Privacy policy · Conductor

1 · Scope & roles

This Policy applies to personal information we collect when you access or use the Platform, communicate with us, or otherwise interact with our services. For the purposes of the NDPA, Conductor is the Data Controller in respect of your personal information, save where a specific processing activity involves us acting as processor on behalf of another controller (for example, certain identity-verification activities where the controller is a licensed identity provider).

2 · What we collect

We collect the following categories of information:

Registration & profile data: name, date of birth, phone number, email, gender (where declared), photograph, password (hashed), preferred language, initial role (Passenger or Car Owner), and occupation category (optional).
Identity-verification data: NIN and NIN-verification records; for Car Owners, driver’s licence number, licence photograph, and licence verification records; vehicle registration papers, insurance certificate, and other supporting documents.
Trip & usage data: Bookings, Trips published, Trip-Days completed, cancellations, ratings, chat messages, service-recovery credits and referrals.
Location data: pickup and drop-off coordinates, live GPS during a Trip, and area-level home / work coordinates captured during onboarding (see clause 6).
Financial data: Wallet balances, transaction history, refund requests and their outcomes, bank-account details submitted for withdrawals, and tokenised card details as held by our payment processor.
Device & technical data: device model, operating system, app version, IP address, session identifiers, telemetry (battery, network kind, GPS accuracy), and analytics events.
Safety data: SOS activations, emergency contacts you nominate, incident reports, safety-relevant photos or recordings (e.g. vehicle photographs), and dispute records.
Communications: messages exchanged in the in-app chat, support tickets, and notifications delivered via our providers.
Search & preference data: the routes and days you search, filters you apply, promotional codes you redeem, and preferences you set.

3 · How we use it

We use personal information to:

operate the Platform — register your account, verify your identity, publish or book Trips, calculate fares, process payments and refunds, and settle earnings;
keep the Platform safe — run our Trust & Safety systems, detect fraud, prevent abuse, investigate incidents, and respond to disputes;
assess refund requests — where you report an issue with a Trip-Day, we review the records relevant to that claim, which may include GPS traces, in-app chat logs, and attendance flags, in order to decide the request and to detect refund fraud or abuse (see clause 14);
improve the Platform — understand how features are used, prioritise product decisions, calibrate pricing, and develop new features;
communicate with you — send Trip notifications, service messages, safety alerts, receipts, and (where you have opted in or the law permits) promotional messages;
meet legal, tax, and regulatory obligations — including obligations arising under the NDPA, NDPR, FCCPA, Federal Inland Revenue Service (FIRS) requirements, and any lawful requests by competent authorities;
enforce our Terms and defend our legal rights.

4 · Legal bases (NDPA)

We rely on one or more of the following lawful bases under the NDPA:

Contract — processing necessary to perform our services to you (e.g. matching you with Car Owners, processing payments).
Legal obligation — processing required by Nigerian law (e.g. VAT, KYC / identity verification, responding to lawful orders).
Legitimate interests — where processing is necessary for our or a third party’s legitimate interests and not overridden by your rights and freedoms (e.g. fraud prevention, Platform integrity, research and product improvement using aggregated data).
Consent — where we specifically ask for it (e.g. certain marketing communications, background-location tracking outside a Trip window).
Vital interests — where processing is necessary to protect the life or physical safety of any person (e.g. SOS activations).

5 · Who we share with

Other Users, on a need-to-know basis: a Car Owner receives the Passenger’s first name, rating, and pickup / drop-off; a Passenger receives the Car Owner’s first name, rating, and Vehicle’s make / model / plate (partially masked in some contexts). We do not share full identity documents, home / work coordinates, or unmasked phone numbers between Users.
Service providers under written contract and confidentiality obligations, including cloud hosting, payment processing (Paystack), mapping (Google Maps & Places), notification orchestration (Novu, WhatsApp / Meta), identity verification (QoreID, VerifyMe), analytics, and customer-support tooling.
Regulators, courts, and law-enforcement agencies where required by law, court order, or valid regulatory demand, or where we have a good-faith belief that disclosure is necessary to prevent harm, fraud, or a violation of law.
Corporate transactions — in the event of a merger, acquisition, financing, insolvency, or sale of assets, information may be transferred to the counterparty, subject to appropriate protections.
With your consent — e.g. where you connect a third-party service to your Conductor account, or authorise us to share information with a workplace-benefits scheme.

We do not sell your personal information, and we do not use it for interest-based advertising to third parties.

6 · Location data

The Platform collects location data (a) at points where you actively use location features (searching, booking, setting home / work), (b) during Trips (for safety and to power in-Trip UX such as ETA and route replay), and (c) where you have granted the app background-location permission (for pickup-arrival detection when the phone is asleep).
You may revoke location permission at any time through your device settings. Revoking permission may disable safety or matching features that require it.
Location precision is minimised where possible. Home and work areas are stored as neighbourhood-level coordinates, not exact street addresses.
We do not sell location data.

7 · National Identification Number (NIN)

The following notice supplements this Policy in relation to NIN specifically, and forms part of it.

Identity verification. Your NIN is used to confirm that the identity you have registered is genuine and belongs to you. This helps us confirm the identity of both Car Owners and Passengers and prevents the use of false, stolen, or fraudulent identities.
Safety and security. NIN verification forms part of our safety measures. It supports accountability, deters misconduct, and protects the community from fraudulent or harmful activity.
Car Owner and Passenger authentication. For Car Owners, NIN verification is part of onboarding and due diligence to ensure that only properly identified individuals provide transportation services on the Platform. For Passengers, NIN verification reduces impersonation and promotes trust between all Users.
Fraud prevention and investigation. Your NIN may be used to detect, prevent, investigate, and respond to fraud, identity theft, abuse of the Platform, or other activities that violate our Terms or applicable law.
Legal and regulatory compliance. We may process your NIN to comply with applicable laws, lawful requests from competent authorities, and other requirements imposed by relevant governmental agencies.
Protection. We treat your NIN as sensitive personal information and implement reasonable administrative, technical, and organisational measures to protect it against unauthorised access, disclosure, alteration, misuse, or loss. Access is restricted to authorised personnel and trusted service providers who require it to perform verification, security, or compliance functions on our behalf and who are bound by confidentiality and data-protection obligations.
No sale or marketing. We do not sell your NIN and we do not use it for marketing.
Retention. Your NIN is retained only for as long as necessary to fulfil the purposes above, comply with legal and regulatory requirements, resolve disputes, or enforce our contractual rights. Where retention is no longer required, we will securely delete or anonymise it in accordance with our retention schedule.
Your rights. Subject to applicable law, you may request access, correction, objection, or exercise other rights available under NDPA (see clause 9 below).

8 · Retention

We retain personal information only for as long as necessary for the purposes described in this Policy, or for such longer period as is required by law. Indicative retention windows (subject to specific legal, regulatory, or operational requirements):

Account & profile data — while the account is active, and thereafter for a reasonable period to satisfy legal obligations, resolve disputes, and enforce our agreements.
Identity-verification records (including NIN, licences, vehicle documents) — for the duration of the account and thereafter for such period as is required by anti-fraud, safety, tax, or regulatory obligations.
Trip, payment, refund, and settlement records — for a minimum of seven (7) years, or such longer period as required for accounting, tax, or audit purposes.
Search history & usage telemetry — up to 365 days by default (admin-tunable), used for personalisation and product research.
Chat and support communications — for such period as is required to service tickets, respond to disputes, and comply with law.
Anonymised / aggregated data — may be retained indefinitely.

9 · Your rights

Subject to applicable law and to any specific conditions, you have the right to:

ask us to confirm whether we process your personal information and to receive a copy;
ask us to correct inaccurate or incomplete information;
ask us to delete personal information we no longer have a lawful basis to retain (see the Account & Data Deletion Policy);
object to processing on grounds of your particular situation, or to withdraw a consent you previously gave;
request restriction of processing in certain cases;
request portability of personal information you provided to us, in a structured, commonly used, machine-readable format;
lodge a complaint with the Nigeria Data Protection Commission (NDPC).

To exercise a right, contact privacy@conductor.ng. We may need to verify your identity before responding. We will respond within the timeframe required by law and generally within thirty (30) days.

10 · Security & breaches

We implement administrative, technical, and organisational safeguards designed to protect personal information from unauthorised access, disclosure, alteration, misuse, or loss. These include encryption in transit, access controls, network segmentation, audit logs, and staff training.
No system is completely secure. If you believe your account or personal information has been compromised, contact us immediately at security@conductor.ng.
Where a personal-data breach is likely to result in a risk to affected individuals, we will notify the Nigeria Data Protection Commission and any affected individuals in accordance with the NDPA.

11 · Children

The Platform is not intended for and may not be used by any person under the age of 18. We do not knowingly collect personal information from any person under 18. If we become aware that we have collected such information, we will delete it and terminate the associated account.

12 · Cross-border transfers

Some of our service providers process personal information outside Nigeria. Where personal information is transferred outside Nigeria, we do so in accordance with the NDPA, including by relying on adequacy decisions, standard contractual clauses, binding corporate rules, or one of the other lawful transfer mechanisms recognised under Nigerian law.

13 · Contact & Data Protection Officer (DPO)

Questions, requests, or complaints about your privacy or personal information: privacy@conductor.ng.

14 · Refund Policy

This Refund Policy sets out when refunds are and are not payable, the process for requesting one, and how long refunds take to reach you. It is incorporated by reference into the Terms of Service.

14.1 · General principles

Refunds are decided on the facts of each Trip-Day, in accordance with this Policy.
Approved refunds are, in the first instance, credited to your Wallet spendable balance. Where you have withdrawn, refunds may be routed to the original payment method or another payment channel we designate, subject to operational, legal, and regulatory requirements.
We reserve the right to investigate every refund request, including by reviewing GPS data, chat logs, car owner / passenger attendance flags, and any other Trip records, in order to prevent fraud, abuse, or misuse.
Refunds are processed on a per-Trip-Day basis. A multi-day Booking is not refunded on a whole-Trip basis simply because one Trip-Day was disputed — each affected Trip-Day is evaluated on its own facts.
Where the Service Charge has been earned, we may deduct it from a refund. Where a refund arises from Car Owner fault or a service failure attributable to us, the full amount paid is refunded.

14.2 · Passenger-initiated cancellations

Before Car Owner acceptance. Any amount pre-authorised, held, or paid is refunded in full.
Early cancellation (before the daily cut-off). Where you cancel a Trip-Day sufficiently in advance of the Car Owner’s pickup time (as defined by the in-app cancellation window for that Trip), the fare is refunded in full, less any small administrative processing fee expressly disclosed at cancellation.
Late cancellation. Where you cancel a Trip-Day inside the cut-off window — sufficiently close to pickup that the Car Owner cannot reasonably re-sell the seat — the fare for that Trip-Day is not refundable. This is because the seat has effectively been consumed against the Car Owner’s capacity.
No-show. If the Car Owner arrives at the pickup point and waits the applicable grace period (published in-app) and you neither arrive nor cancel in-app, you are treated as a no-show and no refund is due.
Ride refused after boarding for behaviour. Where a Car Owner ends a Trip early due to your prohibited conduct (clause 11 of the Terms), you are not entitled to a refund of the affected Trip-Day.

14.3 · Car owner-initiated cancellations & service failures

Car Owner cancels a Trip-Day after accepting the Booking. You receive a full refund of the fare paid for that Trip-Day. Where the pattern is repeated by the same Car Owner, we may sanction the Car Owner under clause 12 of the Terms.
Car Owner marks the Trip-Day as suspended (e.g. vehicle unavailable, personal emergency). You are not charged for that Trip-Day and any pre-held amount is released back.
Car Owner no-show (Car Owner did not arrive within a reasonable time and did not update the Trip-Day status). You are refunded in full.
Vehicle unroadworthy or safety-inadequate at pickup. You may decline to board; the Trip-Day is refunded in full and reported to our Trust & Safety team.
Substantial route deviation. Where the Car Owner, without lawful reason, materially departs from the agreed route in a way that substantially harms the value of the Trip to you, a partial or full refund may be granted upon investigation.

14.4 · Payment failures, duplicates, and technical errors

Duplicate charges are refunded in full upon confirmation.
Where a payment is deducted without a corresponding successful Booking, the amount is refunded in full.
Where an incorrect fare has been charged due to a technical error, we will refund the difference.

14.5 · Wallet balances & withdrawals

Spendable Wallet funds may be withdrawn to a verified bank account. Withdrawals may take between one (1) and five (5) business days after approval, depending on the banking rails.
Withdrawal requests may be delayed or declined where fraud, abuse, suspicious activity, sanctions-list matching, or a lawful hold is present.
Referral rewards and promotional credits are not directly withdrawable. Referral rewards may be transferred to the spendable Wallet subject to programme-specific minimums and PIN authentication.

14.6 · Promotional credits, bonuses, and coupons

Promotional credits, referral rewards, discount codes, and other incentives are:

non-transferable;
not redeemable for cash;
not refundable when a related Trip is cancelled — only the eligible monetary amount, if any, may be refunded;
expire in accordance with the terms of the specific promotion.

14.7 · Circumstances where refunds may be declined

failure of the Passenger to appear within the permitted waiting time;
provision of inaccurate pickup or drop-off information;
violations of these Terms;
fraudulent, deceptive, or abusive refund practices, or repeated misuse of the refund process;
circumstances beyond the Company’s reasonable control (see clause 15 of the Terms);
where the service has substantially been rendered.

14.8 · Processing time

To the in-app Wallet: generally immediate or within 24 hours of approval.
To a bank account or card: generally within 5 to 15 business days, depending on the financial institution, payment processor, and applicable regulations.
We are not liable for delays caused by third-party payment providers or financial institutions.

14.9 · How to request a refund

Open the affected Trip-Day in the app and tap “Report an issue”. Describe the problem and attach any photographs or screenshots you have. Our support team will acknowledge within seven (7) business days and confirm the outcome within a reasonable time thereafter. You may also email support@conductor.ng.

14.10 · Fraud prevention & abuse

We maintain fraud-detection measures for refund requests. Users who engage in fraudulent, deceptive, or abusive refund practices may have their accounts suspended, restricted, or terminated, and forfeit outstanding Wallet balances derived from the abusive activity, without prejudice to any other legal remedy available to the Company.

14.11 · Changes to this Policy

We may amend this Policy from time to time. Changes take effect on publication and continued use of the Platform constitutes acceptance.

This page mirrors the current published policy. Questions? privacy@conductor.ng

Privacy policy.