Privacy Policy
This Privacy Policy explains what personal data Colibrí collects across its apps, why we collect it, and the choices you have. It applies to customers, business owners and staff, independent delivery drivers, and wholesale suppliers.
1. Data we collect
Account data: name, phone number or email, date of birth (customers, to verify the 18+ minimum age), and profile photo where provided.
Location data: precise device location while placing or fulfilling an order (used to match customers with nearby drivers, calculate delivery ETAs, and resolve your country for localized pricing and currency).
Identity and business verification data: government ID, business registration documents, tax identification and, for wholesalers, corporate legal documents, collected only when your role requires KYC (drivers, business owners with Stripe Connect, wholesalers with Stripe Identity).
Order data: items purchased, delivery address, order history, in-app messages related to an order, and photos submitted as proof of delivery or claim evidence.
Payment data: Colibrí never receives or stores your full card number. Card details are collected and stored directly by Stripe, our payment processor; Colibrí only receives a tokenized payment method reference.
2. How we use your data
To operate the marketplace: matching orders to nearby drivers through the delivery auction, routing dropship orders to the correct wholesaler warehouse, calculating shipping quotes, and processing payments and payouts.
To resolve your country via a cascade of signals (an explicit country selection you have made, device geolocation reverse-geocoded through the Google Maps Geocoding API, IP-based country headers, and finally a market default) so that pricing, currency and available services are shown correctly.
To verify identity and prevent fraud, including anti-fraud checks at pickup and drop-off (signed QR codes and GPS-validated proof-of-delivery photos within a configured geofence).
To communicate with you about your orders, account, and — where you have opted in — promotional offers.
4. Data retention
We retain order and payment records for as long as required by applicable tax and accounting regulations. Identity verification documents are retained for the duration of your account's active status plus the period required by anti-money-laundering regulations applicable to your country, and are stored in access-controlled storage with signed, time-limited URLs — never publicly accessible.
5. Your rights
Depending on your jurisdiction, you may have the right to access, correct, export or delete your personal data, and to withdraw consent for marketing communications at any time from your account settings. To exercise these rights, contact us using the details below.
6. Security
We use industry-standard safeguards, including encryption in transit, role-based access control backed by Firebase custom claims, and least-privilege access to identity documents. No payment card data ever touches Colibrí's own servers.
7. Children's privacy
Colibrí's customer app is restricted to users who are at least 18 years old, verified at onboarding. Our services are not directed at children, and we do not knowingly collect personal data from anyone under the age required by their local law.
8. Contact
Questions about this Privacy Policy or requests regarding your personal data can be sent to contact@viacolibri.com.