iSERVU PRIVACY POLICY Effective Date: August 10, 2026 Last Updated: August 10, 2026 1. INTRODUCTION Welcome to iSERVU. This Privacy Policy explains how iSERVU (”iSERVU,” “Company,” “we,” “us,” or “our”) collects, receives, uses, stores, protects, discloses, transfers, and otherwise processes personal information when you: * visit or use the iSERVU website; * download, install, access, or use the iSERVU mobile application; * create or maintain an iSERVU account; * request, accept, provide, or complete a ride; * communicate with iSERVU, a rider, driver, or other user; * make or receive payments through the platform; * contact customer support; * apply to become an iSERVU driver; * participate in promotions, surveys, loyalty programs, or other iSERVU activities; or * otherwise interact with iSERVU. iSERVU is committed to protecting personal information and respecting applicable privacy and data-protection laws. This Privacy Policy should be read together with iSERVU’s Terms & Conditions, Refund Policy, Cookie Policy, Driver Terms, and any other applicable policies or notices. By accessing or using iSERVU, you acknowledge that you have had an opportunity to review this Privacy Policy. Where applicable law requires consent, iSERVU will obtain the required consent before processing your personal information. ⸻ 2. WHO IS RESPONSIBLE FOR YOUR INFORMATION? For purposes of applicable data-protection laws, iSERVU may act as a data controller, data processor, service provider, or other legally recognized role depending upon the nature of the processing. Data Controller / Company: iSERVU Website: https://www.iservu.app Privacy Contact: +1 (758) 721-0415 Business Address: Cap Estate, Gros Islet Telephone: +1 (758) 721-0415 Where required by law, iSERVU may designate a Data Protection Officer or other privacy representative. Contact information for that person will be published through the Company’s website or other appropriate channel. ⸻ 3. INFORMATION WE COLLECT Depending on how you use iSERVU, we may collect the following categories of information. 3.1 Account and Identity Information We may collect: * full name; * username; * email address; * telephone/mobile number; * password or authentication credentials; * profile photograph; * date of birth or age information where legally required; * residential or business address; * preferred language; * account identifiers; * emergency-contact information, where voluntarily provided; and * information necessary to verify your identity. Drivers may be required to provide additional information described below. ⸻ 3.2 Driver Information Individuals applying to drive through iSERVU may be required to provide information necessary to establish eligibility and comply with legal, regulatory, insurance, safety, and operational requirements. This may include: * driver’s licence information; * vehicle registration information; * vehicle ownership or authorization information; * vehicle make, model, year, colour, and identification information; * licence plate number; * insurance information; * driver photograph; * identity documents; * background-check information, where legally permitted and required; * driving history, where legally permitted; * permits, certificates, and commercial transportation documentation; * banking/payment information; * tax information where applicable; * driver ratings and reviews; and * other information reasonably required to verify and manage driver eligibility. Where third-party screening providers are used, those providers may independently process information in accordance with their own privacy notices and applicable law. ⸻ 4. LOCATION INFORMATION Because iSERVU provides transportation and ride-hailing services, location information is an important component of the platform. Depending on your settings and use of the platform, we may collect: * GPS location; * approximate location; * precise location; * pickup location; * destination; * route information; * trip start and end locations; * location of the driver during an active trip; * location history associated with trips; * device-derived location information; and * location information provided manually by you. Location information may be collected while the application is actively being used and, where legally permitted and technically necessary, in the background for purposes such as facilitating an active ride, driver dispatch, safety, fraud prevention, or trip recovery. You may be able to control certain location permissions through your device settings. Restricting location access may prevent some iSERVU features from functioning properly. ⸻ 5. PAYMENT AND FINANCIAL INFORMATION When you pay for an iSERVU service, payment information may be processed by iSERVU and/or third-party payment service providers. Depending on the payment method, this may include: * payment card information; * cardholder name; * billing information; * transaction amount; * transaction date and time; * currency; * payment status; * payment method; * payment token or identifier; * partial payment-card information; * refunds; * chargebacks; and * transaction history. Where possible, iSERVU will use payment tokens or other mechanisms designed to reduce the amount of sensitive payment information directly stored by iSERVU. Payment processors may process your information under their own terms and privacy policies. ⸻ 6. TRIP AND TRANSACTION INFORMATION Whenever you use iSERVU to request or provide transportation, we may collect information relating to the transaction, including: * ride request date and time; * pickup and destination; * driver assigned; * rider associated with the trip; * route and trip information; * estimated and final fare; * distance and duration; * payment status; * cancellations; * promotions or discounts; * ratings and reviews; * receipts; * trip history; * communications associated with the trip; * safety incidents or complaints; and * other information necessary to administer the ride. ⸻ 7. DEVICE AND TECHNICAL INFORMATION When you use the iSERVU website or application, we may automatically collect technical information such as: * IP address; * device type; * operating system; * operating-system version; * mobile device identifiers; * application version; * browser type; * language settings; * time zone; * network information; * mobile carrier; * crash reports; * diagnostic information; * performance information; * access dates and times; * pages or features accessed; * referring and exit pages; and * information concerning interactions with the application. This information helps us maintain, secure, troubleshoot, analyze, and improve iSERVU. ⸻ 8. COMMUNICATIONS We may collect and retain communications between you and iSERVU, including: * customer-support requests; * emails; * text messages; * in-app messages; * driver/rider communications; * complaints; * feedback; * reports; * dispute information; and * other communications sent through or concerning iSERVU. Where legally permitted and appropriately disclosed, communications may be monitored, recorded, stored, or reviewed for purposes including safety, fraud prevention, customer support, dispute resolution, quality assurance, security, and compliance. ⸻ 9. INFORMATION FROM OTHER SOURCES We may receive information about you from third parties, including: * payment processors; * identity-verification providers; * background-check providers; * insurance providers; * government agencies; * law-enforcement agencies where legally authorized; * fraud-prevention providers; * technology and analytics providers; * advertising or marketing partners; * customer-support providers; * social-media or authentication providers, where you choose to connect them; * other iSERVU users; and * publicly available sources. We will process such information in accordance with applicable law and the purposes described in this Privacy Policy. ⸻ 10. HOW WE USE PERSONAL INFORMATION We may use personal information for the following purposes: A. Providing iSERVU Services To: * create and manage accounts; * connect riders and drivers; * facilitate ride requests; * dispatch drivers; * calculate fares; * process payments; * provide receipts; * provide trip tracking; * communicate trip information; * facilitate customer support; and * provide other requested services. B. Safety and Security To: * verify drivers; * protect riders and drivers; * detect suspicious activity; * prevent fraud; * investigate complaints; * investigate accidents and safety incidents; * enforce platform rules; * authenticate accounts; * protect vehicles, property, users, and the platform; * respond to emergencies; and * cooperate with lawful investigations. C. Improving iSERVU To: * analyze platform performance; * troubleshoot technical problems; * develop new features; * improve dispatching; * improve pricing and service quality; * conduct research and analytics; * understand usage patterns; and * improve the rider and driver experience. D. Communications To send: * booking confirmations; * driver-arrival notifications; * trip updates; * receipts; * service announcements; * account notices; * security alerts; * support communications; * policy updates; and * other transactional communications. E. Marketing Where permitted by law, we may use your information to provide: * promotions; * offers; * advertisements; * newsletters; * rewards; * loyalty programs; * information about iSERVU services; and * information about selected third-party products or services. You may opt out of promotional communications at any time through the unsubscribe mechanism provided or by contacting us. Opting out of marketing does not prevent us from sending essential service, security, transactional, or legal communications. F. Legal and Regulatory Compliance We may process information to: * comply with applicable laws; * comply with court orders; * respond to lawful government requests; * satisfy regulatory requirements; * establish, exercise, or defend legal claims; * enforce agreements; * investigate suspected unlawful conduct; and * protect our legal rights. ⸻ 11. LEGAL BASES FOR PROCESSING Where applicable law requires a lawful basis for processing personal information, iSERVU may rely on one or more of the following: 1. Performance of a contract — where processing is necessary to provide requested services. 2. Steps taken before entering into a contract — such as driver registration and verification. 3. Consent — where you have provided valid consent. 4. Legal obligations — where processing is required by law. 5. Protection of vital interests — including emergencies and serious safety situations. 6. Administration of justice or legal proceedings. 7. Legitimate interests — where recognized by applicable law and where those interests do not override applicable privacy rights. Under Saint Lucia’s Data Protection Act, personal information generally may not be processed without express consent unless an applicable statutory exception applies, including processing necessary for contract performance, pre-contractual steps, vital interests, legal obligations, or administration of justice. (Attorney General Chambers) ⸻ 12. DATA MINIMIZATION AND PURPOSE LIMITATION iSERVU will seek to collect personal information that is relevant and reasonably necessary for legitimate and specified purposes. We will not intentionally collect personal information that is excessive in relation to the purposes for which it is processed. We may subsequently process information where such processing is compatible with the original purpose, authorized by law, based upon consent, or otherwise legally permitted. Saint Lucia’s data-protection framework requires personal information to be collected for lawful purposes and establishes principles concerning purpose specification, relevance, accuracy, and proportionality. (Attorney General Chambers) ⸻ 13. HOW WE SHARE PERSONAL INFORMATION We do not sell your personal information as a commodity. We may disclose or make available personal information where reasonably necessary to operate iSERVU, provide services, protect users, comply with law, or otherwise fulfill the purposes described in this Privacy Policy. Recipients may include: Riders and Drivers Certain information must be shared between riders and drivers to facilitate a ride. For example, a driver may receive information such as: * rider name or profile identifier; * pickup location; * destination; * relevant trip instructions; and * information necessary to identify and complete the trip. A rider may receive information such as: * driver’s name; * driver photograph; * vehicle information; * licence plate; * approximate/current location during the trip; and * ratings or other information necessary to identify the assigned driver. The precise information displayed may vary according to platform functionality, location, applicable law, and safety requirements. Service Providers We may share information with trusted service providers that perform services for iSERVU, including: * cloud hosting; * data storage; * payment processing; * mapping and navigation; * communications; * identity verification; * driver screening; * fraud prevention; * cybersecurity; * analytics; * customer support; * accounting; * legal services; * insurance administration; and * technology infrastructure. Such providers may access personal information only as reasonably necessary to perform authorized services, subject to applicable contractual and legal requirements. Government and Law Enforcement We may disclose information where we reasonably believe disclosure is required or permitted by law, including in response to: * subpoenas; * warrants; * court orders; * regulatory requests; * lawful government demands; * law-enforcement investigations; or * legal proceedings. We may also disclose information when necessary to protect the rights, safety, or property of iSERVU, users, the public, or another person. Corporate Transactions If iSERVU is involved in a merger, acquisition, financing, restructuring, sale of assets, bankruptcy, reorganization, or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law. ⸻ 14. RIDER AND DRIVER PRIVACY iSERVU recognizes that ride-hailing requires limited information sharing between riders and drivers. Information made available to another user will be limited, where reasonably practicable, to information necessary to: * identify the relevant party; * locate the pickup point; * complete the trip; * communicate about the trip; * facilitate payment; * maintain safety; and * resolve legitimate disputes. Users must not use information obtained through iSERVU to harass, stalk, intimidate, threaten, contact, solicit, or otherwise interfere with another user outside the legitimate purposes of the platform. Any misuse of another person’s information may result in account suspension or termination and may be reported to appropriate authorities where warranted. ⸻ 15. PRECISE LOCATION AND TRIP TRACKING iSERVU may use GPS and other location technologies to facilitate: * driver dispatch; * pickup; * navigation; * trip tracking; * estimated arrival times; * fare calculation; * safety monitoring; * fraud detection; * dispute resolution; * customer support; and * operational analytics. Trip location data may be retained after a ride where reasonably necessary for legitimate business purposes, safety investigations, accounting, legal compliance, dispute resolution, fraud prevention, insurance, or other lawful purposes. ⸻ 16. COOKIES AND SIMILAR TECHNOLOGIES iSERVU may use cookies, pixels, SDKs, local storage, device identifiers, and similar technologies. These technologies may be used to: * operate the website and application; * remember preferences; * authenticate users; * maintain security; * analyze traffic; * understand platform usage; * measure performance; * prevent fraud; and * provide relevant marketing where permitted. Additional information is provided in the iSERVU Cookie Policy. ⸻ 17. ANALYTICS iSERVU may use analytics technologies to understand how users interact with our services. Analytics information may include: * pages viewed; * features used; * application events; * device information; * approximate location; * session information; * performance information; and * usage patterns. Where required by law, iSERVU will obtain appropriate consent for analytics technologies that require consent. ⸻ 18. ADVERTISING AND MARKETING TECHNOLOGIES Where permitted by law, iSERVU may work with advertising, marketing, or measurement providers. These providers may receive limited information necessary to measure campaigns or provide advertisements. iSERVU will not knowingly authorize third parties to use personal information for purposes inconsistent with this Privacy Policy or applicable law. Where required, users will be provided appropriate choices concerning marketing technologies. ⸻ 19. DATA SECURITY iSERVU implements reasonable administrative, technical, organizational, and physical safeguards designed to protect personal information against: * unauthorized access; * unauthorized disclosure; * alteration; * misuse; * destruction; * accidental loss; and * other unlawful processing. Security measures may include: * access controls; * authentication mechanisms; * encryption in transit; * encryption or equivalent protections where appropriate; * logging and monitoring; * security testing; * employee confidentiality obligations; * vendor security requirements; * backup and recovery controls; and * incident-response procedures. No internet transmission, application, database, server, or electronic storage system can be guaranteed to be 100% secure. Accordingly, while iSERVU takes reasonable measures to protect personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should immediately notify iSERVU if you suspect unauthorized access to your account. ⸻ 20. DATA BREACHES AND SECURITY INCIDENTS If iSERVU becomes aware of a personal-data breach or security incident, we will investigate and take reasonable steps to contain, mitigate, remediate, and prevent recurrence. Where notification is required by applicable law, iSERVU will notify affected individuals, regulators, law-enforcement authorities, or other appropriate parties within the legally required timeframe. ⸻ 21. DATA RETENTION iSERVU retains personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods may depend upon: * the nature of the information; * the purpose for which it was collected; * whether the account remains active; * legal obligations; * tax and accounting requirements; * insurance requirements; * fraud prevention; * dispute resolution; * safety investigations; * litigation; * regulatory requirements; and * legitimate business needs. When information is no longer reasonably required, iSERVU will seek to securely delete, destroy, anonymize, or otherwise de-identify it, subject to applicable legal and operational requirements. ⸻ 22. DELETION OF YOUR ACCOUNT You may request deletion of your iSERVU account, subject to applicable law. Account deletion does not necessarily require immediate deletion of every record associated with the account. For example, iSERVU may retain information when necessary for: * legal compliance; * accounting; * taxation; * fraud prevention; * safety; * insurance; * dispute resolution; * enforcement of agreements; * legal claims; or * other lawful purposes. Where information cannot be deleted because retention is legally required, iSERVU will restrict its use to the purposes for which retention is required where reasonably practicable. ⸻ 23. YOUR PRIVACY RIGHTS Subject to applicable law and relevant legal exceptions, you may have rights concerning your personal information, including the right to: * request access to personal information we hold about you; * request correction of inaccurate information; * request deletion or destruction of information; * request information concerning how your information is processed; * object to certain processing; * withdraw consent where processing is based upon consent; * request restriction of certain processing; * request information concerning recipients of your information; * request information regarding international transfers; * complain to an applicable data-protection authority; and * exercise other rights provided by applicable law. Saint Lucia’s data-protection framework specifically recognizes rights of data subjects and regulates the collection, holding, use, processing, correction, and disclosure of personal information. (Saint Lucia - Access Government) To exercise an applicable privacy right, contact: Email: support@iservu.app Subject: Privacy Rights Request iSERVU may need to verify your identity before completing a request. We may refuse or limit a request where permitted by law. ⸻ 24. WITHDRAWING CONSENT Where processing is based upon your consent, you may withdraw that consent at any time, subject to applicable law. Withdrawal of consent does not affect the legality of processing performed before withdrawal. Certain iSERVU functions may require information to operate. Consequently, withdrawing consent may prevent iSERVU from providing some services. ⸻ 25. INTERNATIONAL DATA TRANSFERS iSERVU may use service providers, technology infrastructure, payment processors, cloud providers, or other recipients located outside Saint Lucia. Where personal information is transferred internationally, iSERVU will take reasonable steps to ensure that such transfers comply with applicable data-protection requirements. Under Saint Lucia’s data-protection framework, international transfers may be subject to safeguards and regulatory requirements concerning protection of personal information outside Saint Lucia. (DPA St. Lucia) Where required by law, iSERVU will obtain appropriate authorization, implement legally recognized safeguards, or rely upon another lawful transfer mechanism. ⸻ 26. CHILDREN’S PRIVACY iSERVU is not intended for children who are below the minimum age legally permitted to use the service independently. We do not knowingly collect personal information from children in circumstances where such collection is prohibited by law. If you believe a child has provided personal information to iSERVU in violation of applicable requirements, contact us at: support@iservu.app We will take reasonable steps to investigate and delete such information where legally required. ⸻ 27. EMERGENCY AND SAFETY INFORMATION In circumstances involving an emergency, serious safety concern, accident, suspected criminal activity, medical emergency, or imminent threat to life or physical safety, iSERVU may disclose relevant information to emergency services, law enforcement, regulators, insurers, or other appropriate parties where legally permitted or required. Such disclosures may occur without obtaining additional consent when permitted by applicable law. ⸻ 28. FRAUD PREVENTION AND PLATFORM SECURITY iSERVU may process information to detect and prevent: * fraudulent payments; * stolen accounts; * fake identities; * unauthorized account access; * fraudulent ride activity; * payment abuse; * promotional abuse; * driver/rider impersonation; * suspicious transactions; * platform manipulation; * cyberattacks; and * other unlawful or abusive conduct. We may use automated systems, risk indicators, device information, location information, transaction information, and other information reasonably necessary for these purposes. Where applicable law provides rights concerning automated decision-making, iSERVU will comply with those requirements. ⸻ 29. RATINGS, REVIEWS, AND USER-GENERATED CONTENT Users may be permitted to submit ratings, reviews, comments, photographs, reports, or other content. You should not include another person’s sensitive personal information in content submitted to iSERVU unless you have a lawful basis to do so. Information you voluntarily make publicly available through the platform may be visible to other users or the public depending on the feature involved. ⸻ 30. THIRD-PARTY SERVICES AND LINKS iSERVU may contain links to third-party websites, applications, payment services, mapping services, social networks, or other services. iSERVU does not control the privacy practices of independent third parties. Your use of third-party services is governed by the applicable third party’s terms and privacy policy. We encourage users to review the privacy practices of any third-party service before providing personal information. ⸻ 31. THIRD-PARTY PAYMENT PROCESSORS Payments may be processed by independent payment service providers. iSERVU may not directly receive or store certain sensitive payment credentials where the payment provider processes them directly. Payment providers may collect and process personal and financial information under their own policies and applicable law. ⸻ 32. MAPPING AND LOCATION SERVICE PROVIDERS Certain iSERVU functions may rely upon mapping, navigation, geolocation, routing, or address-lookup providers. Information such as pickup locations, destinations, coordinates, routes, or addresses may be transmitted to such providers where reasonably necessary to provide the requested service. ⸻ 33. BUSINESS TRANSFERS If iSERVU, or substantially all of its assets, is acquired, merged, reorganized, financed, sold, or transferred, personal information may form part of the transferred business assets. Any transfer will remain subject to applicable privacy and data-protection requirements. ⸻ 34. LEGAL DISCLOSURES Nothing in this Privacy Policy prevents iSERVU from disclosing personal information where such disclosure is: * required by applicable law; * required by court order; * necessary to comply with a lawful government request; * necessary to establish, exercise, or defend legal rights; * necessary to investigate suspected fraud or criminal activity; * necessary to protect users or the public; * necessary to protect iSERVU’s rights or property; or * otherwise legally permitted. ⸻ 35. DO NOT TRACK Some internet browsers provide “Do Not Track” signals. Because there is currently no universally accepted technical standard governing all such signals, iSERVU may not respond to every browser-based Do Not Track mechanism. Where applicable law requires a response to recognized privacy preference signals, iSERVU will comply with those requirements. ⸻ 36. CHANGES TO THIS PRIVACY POLICY iSERVU may update this Privacy Policy from time to time to reflect: * changes to our services; * changes to our data practices; * changes in technology; * changes in applicable law; * regulatory guidance; or * operational requirements. When material changes are made, iSERVU may provide notice through the application, website, email, account notification, or another legally appropriate method. The “Last Updated” date at the beginning of this Privacy Policy indicates when the policy was most recently revised. Your continued use of iSERVU following an effective update may constitute acknowledgment of the updated Privacy Policy to the extent permitted by law. Where legally required, iSERVU will obtain fresh consent before implementing changes that require consent. ⸻ 37. SEVERABILITY If any provision of this Privacy Policy is determined by a competent court, regulator, or other lawful authority to be invalid, unlawful, or unenforceable, that provision shall be interpreted or modified to the minimum extent necessary to make it lawful and enforceable, where legally permissible. The remaining provisions shall continue in full force and effect. ⸻ 38. NO WAIVER No failure or delay by iSERVU in exercising any right under this Privacy Policy shall constitute a waiver of that right. Any waiver must be expressly made by an authorized representative of iSERVU and shall apply only to the specific circumstance for which it is given. ⸻ 39. GOVERNING LAW This Privacy Policy shall be interpreted and applied in accordance with the laws applicable to iSERVU and the processing of personal information, including applicable data-protection legislation in Saint Lucia. Where mandatory privacy or data-protection laws of another jurisdiction apply to an individual, nothing in this Privacy Policy is intended to remove or unlawfully restrict rights granted by those laws. Nothing in this section is intended to deprive an individual of mandatory rights or protections that cannot lawfully be waived. ⸻ 40. COMPLAINTS If you believe iSERVU has processed your personal information unlawfully or has otherwise failed to comply with applicable privacy requirements, we encourage you to contact us first so that we can investigate and attempt to resolve your concern. Privacy Complaints: support@iservu.app Physical Address: Cap Estate, Gros Islet You may also have the right to lodge a complaint with the applicable data-protection regulator or other competent authority. ⸻ 41. CONTACT US For questions, requests, complaints, or concerns relating to this Privacy Policy or your personal information, contact: iSERVU Website: https://www.iservu.app Email: support@iservu.app Telephone: +1 (758) 721-0415 Address: Cap Estate, Gros-Islet For privacy-rights requests, please include sufficient information for us to identify your account and understand your request. ⸻ 42. ACKNOWLEDGMENT By using iSERVU, you acknowledge that you have been provided with access to this Privacy Policy and, where applicable, have provided the consent required by law for the processing of your personal information. Nothing in this Privacy Policy limits any mandatory privacy right or protection that cannot lawfully be waived. © 2026 iSERVU. All Rights Reserved.
