Privacy Policy

Account information (name, email, phone, password); identity verification data for hosts and, where required, guests (CNIC number, CNIC images, and a selfie); booking and listing data (reservations, messages, reviews); payment information you give us to pay or be paid — the payment receipt you upload and any bank reference number for a bank transfer, and, for hosts, the bank account details you provide for guests to pay you into (the account number is encrypted at rest); and technical/usage data (device, IP address, approximate location, cookies). We do not collect or store card numbers.

To provide the service, verify identity and prevent fraud, record bookings and the payment receipts guests upload, provide support, send service messages (including verification and password-reset emails), and meet our legal obligations.

We do not sell your data. We share only what is needed — with hosts and guests to complete a booking, with our payment and hosting providers, and with authorities where the law requires.

These companies process data on our behalf, under contracts that limit them to the purpose listed, and none of them may use it for their own advertising: Cloudinary — stores and serves listing photos and profile photos; Amazon Web Services (Rekognition) — compares your selfie and liveness video with your CNIC photo during identity verification; the images are processed for the comparison and are not used to train anything; Sentry — receives crash and error reports from the website and the app so we can fix faults; reports are scrubbed of names, emails, phone numbers, tokens and document numbers before they leave your device; Expo, Apple Push Notification service and Firebase Cloud Messaging — deliver push notifications to the app using a device token; the token is deleted when you sign out; Resend — sends our transactional emails (verification, password reset, booking updates); Google and Apple — sign-in only, if you choose 'Continue with Google' or 'Sign in with Apple'; we receive your name and email from them and nothing else; Railway and Vercel — host our servers and website. We do not use advertising SDKs or analytics SDKs in the mobile app.

The Volotix app for iOS and Android uses the camera and photo library only when you choose to add a photo, a receipt or an identity document; the microphone only while you record a voice note to send in a conversation; and your approximate location only when you tap “Near me”, to pick a city — it is not stored and not shared. The app keeps you signed in with a token stored in your phone's secure storage. Anonymous crash reports are sent to Sentry so we can fix faults; they contain no personal information. Push notifications need a device token, which we hold while notifications are on and delete when you sign out or turn them off.

Identity documents (CNIC images, selfies and the short liveness video) are stored privately, encrypted, and made available only to authorised reviewers for verification and safety. The comparison between your selfie and your CNIC photo is automated (see Service providers); a person reviews the result before any decision that affects your account. Document images are deleted after a final verification decision, and in any case within 30 days of account deletion.

We keep your information while your account is active. When you delete your account, your profile details are removed immediately and identity-verification documents are deleted within 30 days. Records of completed bookings and payments are kept, without your profile, for as long as tax and accounting law requires, and then deleted or anonymised.

You can access or correct the information in your account at any time. You can delete your account yourself in the app (Profile → Settings → Delete account) or on the website (Account settings → Delete account), or by emailing support@volotix.com from your account email; see volotix.com/help#delete-account. Deletion is subject to records we must keep by law. You can withdraw consent for optional processing such as marketing.

We use cookies to keep you signed in, remember preferences, and secure the platform.

On the website we use Google Analytics 4 and Google Ads to understand how people find and use Volotix, and to measure which of our adverts lead to a booking. These services set cookies and receive your device and usage data, including an approximate location derived from your IP address, which is truncated before it is stored.

We send Google the name of the step you reached (for example that a listing was viewed, or that a booking was confirmed) and the amount of the booking in rupees. We do not send your name, your email address, your phone number, your CNIC or any document, your messages, or any reference that identifies you or your booking.

You can opt out of Google Analytics entirely using Google's browser add-on, or by blocking cookies in your browser. Nothing on Volotix requires these cookies — booking works with them blocked.

The Services are for adults aged 18 and over.

We may update this Policy and will post the updated version with a new date. Contact: support@volotix.com.