Privacy policy — Taxi Copilot

This privacy policy explains how Tiskel sp. z o.o. ("Tiskel", "we", "us", "our") processes personal data in connection with Taxi Copilot and the website at taxicopilot.com.

1. Who we are

Tiskel sp. z o.o. provides Taxi Copilot, an AI-powered assistant for taxi companies that can help handle calls, WhatsApp and Messenger conversations, and taxi bookings.

Company details: Tiskel sp. z o.o. ul. Boleslawa Prusa 1/31 50-319 Wroclaw Poland Tax ID: PL8982204546 Email: biuro@tiskel.com

2. When Tiskel is controller and when processor

For data of passengers and other end users who contact a taxi company through Taxi Copilot, the taxi company is the data controller and Tiskel acts as the processor. This includes calls, recordings, transcripts, WhatsApp and Messenger messages, phone numbers, pickup and drop-off addresses, and booking details.

Tiskel acts as an independent controller for data processed for its own business purposes, including Customer accounts, billing, contracts, support, website forms, newsletter, analytics, and security logs.

End users should normally contact the relevant taxi company to exercise their data protection rights. Tiskel may assist the taxi company in responding to such requests.

3. What data we process

Customer data: company name, contact details, account users, billing data, service configuration, Meta Business and WhatsApp Business identifiers, phone number IDs, and OAuth tokens granted through Embedded Signup.
End user data processed for the Customer: phone numbers, messaging identifiers, messages, call recordings, transcripts, pickup and drop-off addresses, booking details, and optional location data shared for a taxi booking.
Website and technical data: IP address, browser and device information, pages visited, timestamps, cookies, and security logs.

4. Why we process data and legal bases

We process data to provide Taxi Copilot, manage Customer accounts, handle support, issue invoices, secure the service, improve reliability, and comply with legal obligations.

For Customer and account data, our legal bases include contract performance, legitimate interests, consent where required, and legal obligations. For passenger data, the taxi company determines the legal basis; most commonly this is taking steps to arrange or perform a taxi booking.

5. Third-party services and subprocessors

We use trusted third-party services only where needed to provide and secure Taxi Copilot. Data may be transferred outside the EEA under appropriate safeguards such as Standard Contractual Clauses.

Meta Platforms, Inc. (WhatsApp Business Platform and Messenger Platform)

Purpose: Send and receive messages, manage WhatsApp Business connections through Embedded Signup, and support Messenger integration.

Data shared: Business identifiers, WhatsApp Business Account IDs, phone number IDs, OAuth tokens, message content, end user phone numbers and Messenger IDs.

References: Meta Privacy Policy: https://www.facebook.com/privacy/policy/ | WhatsApp Business Solution Terms: https://www.whatsapp.com/legal/business-solution-terms

LLM providers — OpenAI, Anthropic, and Google (Gemini / Vertex AI)

Purpose: Natural language understanding and AI response generation.

Data shared: Message content, transcribed voice, and conversation context required to generate responses.

References: OpenAI: https://openai.com/enterprise-privacy | Anthropic: https://www.anthropic.com/legal/privacy | Google Cloud: https://cloud.google.com/terms/cloud-privacy-notice

OVHcloud (OVH SAS)

Purpose: Hosting application servers, databases, and storage in EU data centres.

Data shared: Service data stored and transmitted with appropriate technical safeguards, including encryption in transit and at rest where applicable.

References: OVHcloud Privacy Policy: https://www.ovhcloud.com/en/terms-and-conditions/privacy-policy/

Pipedrive, Google reCAPTCHA, and Google Analytics

Purpose: Sales communication, newsletter/contact form handling, abuse prevention, and website analytics where consent is required.

Data shared: Contact details, form submissions, IP address, browser/device information, and pseudonymous analytics data.

References: Pipedrive: https://www.pipedrive.com/en/privacy | Google: https://policies.google.com/privacy

6. Retention

We keep data only as long as needed for the purposes described above or as required by law. Conversation data is typically kept for up to 12 months unless a shorter or longer period is agreed with the Customer or required for legal reasons.

Billing and accounting records are kept for the period required by Polish law. Technical logs are kept only as long as needed for security and troubleshooting.

7. Your rights

Under the GDPR you may have the right to access, rectify, erase, restrict, export, or object to processing of your personal data, and to withdraw consent where processing is based on consent.

If your data was processed in connection with a taxi booking, please contact the relevant taxi company first as the controller. You may also contact us at biuro@tiskel.com and we will assist where appropriate.

8. Cookies and analytics

We use necessary cookies for the website and service to work. Analytics and marketing cookies are used only where required consent has been given. Cookie preferences can be changed through the cookie banner or footer link.

9. Contact

For privacy questions, contact: biuro@tiskel.com

You may also complain to the Polish supervisory authority: Prezes Urzedu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, https://uodo.gov.pl.

We may update this privacy policy from time to time. The date above shows the latest version. If changes materially affect your rights, we will notify Customers where required by law.