This policy applies when you apply to become a Digidoy rider, use Digifood Rider, receive delivery offers, complete deliveries, contact support or receive earnings and payouts.
Digidoy is the controller for rider onboarding, operational and account data. A connected payment provider may act as an independent controller for identity, banking and payout information it collects directly.
Who we are and scope
Digidoy operates the rider relationship and DMS delivery service. Restaurants and stores are external delivery sources; they do not own Digidoy rider accounts. Contact: contact@digidoy.fr · Digidoy, 4 Rue Parisis, 28100 Dreux, France.
Data we collect
- Identity, contact, login, rider number, language and profile information.
- Application, affiliation preference, vehicle, licence, insurance, work-authorisation and review records.
- Availability, shifts, offers, acceptance history, delivery events, proof, exceptions, ratings and support communications.
- Precise location while online or completing active work, plus device, push-token and diagnostic information.
- Earnings, cash custody, payout-account status, transfer and reconciliation records.
Location data
Location is central to dispatch and delivery. While you are online it supports proximity and offer eligibility. During active work it supports pickup coordination, operational visibility and relevant customer progress. Background access can continue when the app is not visible. Operational location requests stop when you are offline and have no active delivery.
Purposes and legal bases
- To assess applications, operate rider accounts, dispatch and manage deliveries, calculate earnings and arrange transfers: contract performance or pre-contract steps.
- To verify eligibility, maintain accounting and respond to authorities: compliance with legal obligations.
- To protect riders and customers, prevent fraud, reconcile cash, investigate incidents and secure the service: legitimate interests balanced against your rights.
- For optional uses where required: consent, which can be withdrawn prospectively.
Automated matching and human review
Dispatch tools may identify or rank eligible riders using online status, location, workload, delivery requirements and capacity. Ratings and delivery events may flag an account for review. A human makes decisions to restrict, suspend or terminate a rider relationship. You may request an explanation and human review where applicable.
Who receives data
- Authorised Digidoy operations, dispatch, onboarding, finance, safety, support and technical personnel.
- The pickup restaurant or store and delivery customer, limited to information needed for the delivery.
- Stripe and contracted hosting, storage, maps, communication, notification, monitoring and security providers.
- Professional advisers, insurers, emergency services, courts, regulators or authorities where necessary and lawful.
International transfers
Where providers process data outside the European Economic Area, Digidoy uses an adequacy decision, approved Standard Contractual Clauses with appropriate supplementary measures, or another lawful safeguard.
Retention
- Unsuccessful or incomplete applications: normally up to 2 years after the last meaningful contact.
- Active profile and eligibility records: for the relationship, then normally up to 5 years for legal claims.
- Detailed operational location: normally no more than 2 months, unless isolated for a disputed delivery.
- Delivery, cash, earning and dispute records: normally 5 years; accounting evidence may be held for 10 years.
- Device, authentication and security logs: normally no more than 12 months unless an incident requires longer preservation.
Your rights
You may request access, correction, deletion, restriction and—where applicable—portability; object to processing based on legitimate interests; and withdraw consent. Rights can be limited by law, safety, another person’s rights or legal claims. Email contact@digidoy.fr. You may complain to the CNIL at cnil.fr.
Security and confidentiality
Digidoy uses encrypted transport, secure session storage, role-based access, logging and provider oversight. Protect your device and credentials and report suspected compromise promptly. No system can guarantee absolute security.
Changes and contact
Material changes will be brought to your attention through the app, email or another appropriate method where required. Privacy contact: contact@digidoy.fr · Digidoy, 4 Rue Parisis, 28100 Dreux, France · digidoy.fr.