Last updated: 2 October 2026
Privacy policy
Courtesy translation. If there is any discrepancy, the Portuguese version prevails.
This policy explains what personal data we process, why, and what your rights are. The controller is RIGOTTOUR – TRANSFER ALGARVE, UNIPESSOAL, LDA, tax number 515914479, Rua José Pedro de Almeida, n.º 7, Apartamento 05 Esquerdo 8000-505 Faro, Portugal. Contact: support@paxtio.com.
1. Who it applies to
- Paxtio customers and users (whoever creates the account, the team, drivers and invited suppliers): we are the controller of the account data.
- Visitors to the website paxtio.com.
- Passengers and customers of the companies that use Paxtio: here the transfer company is the controller and we process the data on its behalf (see the data processing agreement). To exercise your rights over a booking, contact the company that provided the transfer.
2. What data we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, phone and company of whoever creates the account | Create and manage the account, send service notices | Performance of the contract |
| Billing details (company, tax number, address) | Charge the subscription and issue invoices | Performance of the contract and legal obligation |
| Support requests | Reply and improve the service | Performance of the contract |
| Access logs (IP, date, actions) | Security and abuse prevention | Legitimate interest |
Card details are processed by Stripe and never pass through our servers.
3. How long we keep it
- Account data: while the account exists and up to 30 days after cancellation.
- Invoices and billing data: for the legal period (10 years).
- Security logs: up to 12 months.
4. Who we share it with
Only with the providers needed for the service, under contracts that guarantee data protection:
| Provider | Purpose | Where |
|---|---|---|
| Supabase Inc. | Database and authentication | European Union (Paris, France) |
| Vercel Inc. | Hosting of the website and the system | European Union and USA (standard contractual clauses) |
| Resend Inc. | Sending emails (vouchers, notices, invitations) | USA (standard contractual clauses) |
| Stripe Payments Europe Ltd. | Subscription payments and card payments for bookings | European Union (Ireland) |
| Google Ireland Ltd. | Maps and address search | European Union (Ireland) |
The database is in the European Union. Transfers outside the European Economic Area use the European Commission’s standard contractual clauses.
5. Cookies
We only use cookies needed for the service to work: keeping you signed in and remembering which company you are accessing. We don’t use advertising cookies. Website visit statistics are aggregated and do not identify individuals.
6. Your rights
You can ask for access, rectification, erasure, restriction or portability, or object to processing, by writing to support@paxtio.com. We reply within one month. You can also complain to a supervisory authority, such as Portugal’s Comissão Nacional de Proteção de Dados (www.cnpd.pt) or the authority in your country.
7. Security
Each company’s data is kept separate from the others at database level, connections are encrypted and we make backups. If a data breach affects you, we will notify you within the legal deadlines.
8. Changes
This policy may be updated. The date at the top shows the latest version; important changes are notified by email.