Legal

Privacy Policy

This is a preliminary version published ahead of launch; the final version will replace it when the service goes live.

1What we collect

Account data: your phone number, your name, and your preferred language.
Passenger data: the names of the people you book for, and a passport or ID number on cross-border trips only.
Booking data: the trip, the seats, the pickup and drop-off points, and the booking date.
Payment data: the transaction amount, status and gateway reference, plus your transfer receipt image if you choose that route. We do not store your card numbers — they are handled by the payment gateway directly.
Technical data: IP address, device type and error logs, for security and service improvement.

2Why we use it

We use your data to fulfil your booking and issue your ticket, to contact you about your trip, to process payments and refunds, to prevent fraud and double booking, and to meet our regulatory obligations. We do not sell your data to anyone, and we do not use it for third-party advertising.

3WhatsApp messages

WhatsApp is our only channel for operational notifications: booking confirmation, payment approval, ticket issuance, trip delays and cancellations, pre-trip reminders, and sign-in codes. These are service messages tied to your booking and cannot be switched off while the booking stands.

Anyone joining the launch waiting list receives exactly one message when the service goes live, and can ask for their number to be deleted at any time.

4Who we share it with

The operator running your trip receives the passenger name, seat, pickup and drop-off points, and boarding status — the minimum needed to run the trip. They do not see the rest of your data or your bookings with anyone else.
The payment gateway receives what it needs to complete the transaction.
The WhatsApp provider receives your number and the content of the service message.
Regulators, where there is a lawful, formal request.

5How long we keep it

We keep booking and financial transaction records for as long as accounting and regulatory obligations require. Transfer receipt images are deleted once they are no longer needed for review and audit. Waiting-list numbers are deleted after the launch campaign ends, or on request.

6Your rights

You may request a copy of your data, correction of anything inaccurate, or deletion of your account and any data we are not legally required to retain. Just message us on WhatsApp or by email from your registered number or address.

7How we protect it

Traffic to the platform is encrypted over HTTPS, passwords are stored using one-way hashing, and QR codes are digitally signed. The account tables for customers, operators and Bussat staff are fully separated with non-interchangeable tokens, and every access to operator data is scoped to that operator alone.

8Privacy contact

For any question or request about your data, reach us through the channels listed on the contact page and we will reply within two working days.