Privacy Policy

1. Who We Are

Portail is a carpooling platform operated in Canada by Portail Hub Inc. We connect drivers with empty seats to passengers heading in the same direction, sharing the cost of the trip. By using our app, you agree to this Privacy Policy.

2. Information We Collect

We collect the following information when you use Portail:

• Account info: Full name, email address, phone number
• Payment info: Card brand and last 4 digits only — full card details are handled exclusively by Stripe and never stored on our servers
• Trip info: Origin, destination, date, time, and pickup points
• Booking info: Seats booked, booking status, payment amounts
• Verification documents: Driver's license and proof of insurance (for drivers only)
• Device info: Push notification token for sending trip alerts

3. How We Use Your Information

We use your information to:

• Connect passengers with drivers for shared trips
• Process bookings and payments
• Send trip confirmations and push notifications
• Verify driver identity and review uploaded documents
• Provide customer support
• Improve and maintain our platform

4. Who We Share Your Information With

We share your information only with the following trusted service providers:

• Stripe — payment processing (they handle all card data securely under their own privacy policy)
• Expo / Firebase — push notification delivery
• Supabase — secure database hosting

We do not sell, rent, or trade your personal information to any third parties.

5. Driver Verification

Drivers are required to upload a valid driver's license and proof of insurance. These documents are reviewed by Portail staff through our secure admin system. They are stored securely and are never shared with passengers or third parties.

6. Data Retention

We retain your personal data for as long as your account remains active. If you delete your account, all personal data is permanently deleted within 30 days. Some data may be retained longer if required by law.

7. Your Rights — Quebec Law 25 & PIPEDA

Under Canadian federal law (PIPEDA) and Quebec's Law 25 (Act Respecting the Protection of Personal Information in the Private Sector), you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your account and all associated data
• Withdraw your consent to data collection at any time
• File a complaint with the Commission d'accès à l'information (CAI) at cai.gouv.qc.ca

To exercise any of these rights, contact our Privacy Officer at: hello@portailapp.ca

8. Data Breaches

In the event of a data breach that presents a risk of serious harm to users, Portail will notify affected users and report the breach to the Commission d'accès à l'information (CAI) within 72 hours of becoming aware of the incident, as required by Quebec Law 25.

9. Security

All data is encrypted in transit (TLS) and at rest. Payment information is handled exclusively by Stripe using industry-standard PCI-DSS compliant security. Access to personal data is restricted to authorized Portail staff only.

10. Privacy Officer

Portail has designated a Privacy Officer responsible for ensuring compliance with applicable privacy laws. You may contact the Privacy Officer for any privacy-related inquiries at hello@portailapp.ca.

11. Children

Portail is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that a minor has created an account, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of significant changes through the app and update the 'Last updated' date at the top of this document.

Questions or concerns?

hello@portailapp.ca
Portail Hub Inc. — Montreal, Quebec, Canada