Privacy Policy

The controller of your personal data is: EZotra National Malagasy (trading as eZotra), registered company with a share capital of 200,000 Ar — RCS: 2026B00038 — NIF: 4019535164 — STAT: 63122 11 2026 0 10032 Address: Av 306 Faliarivo Loharanombato, Antananarivo, Madagascar Phone: +261 37 41 075 62 Email: olivier@taxibrousse.mg For any question about this policy or your data, write to olivier@taxibrousse.mg.

Depending on the services you use, we process: - Account: name, phone number, email address and password (stored only in an irreversibly hashed form). - Bookings: routes, dates, seats, passenger names and contacts, booking history and status. - Marketplace orders: products or services ordered, delivery address or place, order history. - Payments: the Mobile Money phone number used, amount, transaction reference and status. We never see or store your Mobile Money PIN. - Verification codes (OTP) sent by SMS or WhatsApp to secure your account. - WhatsApp messages: phone number, WhatsApp profile name, content and timestamps of messages exchanged with our WhatsApp Business number. - Technical data: IP address, device and browser type, pages viewed, operation and security logs. - Images and files you upload (for example a profile picture).

You can create an account or sign in with Facebook Login (Meta app "Taxibrousse"). If you choose this option, Facebook sends us, with your permission: - your Facebook ID; - your name (first and last name); - your email address; - your public profile picture. We use this information only to create and manage your Taxibrousse account and to authenticate you. We do not post anything on your Facebook profile and we do not access your friends, posts or private messages. You can remove Taxibrousse's access at any time in your Facebook settings (Settings > Apps and Websites). To have the data we already received deleted, see the "Data deletion" page of this site.

If you sign in with Google, Google sends us your identifier, name, email address and, where applicable, your profile picture. This information is used only to create your account and authenticate you. You can remove access from your Google account (Security > Third-party access).

- WhatsApp Business: we use the WhatsApp Business Cloud API provided by Meta to send you verification codes, notifications about your bookings and payments, and to chat with you. WhatsApp messages and contacts are stored in our systems to manage customer relations. Processing by Meta is governed by its own terms and privacy policy. - SMS: your phone number is passed to an SMS delivery provider to send codes and notifications. - Messenger: the site may display a Facebook Messenger chat widget. If you use it, Meta may collect data under its own policy; your conversations with our Page may also be accessible to us. You can stop receiving our messages by writing to olivier@taxibrousse.mg or by replying "STOP" when that option is offered.

- Create and secure your account, authenticate you (performance of the service). - Process your bookings, orders and payments, issue tickets and confirmations (performance of the contract). - Send you useful notifications about your trip or order. - Provide support and answer your requests. - Prevent fraud and protect the platform (legitimate interest, legal obligations). - Measure audience and improve the site (statistics, with your consent where the law requires it). - Meet our legal, accounting and tax obligations. We do not sell your personal data.

Only with the providers needed to run the service, acting on our behalf or under their own terms: - Transport operators and partners (cooperatives, sellers): the information needed for your trip or order. - Airtel Money, MVola and Orange Money: to process your Mobile Money payments. - Meta (Facebook Login, Messenger, WhatsApp Business) and Google (Google Login, Google Analytics). - Cloudinary: image hosting and delivery. - SMS delivery provider. - Our server hosting provider, which hosts the database and logs. Some of these providers may process data outside Madagascar. We may also disclose data if a competent authority legally requires it.

- Browser local storage: your sign-in token (JWT) is kept to maintain your session; it is invalidated at sign-out (server-side revocation list). - A display preference cookie (light/dark mode). - Google Analytics: audience measurement using cookies set by Google (page views, device, approximate origin). - Meta third-party cookies when you use Facebook Login or the Messenger widget. You can block or delete cookies in your browser settings; some features (sign-in, widget) may then stop working.

We keep your data for the lifetime of your account and as long as needed for the purposes above. Records that the law requires us to keep (invoices, payments, bookings) are kept for the applicable legal period, in a limited way. Technical logs are kept for a limited time. We apply reasonable measures: encrypted connections (HTTPS), hashed passwords, revocable tokens, restricted access to data. No system is infallible, so we cannot guarantee absolute security.

You may ask for access to your data, correction, deletion, object to certain processing, or withdraw your consent at any time. Write to olivier@taxibrousse.mg from the email address or phone number of your account so that we can verify your identity. For deletion, the detailed procedure is on the "Data deletion" page. You may also contact the competent Malagasy personal data protection authority.

We may update this policy, for example when adding a service. The last update date is shown at the top of the page; for significant changes we will inform you on the site. Contact: olivier@taxibrousse.mg.