This Privacy Policy explains how ChozeKai (“we,” “us,” or “our”) handles personal information through MoboWay, our bus operations SaaS platform, websites, dashboards, and passenger applications.
1. Our role
ChozeKai acts as the controller of information used to administer MoboWay accounts, subscriptions, security, support, and our website. When a transport organization uses MoboWay to manage its passengers, employees, drivers, bookings, payments, or parcels, that organization generally determines why and how the information is used, and ChozeKai processes it on the organization’s behalf. Questions about a specific trip, ticket, parcel, refund, or operator record should first be directed to that transport organization.
2. Information we collect
- Account and organization information: names, usernames, work email addresses, phone numbers, organization details, roles, invitations, and authentication settings.
- Passenger and transaction information: traveler and recipient details, routes, schedules, seat selections, bookings, parcel details, payment status and references. Full payment credentials are typically handled by the selected payment provider.
- Fleet and operations information: vehicles, drivers, staff, maintenance, routes, schedules, and operational records supplied by an organization.
- Device and usage information: IP address, browser or device type, app identifiers, logs, pages or features used, timestamps, diagnostics, and security events.
- Communications: support requests, feedback, announcements, and notification preferences or delivery tokens.
3. How we use information
We use information to provide and personalize MoboWay; authenticate users and enforce permissions; process subscriptions and requested transactions; deliver notifications; support users; monitor performance; prevent fraud and security threats; maintain audit records; comply with law; and improve our products. We do not sell personal information.
4. Legal bases
Where applicable law requires a legal basis, we rely on performance of a contract, legitimate interests in operating and securing the service, compliance with legal obligations, and consent where requested. An organization using MoboWay is responsible for establishing an appropriate basis for the personal information it places in its workspace.
5. How information is shared
Information may be shared with:
- the transport organization and authorized users responsible for the relevant service;
- vendors that provide hosting, storage, payment processing, communications, analytics, security, and support under appropriate obligations;
- professional advisers and authorities when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or establish legal claims;
- a successor in a merger, financing, reorganization, or sale, subject to appropriate confidentiality protections.
We do not permit service providers to use organization data for their own advertising.
6. Data retention
We retain information while needed to provide MoboWay and for legitimate security, dispute resolution, backup, tax, audit, and legal purposes. Retention depends on the record type, an organization’s instructions, subscription status, and applicable law. When information is no longer required, we delete or de-identify it using reasonable processes. Backup copies may remain for a limited period before cycling out.
7. Security
We use administrative, technical, and organizational safeguards designed to protect information, including role-based access, authentication controls, encryption where appropriate, tenant separation, logging, and restricted infrastructure access. No system is completely secure, so users must protect credentials and promptly report suspected misuse.
8. International processing
MoboWay and its providers may process information in countries other than where users live. Where required, we use recognized safeguards for cross-border transfers. Local privacy rights remain subject to applicable law.
9. Your choices and rights
Depending on location, individuals may have rights to access, correct, delete, restrict, or object to processing; receive a portable copy; withdraw consent; or complain to a data protection authority. Account holders can update some information in MoboWay. For information controlled by a transport organization, submit the request to that organization; we will assist it as required. We may verify identity before completing a request and may retain information where legally permitted.
10. Notifications and device permissions
Users may manage optional push notifications and device permissions through app or device settings. Essential service, account, security, or transactional messages may still be sent where permitted. Disabling permissions may limit related features.
11. Children
MoboWay is not directed to children who can independently consent under applicable law. Transport organizations and guardians are responsible for providing lawful authorization when a child’s information is needed for travel. If we learn that information was collected directly by ChozeKai without required authorization, we will take appropriate steps to delete it.
12. Cookies and similar technology
Our web services may use essential cookies or local storage for sign-in, security, language, session continuity, and preferences. Where non-essential analytics or similar technology requires consent, we will request it before use.
13. Policy changes
We may update this Policy to reflect changes in MoboWay, our practices, or legal requirements. We will post the updated Policy with a new effective date and provide additional notice when a change is material.
14. Contact
Privacy questions and requests may be submitted through chozekai.com. Please identify the relevant transport organization when your request concerns an operator-managed record.