Legal

Privacy Policy

Last updated:

This document explains what personal data the Gram service processes, why, who it is shared with, how long it is kept, and how you can exercise your rights.

1. Data controller

The controller of personal data of users of the Gram service and of the Gram and Traffic Gram mobile applications is the legal entity whose details are set out below.

Legal name
INNOVATSIYAI OYANDASOZ, JDMM
Email
info@gram.tj
Phone
+992 44 620 02 20

2. What data we collect

We collect only the data needed to provide the service, to comply with the law and to keep rides safe:

  • Phone number — used as the account identifier and to connect you with the driver.
  • The name you enter in your profile, and your profile photo if you upload one.
  • Location data: pickup address, destination, and background location during an active trip — used to dispatch the car and build the route.
  • Ride and delivery history: time, route, fare and status.
  • Payment data: payment type and transaction status. Full card details are handled by the payment provider and are never passed to Gram.
  • Device identifiers and technical data: device model, operating system version, app version, push notification token, IP address.
  • Analytics data: in-app and website events, install source, screens viewed.
  • Correspondence and records of your requests to customer support.

3. Why we collect it

  • To provide the service: dispatching a car, calculating the fare, building the route, passing the order to a driver, delivering parcels.
  • To communicate with you: order status, push notifications, login codes by SMS, replies from customer support.
  • For payments and accounting: processing payments and refunds, issuing receipts, meeting tax requirements.
  • For safety: verifying driver identity, investigating disputes, preventing fraud.
  • To improve the service: analysing ride quality, testing new features and producing usage statistics — in anonymised or aggregated form.

4. Who we share data with

We do not sell personal data. It is shared only to the extent needed to deliver the service:

  • Drivers — your name, phone number (or a masked number), pickup and destination address for that specific order. Drivers never see your other trips.
  • The payment provider — the data required to process the transaction.
  • SMS and push notification providers — phone number and device token.
  • Yandex.Metrica (Yandex LLC) — anonymised website behaviour data. Loaded only after you consent in the cookie banner.
  • Meta Pixel (Meta Platforms, Inc.) — anonymised website visit data used to measure advertising performance. Loaded only after you consent in the cookie banner.
  • Government authorities — on a reasoned request, in cases provided for by the legislation of the Republic of Tajikistan.

5. How long we keep data

  • Account data is kept for as long as the account is active.
  • Ride history and payment documents are kept for the period required by tax and accounting law, even after the account is deleted.
  • Analytics data is kept in anonymised form for no longer than 25 months.
  • Support conversations are kept for up to 12 months after the request is closed.
  • After account deletion, all other data is deleted or anonymised within 30 days.

6. Your rights

At any time you may:

  • find out what data about you is being processed;
  • correct inaccurate data — in the app profile or through support;
  • withdraw consent for processing that is not required to provide the service (analytics, marketing notifications);
  • delete your account and the data associated with it — the procedure is described on a dedicated page;
  • receive a copy of your data in a machine-readable format;
  • complain about how the controller has handled your data.

Send your request to the personal data address listed in section 9. We reply within 30 calendar days. To protect your data we may ask you to confirm that the request comes from the account owner.

7. Cookies and trackers

The website uses two kinds of cookies. Essential cookies keep the site working: they remember your chosen language and city, and do not require consent. Analytics cookies and pixels (Yandex.Metrica, Meta Pixel) collect visit statistics and are not loaded until you consent in the cookie banner.

You can decline directly in the banner — the “Decline” button carries the same weight as “Accept”. Consent already given can be withdrawn: clear the site data in your browser settings and the banner will appear again.

8. Children's data

The service is not intended for people under 18, and we do not knowingly collect children's data. If we learn that an account was registered by a minor without the consent of a parent or legal guardian, that data is deleted. A parent or legal guardian can report this to our personal data address.

9. How to contact us

For any question about the processing of personal data, including access, correction and deletion requests, write to the address below. Postal correspondence should be sent to the company's registered address.