Plain-English Summary
At Robot Taxi, we are building a community-powered intelligence platform to make Jamaican roads safer. To do this, we need to collect some information from you and your device.
- What we collect: Your name and email when you sign in, your device's IP address, your precise geolocation when making a report, and the media (photos/videos) you upload, which includes the license plates of traffic offenders.
- Why we collect it: To verify your identity, process the traffic violation via our AI systems, map where incidents occur, and share risk intelligence with road safety stakeholders.
- Who we share it with: Our secure cloud and AI service providers (Google and Vercel), and our institutional partners (like insurance companies), though your personal identity is anonymized before partner sharing.
- Your rights: You own your data. You can ask us to see it, fix it, or permanently delete it at any time.
1. Information We Collect
We collect information that identifies, relates to, describes, or could reasonably be linked to you ("Personal Data"), as well as third-party data you submit to the platform.
- Account & Profile Data: First name, last name, and email address.
- Submission Data: Photographs and videos (up to 50MB) of traffic violations. This media contains third-party personal data, specifically the license plates of alleged offenders and the datetime of the offense.
- Location Data: Precise geolocation data (GPS coordinates) captured at the time a report is generated to map the incident accurately.
- Technical & Device Data: IP addresses, browser type, operating system, and device identifiers.
2. How We Collect Your Information
We gather Personal Data through the following methods:
- Direct Input (Forms & Uploads): Information you actively provide when authenticating your account or submitting a traffic violation report via our web application.
- Third-Party Integrations: When you log in using Google OAuth, we receive your basic profile information (name and email) from Firebase Authentication.
- Automatic Collection: As you navigate the platform, our backend infrastructure automatically collects your IP address and technical device data for security and routing purposes.
- Sensor Collection: Your device's GPS and location sensors provide geolocation data when you explicitly grant the web application permission to capture an incident.
3. Purpose of Collection
We limit the collection of your data to what is strictly necessary. We use your data for the following purposes:
- Account Creation & Security: Your name, email, and Google OAuth data are used to create your profile, verify your identity, and prevent automated bots from spamming the platform.
- Platform Operations (AI Processing): We process the media you upload through Google Gemini to automatically extract license plate characters via Optical Character Recognition (OCR) and classify the violation.
- Road Safety Intelligence: Geolocation, datetime, and license plate data are aggregated to create composite risk scores and heatmaps.
- Analytics & Performance: IP addresses and technical data help us monitor server loads, debug errors, and improve the user experience.
4. How We Share Your Data
Robot Taxi does not sell your Personal Data. We share data only with the following categories of third parties to operate our platform:
- Cloud & Infrastructure Providers: Vercel (for application hosting and serverless functions) and Google Cloud / Firebase (for NoSQL database management and storage of images/videos).
- Artificial Intelligence Processors: Google Gemini, acting as a sub-processor, analyzes your uploaded media strictly for OCR and violation classification.
- Institutional Partners: We share anonymized and aggregated risk profiles (such as vehicle behavior patterns) with insurance partners and road safety organizations. Your personal identity (name/email) is never shared with these partners.
- Legal & Regulatory Authorities: If required by law, subpoena, or to comply with the Jamaica DPA 2020, we may disclose information to law enforcement.
5. Cookie Policy
Cookies are small text files placed on your device. Robot Taxi uses them strictly for essential functions:
- Essential Auth Cookies: Firebase Authentication uses tokens and cookies to keep you logged in securely during your session.
- Security Cookies: Vercel utilizes cookies to route traffic securely and prevent Distributed Denial of Service (DDoS) attacks.
- Opting Out: Because our cookies are strictly essential for platform functionality and security (rather than third-party tracking or advertising), they cannot be disabled through our platform. You may set your browser to block all cookies, but the application will not function correctly.
6. Data Retention
- User Account Data: Your name and email are retained for as long as your account is active. If you delete your account, this data is permanently erased within 30 days.
- Submission Data (Media & Geolocation): Media files (images/videos) are actively stored for 90 days, after which they are either transitioned to secure cold storage or securely destroyed, retaining only the text-based metadata (license plate, time, location) indefinitely to maintain accurate historical risk models.
7. Security Measures
We implement rigorous technical and organizational measures to protect your data against unauthorized access, alteration, or destruction:
- Encryption: All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
- Access Controls: We employ strict Role-Based Access Control (RBAC) and Firebase Security Rules to ensure that only authenticated users and authorized backend services can access specific database nodes.
- Serverless Security: Our architecture utilizes short-lived JWT tokens and rate-limiting to prevent unauthorized API access.
8. Your Privacy Rights
Depending on your jurisdiction (including the Jamaica DPA 2020, GDPR, and CCPA), you possess the following rights regarding your Personal Data:
- Right to Access: You may request a copy of the Personal Data we hold about you.
- Right to Rectification: You may request that we correct any inaccurate or incomplete data.
- Right to Erasure (Right to be Forgotten): You may request the permanent deletion of your Personal Data.
- Right to Data Portability: You may request to export your data in a structured, commonly used, and machine-readable format.
- Right to Non-Discrimination: We will not deny you service or provide a different level of service if you exercise your privacy rights.
To exercise any of these rights, please contact our Data Protection Officer using the details provided below. We will respond to your request within 30 days.
9. Children's Privacy
Robot Taxi is designed for adult users and licensed drivers. We do not knowingly collect Personal Data from children under the age of 13 (or 18, under specific local statutes). If we become aware that we have inadvertently collected data from a child, we will take immediate steps to delete that information from our servers in compliance with the Children's Online Privacy Protection Act (COPPA).
10. Contact Information
If you have any questions about this Privacy Policy, your rights, or our data practices, please contact our Data Protection Officer at: