ZanGo Privacy Policy
Effective Date: September 17, 2026
Last Updated: September 18, 2026
Policy Version: 2.2
1. About ZanGo
ZanGo is a technology platform operated by Tetaya Software Company Limited that connects tourists with local service providers, including guides and drivers, and provides related travel, communication, safety, booking, payment, and support features.
ZanGo may provide its services through websites, mobile applications, APIs, administrative systems, and related digital services.
For privacy and personal data matters, contact privacy@zango.tetaya.com .
2. Personal Data We Collect
Account and identity information
ZanGo may collect:
- name;
- phone number;
- email address, where provided;
- profile information, such as bio, languages and service details;
- account role;
- account status; and
- profile photograph.
The profile photograph is the picture shown on your public ZanGo profile. It is managed through ZanGo's identity provider and is separate from verification evidence.
Provider verification information
For guides and drivers, ZanGo may collect information required to verify identity, eligibility, safety, and trust. This may include:
- identification documents;
- passport or other identity documents;
- driver's licence;
- driver's badge or permit;
- road licence or other applicable operating documents;
- a personal verification photograph;
- verification status;
- verification decisions; and
- related administrative records.
Verification information is private evidence. Verification evidence is not used as the provider's public profile photograph and is not displayed to tourists or other users as a public avatar.
Booking, payment and travel information
ZanGo may process information about your searches, bookings, trips, itineraries, reviews, credits, payments, refunds, payouts, reports, and disputes.
Communications
ZanGo may process messages you exchange with other users through ZanGo, and communications with ZanGo support.
Technical and security information
ZanGo may process technical information required to operate and protect the service, such as session information, browser and device information, a hashed device identifier, log data, and security events.
3. How We Use Personal Data
ZanGo may process personal data for purposes including:
- creating and managing accounts;
- authenticating users;
- providing marketplace functionality;
- verifying guides and drivers;
- establishing provider eligibility and trust;
- facilitating bookings;
- processing payments and payouts;
- communicating with users;
- providing customer support;
- maintaining safety features;
- investigating incidents and disputes;
- detecting fraud, abuse, and security threats;
- enforcing platform rules;
- improving service functionality;
- maintaining technical and operational security;
- complying with legal obligations; and
- other purposes described at the time information is collected or otherwise permitted by applicable law.
Different processing activities may rely on different lawful bases under applicable data protection law, which may include consent, performance of a contract, compliance with a legal obligation, and other lawful bases. Where ZanGo relies on consent, that consent is requested separately for the relevant activity.
4. Provider Verification and Verification Evidence
Guides and drivers who apply to become verified providers may be required to submit personal and verification information. Verifying providers is a core safety function of the ZanGo marketplace.
ZanGo uses verification information to support purposes such as:
- identity verification;
- provider eligibility;
- safety;
- fraud prevention;
- trust and marketplace integrity; and
- compliance with applicable requirements.
Before submitting verification information, ZanGo will provide information about the relevant data being collected, the purpose of collection, applicable access restrictions, retention, and relevant data protection rights.
Where ZanGo relies on consent as the applicable legal basis for a verification activity, the provider will be asked to provide explicit consent before submitting the relevant information. ZanGo may record the applicable consent, including the policy version and the time at which consent was provided.
Providing consent does not guarantee provider approval.
Consent and verification status are separate records. Consent indicates a permission; verification status indicates the outcome of a review.
Verification evidence is stored privately and is not used as a public profile photograph.
5. Public and Private Information
Some information is intentionally displayed to other ZanGo users as part of marketplace functionality. Depending on the user's role and the applicable feature, public information may include:
- display name;
- public profile information;
- public profile photograph;
- provider role;
- verification status;
- service-related information; and
- ratings and reviews.
Verification documents and verification evidence are private information. Private verification evidence is not displayed to tourists or other providers, and a provider's private verification photograph is not used as the provider's public profile photograph.
6. Location Information
ZanGo may process different types of location information for different purposes.
General location
ZanGo may derive approximate or general regional information from technical information such as IP address, in order to provide relevant regional functionality.
Search location
Location information may be used when a user searches for nearby guides, drivers, hotels, restaurants, or other services. ZanGo does not collect precise device location merely because you have an account, and our web pages do not request device location permission.
Location you choose to share
Where a feature allows you to provide or share a location, for example a meeting point or a location shared with another user during a trip, that information is processed to provide the feature and is subject to the retention rules in this Policy. You control whether to share it.
7. Communications and Chat
ZanGo may store chat messages and related communication information to:
- enable communication between users;
- support booking and trip coordination;
- enforce safety rules;
- investigate reports and disputes;
- detect or prevent abuse and fraud; and
- provide customer support where necessary.
Chat retention depends on the status and purpose of the conversation and is described in the Data Retention section of this Policy. A conversation started as an enquiry before a booking is confirmed expires automatically if it is not converted into an active booking conversation.
8. Bookings and Payments
Where ZanGo provides payment functionality, payments may be processed through ZanGo's designated payment service providers. For supported bookings, a tourist may pay through the ZanGo payment flow.
Where an escrow process applies, payment may be held within the designated ZanGo payment flow until the applicable release, cancellation, refund, or dispute process is completed. A provider is not considered to have received the booking payment merely because the tourist has deposited funds into the escrow process.
ZanGo may process information necessary to:
- initiate and confirm payments;
- associate payments with bookings;
- process refunds;
- process provider payouts;
- detect payment failures or fraud;
- maintain transaction records; and
- comply with applicable legal, financial, accounting, and security requirements.
Payment card information may be processed by the applicable payment provider. ZanGo does not need to store full payment card credentials when those credentials are handled by the payment provider.
9. Service Providers and Data Processors
ZanGo may use carefully selected technology and service providers to operate its services. Depending on the feature, these providers may process information on behalf of ZanGo, including authentication information, infrastructure data, payment information, communications, or technical information.
ZanGo limits access to information to what is reasonably necessary for the relevant service and applies appropriate contractual, technical, and organizational safeguards where required.
The categories of providers ZanGo uses include:
- Identity and authentication: ZanGo's identity provider, which manages account sign-in and the public profile photograph.
- Cloud infrastructure and hosting: Cloudflare, which provides the application platform used by ZanGo, including its databases, private file storage, key-value storage, and event infrastructure.
- Payments: ZanGo's payment provider, which processes tourist payments and provider payouts.
- Email delivery: ZanGo's transactional email provider, used to send account, verification and booking notifications.
- Push notifications: browser and mobile push services used to deliver notifications you have enabled.
- AI features: third-party AI model providers used for the AI travel planning and assistant features. Information you submit in those features is processed to generate the response.
- Maps and measurement: mapping and map-tile providers used to display location-based features, and web analytics tooling (including Google Tag Manager) used to understand how the service is used.
ZanGo will update this Policy if it changes its service providers in a way that materially affects the processing of personal data.
10. International Data Transfers
Some ZanGo service providers may process or store personal data outside Tanzania. Where personal data is transferred across borders, ZanGo will apply the requirements and safeguards required by applicable data protection law.
The location of processing may vary depending on the infrastructure and service providers used by ZanGo.
11. Security
ZanGo uses technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, misuse, or destruction. These measures may include:
- authenticated access controls;
- role-based authorization;
- private storage for verification evidence;
- encrypted network communications;
- restricted administrative access;
- audit logging;
- security monitoring;
- secure credential management;
- server-side authorization;
- retention and deletion controls; and
- other appropriate technical and organizational safeguards.
No internet-based service can guarantee absolute security. ZanGo periodically reviews and improves its security controls as the service develops, and you are responsible for keeping your account credentials safe.
12. Access to Verification Evidence
Verification evidence is restricted information.
Access may be provided only to authorized ZanGo personnel or systems that require access for legitimate verification, safety, security, administrative, legal, or support purposes.
Other ZanGo users, including tourists and other providers, cannot access private verification documents merely because a provider has been verified.
ZanGo may record security events, including denied access attempts, to help protect verification information.
13. Data Retention
ZanGo retains personal data only for as long as necessary for the purposes described in this Policy, or as required by applicable law. Retention is applied by ZanGo's lifecycle systems rather than left to chance.
The following retention periods are currently applied automatically by ZanGo:
| Data | Retention applied |
|---|---|
| Pre-booking enquiry conversations | Expire automatically if the conversation is not converted into an active booking conversation |
| Read notifications | Removed after the retention period for that notification type (30 to 90 days); financial and verification-related notifications are retained |
| AI feature job records | 7 days while queued or processing; 30 days once completed or failed |
| Driver availability slots | Operational data, not a record: deleted automatically as soon as the slot is spent - once the booking it was held for is completed, or once the slot's date has passed. Slots that are still bookable (today or a future date) are kept, and a past slot is kept while its booking is still open |
| Booking and trip records | Retained for 1 to 2 years after the trip, then deleted. Completed trips, cancellations and refunds fall within this window. A booking is kept for longer where an open dispute or a strike recorded against it still requires it |
| Payment, refund and escrow records | Retained for at least 1 year, and then for as long as financial, accounting, reconciliation, refund, fraud-prevention or dispute requirements need them. These records are not deleted on the booking schedule |
| Verification evidence | Deleted as part of the account deletion process, unless retention is required for a lawful purpose |
| Account information | Deleted as part of the account deletion process, unless retention is required for a lawful purpose |
Where a period above applies to history you can browse, ZanGo shows the most recent 12 months by default and keeps older records available while their retention period runs. Hiding older history from the default view is not deletion: the records are still retained, and remain available for the purposes described in this Policy.
Other categories of personal data, such as booking and trip records, payment and credit records, reviews, reports and disputes, and administrative logs, are retained for the period necessary for the relevant purpose, for the resolution of disputes, and to meet legal, financial, accounting, and security requirements. Where a specific period is required by law, that period applies.
When personal data is no longer required, it is deleted or de-identified through ZanGo's lifecycle processes.
14. Account Deletion
You may request deletion of your ZanGo account.
When an account is deleted, ZanGo will initiate the applicable deletion process.
Some information may be retained after account deletion where retention is necessary for:
- legal obligations;
- fraud and security investigations;
- dispute resolution;
- financial or accounting records;
- enforcement of platform rules; or
- another lawful purpose.
Where information is retained, access and use will remain restricted to the applicable purpose. Certain technical security identifiers may also remain after account deletion where necessary for security and abuse-prevention purposes.
15. Device and Security Information
ZanGo may create a hashed or otherwise protected device identifier to support account security and abuse prevention. This information may be used to:
- detect excessive account creation;
- prevent attempts to bypass account restrictions;
- investigate suspicious activity; and
- protect the platform and its users.
The device identifier is not intended to function as a public profile identifier. Certain security information may be retained after account deletion where necessary for security and abuse prevention.
16. Cookies and Local Storage
ZanGo may use cookies, local storage, session storage, service workers, or similar browser technologies necessary for authentication, security, preferences, functionality, and service operation.
ZanGo also uses web measurement tooling, including Google Tag Manager, to understand how the service is used. If ZanGo introduces non-essential tracking technologies that require additional notice or consent, ZanGo will provide the applicable notice and controls.
17. Your Data Protection Rights
Subject to applicable law and any lawful limitations, you may have the right to:
- be informed about processing of your personal data;
- access your personal data;
- request correction of inaccurate information;
- request deletion or erasure;
- request restriction of certain processing;
- object to certain processing;
- withdraw consent where processing relies on consent;
- request portability where applicable;
- exercise applicable rights relating to automated decision-making;
- lodge a complaint with the relevant data protection authority; and
- exercise other rights provided by applicable law.
To make a privacy request, contact privacy@zango.tetaya.com . You can also delete your account yourself from Settings or through zango.tetaya.com/account-deletion .
18. Withdrawal of Consent
Where ZanGo processes personal data on the basis of consent, you may withdraw that consent through the method provided for the relevant processing activity or by contacting ZanGo.
Withdrawal of consent does not affect processing that occurred before withdrawal, and does not require ZanGo to delete information immediately where ZanGo has another lawful basis or a legal obligation to retain or process it.
Where withdrawal affects a service or a provider verification process, ZanGo will explain the relevant consequences where reasonably possible.
19. Marketplace Ranking and Recommendations
ZanGo may use information such as relevance, availability, service quality, reliability, completed trips, reviews, response behaviour, penalties, and other marketplace signals when determining how providers or services are displayed. These systems are intended to support marketplace discovery and distribution.
Ranking or visibility does not itself constitute a guarantee of provider quality or performance. ZanGo may modify its ranking and recommendation mechanisms as the marketplace develops.
20. Safety, Reports and Disputes
ZanGo may process information contained in safety reports, complaints, incident reports, disputes, and related communications to:
- investigate reported incidents;
- protect users;
- enforce platform rules;
- prevent fraud or abuse;
- resolve disputes; and
- comply with legal obligations.
21. Children
ZanGo is not intended for persons under 18. We do not knowingly provide accounts or marketplace services to persons who do not meet applicable age requirements. If we learn that an account was created by a person who does not meet the applicable age requirement, ZanGo may take appropriate action, including account restriction or deletion.
22. Changes to This Privacy Policy
ZanGo may update this Privacy Policy when its services, technology, processing activities, or legal requirements change. When material changes are made, ZanGo will provide an appropriate notice and update the effective date and policy version.
Where a change requires renewed consent, ZanGo will request that consent before relying on the new consent for the relevant processing activity.
23. Contact Us
For privacy questions, data protection requests, complaints, or other privacy matters:
Email: privacy@zango.tetaya.com
Location: Zanzibar, Tanzania
Please do not send passwords, payment credentials, or unnecessary sensitive information by email.