-04
Interim version
This is an interim Privacy Policy. A full version aligned with Mauritius' Data Protection Act 2017 is being drafted by counsel and will replace this page on release.
Data Controller
The data controller for personal information collected through Rapido and Bayzon is Solvify Limited (BRN C25221555), a company registered in the Republic of Mauritius. For privacy enquiries or to exercise your rights under the Data Protection Act 2017, contact us at hello@rapido.mu.
1. Information We Collect
We collect personal information including: full name, phone number (+230), delivery addresses, order history, and payment information. For drivers, we also collect vehicle details, licence information, and GPS location data during active deliveries. For merchants, we collect business details, bank details for settlement, and product listings.
2. How We Use Your Information
Your information is used to: process delivery orders, assign drivers, send delivery notifications (via WhatsApp, SMS, and push), process payments and COD, calculate merchant settlements, improve our services, and communicate important updates.
3. Data Storage & Security
Your data is stored on Supabase infrastructure. Database tables are protected by Row Level Security (RLS) policies. Financial transactions are logged in immutable audit logs. Phone numbers are stored in international format (+230XXXXXXXX). We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.
4. Third-Party Processors
We share data with the following processors strictly to deliver our services:
- Supabase — database, authentication, and file storage
- MIPS — online card and Juice payment processing
- Firebase (Google) — push notifications via FCM
- Aeris Live — SMS delivery in Mauritius
- Google Maps — address geocoding, route display, zone boundaries
- Meta (Facebook, Instagram, WhatsApp) — marketing attribution and messaging where used
- Vercel — hosting and delivery of our web applications
Some of these processors store data outside Mauritius. Where that happens, it is under contractual safeguards for data protection.
5. GPS & Location Data
Driver GPS locations are collected every 10 seconds during active delivery sessions. This data is used for real-time tracking and dispatch optimisation. Location data is not shared with third parties outside the processors listed above.
6. Communications
We communicate via WhatsApp (primary), SMS (fallback), email, and in-app push notifications. Notification preferences can be configured per event type. You may opt out of non-essential marketing communications at any time while retaining essential transactional messages.
7. Data Sharing Between Parties
To operate the service we share limited information between users: customer delivery address with the assigned driver, driver name and phone with the customer during active delivery, and order details with the merchant for their own orders. Merchants do not see each other's data.
8. Your Rights
Under the Mauritius Data Protection Act 2017 you have the right to:
- Access the personal data we hold about you
- Ask for incorrect data to be corrected
- Ask for your data to be deleted, subject to our legal and accounting retention obligations
- Withdraw consent for non-essential processing (e.g. marketing)
- Lodge a complaint with the Data Protection Office of Mauritius
To exercise any of these rights, contact us at hello@rapido.mu. Financial records (orders, settlements, audit logs) are retained for at least 7 years to meet accounting and tax obligations.
9. Children
Rapido services are not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, contact us and we will remove it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via the dashboard or email. Continued use of the service after an update constitutes acceptance of the updated policy.
11. Contact
For any privacy concerns or to exercise your rights, contact us at hello@rapido.mu. For unresolved concerns you may contact the Data Protection Office of Mauritius at dataprotection@govmu.org.