Privacy Policy

1. Who is responsible for your data

CheTransfer is responsible for the data you give us when you book a transfer. CheTransfer is the trade name under which Julio Federico Alvarez operates (Argentine tax ID, CUIT, 20-29157380-1), with registered address at Chascomús 5165 (1440), Ciudad Autónoma de Buenos Aires, Argentina.

2. What data we keep

When you book:

• your name, email and phone number, with the number's country;
• the address where we pick you up or drop you off;
• the date and time of your trip, and your flight if you're flying in;
• how many people are traveling, what luggage they carry and any extras you request, such as child seats;
• any notes you leave for your driver;
• the time and place of each step of the trip —when the driver sets off, arrives, meets you and drops you off—, recorded by the driver's phone;
• the language of the website and the language you chose for your driver.

When you get a quote, even if you don't book: the address and date you searched, the price we showed you and the country you're browsing from. We don't store your IP address or your name at that point.

When you rate your driver: your rating and comment.

When you ask us to resend your booking link: the booking code and a fingerprint of your IP address, to stop anyone trying to guess codes. We don't store the IP address itself: the fingerprint is computed with a secret key, and without that key it can't be used to tell what your IP address was.

If you accept the measurement cookies: what section 5 describes.

What we don't keep: card details —we don't take payments online— or identity documents.

3. What we use it for

• To carry out your transfer: assign you a driver, help them find you and take you where you're going.
• To write to you about your trip: the confirmation, your driver's details, a heads-up if they're running late, and the link to rate them.
• To protect the service: stop misuse of the website and handle complaints.
• To improve it: see which destinations people search for that we don't cover, or which countries our visitors come from. We look at this in aggregate, not person by person.

We don't send you advertising and we don't sell your data to anyone. We only write to you about your trip.

4. Who else sees it

The drivers we offer your trip to, before one of them accepts it: the date and time, the terminal, the address, the flight, how many people are traveling, the luggage, the language and your notes, so they can tell whether they can take it. They don't see your name or phone number.

Your driver, once they accept the trip: your name and phone number as well, so they can find you. Your name, flight and notes also reach them by email, as a copy of the trip in case the driver app is down; your phone number is not included in that email.

Once the trip is over, the driver app no longer shows them your name, phone number or notes: their history keeps the date, the route with its addresses, the flight and what they were paid. Whatever they already received by email, or any WhatsApp conversation you had, stays on their phone; the driver rules forbid them from using it for anything other than your trip.

Your driver can read the rating and comment you leave them, without your name or contact details. Since the rating is linked to the trip, they can tell which trip it's about. Ratings are not published.

The services we use to operate, each with only what it needs:

• Supabase, where our database is stored, in the United States.
• Postmark, which sends our emails: it receives your email address and the content of each message.
• Google, to look up addresses and draw the map. The lookups are made by our server, not your browser: Google doesn't receive your IP address or your name. It receives the address you search for and, when we draw the map of a trip to review it, the points the trip went through.
• Google Analytics, only if you accept the measurement cookies: in that case your browser talks to Google directly, and Google sees your IP address when it receives the data in section 5.
• AeroDataBox, through RapidAPI, to confirm your flight: they receive the flight number and date, nothing else.
• WhatsApp, if your driver messages or calls you there: it receives your number, like any chat.
• Cloudflare, which protects the website against attacks and bots. It sees your IP address, like any network a web page travels through.
• Netcup, the server the website runs on.

No one else, unless an authority requires it by law.

Some of these services store data outside Argentina: Supabase, Postmark, Google and Netcup, in the United States. We only give each of them what it needs to work.

5. Cookies

The ones the website needs to work: one for your language and the ones Cloudflare uses to tell people from bots. We also store your answer to the cookie notice in your browser. You don't need to accept these.

Measurement cookies, only if you accept them: the ones from Google Analytics. They tell us how people reached the site, which pages they view, from what country, whether they saw a price and whether they completed a booking, with its amount and terminal. They don't carry your name, email, phone number, address or booking link, and they don't run on your booking page. Google keeps this data for 14 months. If you don't accept them, nothing reaches Google and the site works the same. You can change your mind anytime with the "Cookies" button in the footer.

We don't use advertising cookies. Passengers don't have an account, so there are no session cookies either.

6. How long we keep it

Your booking link stops working 30 days after your trip.

We keep your booking data for as long as we need it for the trip and, after that, for as long as the law requires us to keep it: to handle a complaint and to meet legal or accounting obligations. Once that period is over, we delete your name, email and phone number. What's left of the trip no longer includes your contact details.

7. Your rights

You can ask us, at any time and free of charge, to:

• see what data we hold about you;
• correct it if it's wrong;
• delete it, except what we're required by law to keep;
• send it to you in a format you can take elsewhere;
• stop using it for anything other than your trip.

Write to us at privacidad@chetransfer.com from the email address you booked with. We'll reply within 10 days, and if you ask us to correct or delete something, we'll do it within 5 business days.

If you're in Argentina, the Agencia de Acceso a la Información Pública, as the supervisory authority under Law 25,326, handles complaints from anyone who believes the data protection rules have been breached.

If you're in the European Union, you can also lodge a complaint with the data protection authority in your country; if you're in Brazil, with the Autoridade Nacional de Proteção de Dados (ANPD).

8. Changes

If we change this policy, we'll publish the new version here with its date. If the change affects a booking you've already made, we'll let you know by email.

9. Contact

Write to us at info@chetransfer.com.