Privacy Policy

Last updated: March 23, 2026

1 Introduction

Welcome to TIRwork. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our mobile application, website, and related services (collectively, the "Platform"). By accessing or using TIRwork, you acknowledge that you have read and understood this policy. We encourage you to read it carefully so that you are fully informed about how your data is handled.

2 Data Controller

The data controller responsible for your personal data is:

TIRwork Srl
Milan, Italy
Email: info@tirwork.com

If you have any questions or concerns about how we process your personal data, or if you wish to exercise any of your rights under applicable data protection laws, please contact us at the address above.

3 What Data We Collect

We collect and process the following categories of personal data:

  • Account Information: Full name, email address, phone number, password (encrypted), preferred language, and country of residence.
  • Profile Data: For drivers — driving licenses held (B, C, CE, D, DE), CQC certifications, ADR qualifications, tachograph card details, years of experience, experience type, preferred work zone, availability status, languages spoken, biography, and uploaded CV. For companies — company name, VAT number, company size, description, website, and logo.
  • Usage Data: Information about how you interact with the Platform, including pages visited, features used, search queries, job applications submitted, messages sent, and timestamps of activity.
  • Device Information: Device type, operating system, browser type, IP address, unique device identifiers, and push notification tokens.
  • Location Data: Approximate geographic location based on your IP address or, with your consent, more precise location data to enable zone-based job matching.
  • Payment Data: For companies with paid subscriptions, payment information is processed securely by our payment provider Stripe. We do not store full credit card numbers on our servers.

4 How We Use Your Data

We use your personal data for the following purposes:

  • Providing Our Services: To create and manage your account, display your profile to relevant parties, and enable the core functionality of the Platform.
  • AI-Powered Matching: To compute compatibility scores between driver profiles and job listings using our proprietary matching algorithm. This involves automated processing of your qualifications, experience, and preferences to rank job opportunities or candidates.
  • Communications: To send you notifications about new job matches, application status updates, messages from other users, and important service announcements.
  • Improving the Platform: To analyze usage patterns, diagnose technical issues, and enhance the user experience through aggregated and anonymized analytics.
  • Safety and Compliance: To detect and prevent fraud, enforce our Terms of Service, and comply with applicable legal obligations.

5 Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:

  • Consent (Art. 6(1)(a) GDPR): Where you have given explicit consent, for example when enabling location services, receiving marketing communications, or consenting to the use of non-essential cookies.
  • Contract Performance (Art. 6(1)(b) GDPR): Processing necessary to fulfill our contractual obligations to you, including providing access to the Platform, enabling job applications, facilitating messaging between drivers and companies, and processing subscription payments.
  • Legitimate Interests (Art. 6(1)(f) GDPR): Processing necessary for our legitimate business interests, such as improving the Platform, ensuring security, preventing fraud, and conducting analytics — provided these interests are not overridden by your fundamental rights and freedoms.
  • Legal Obligation (Art. 6(1)(c) GDPR): Processing necessary to comply with applicable laws and regulations, such as tax and accounting requirements.

6 Data Sharing

We may share your personal data with the following categories of recipients:

  • Service Providers: We use trusted third-party providers to operate the Platform, including Supabase (database and authentication hosting, EU region), Stripe (payment processing), Firebase (push notifications), OpenAI (AI-powered matching and chatbot features), and PostHog (product analytics, EU region). These providers process data on our behalf and are bound by data processing agreements.
  • Other Users: When you apply for a job, your driver profile and application details are shared with the relevant company. When a company reviews an application, limited company information is shared with the driver. Chat messages are visible only to the two parties involved.
  • Legal Requirements: We may disclose your data if required by law, court order, or governmental authority, or if necessary to protect our rights, property, or safety.

We do not sell your personal data to third parties. We do not share your data with advertisers or data brokers.

7 International Data Transfers

Your personal data is primarily stored and processed within the European Union. Our database is hosted on Supabase's EU region servers, ensuring your data remains within the EU. In cases where data may be transferred outside the EU (for example, when using certain third-party services), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or adequacy decisions, to protect your data in accordance with GDPR requirements.

8 Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Active Accounts: Your data is retained for as long as your account remains active.
  • Deleted Accounts: Upon account deletion, your personal data will be erased or anonymized within 30 days, except where retention is required by law (e.g., financial records retained for up to 10 years for tax purposes).
  • Inactive Accounts: Accounts that have been inactive for more than 24 months may be flagged for deletion. You will be notified by email before any deletion occurs.
  • Analytics Data: Aggregated and anonymized usage data may be retained indefinitely for statistical purposes.

9 Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights regarding your personal data:

  • Right of Access (Art. 15): You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification (Art. 16): You have the right to request correction of inaccurate or incomplete personal data.
  • Right to Erasure (Art. 17): You have the right to request deletion of your personal data, subject to certain legal exceptions.
  • Right to Data Portability (Art. 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to Restriction (Art. 18): You have the right to request that we restrict the processing of your personal data under certain circumstances.
  • Right to Object (Art. 21): You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
  • Right Regarding Automated Decisions (Art. 22): You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects. Our AI matching provides recommendations but does not make binding decisions.

To exercise any of these rights, please contact us at info@tirwork.com. We will respond to your request within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or the supervisory authority of your country of residence.

10 Cookies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and personalize content. Essential cookies are necessary for the Platform to function and cannot be disabled. Non-essential cookies (such as analytics and preference cookies) are only placed with your consent. For detailed information about the cookies we use and how to manage your preferences, please refer to our Cookie Policy.

11 Children's Privacy

TIRwork is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us at info@tirwork.com, and we will take steps to delete such data promptly.

12 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Platform features. When we make material changes, we will notify you by posting the updated policy on this page with a revised "Last updated" date and, where appropriate, by sending you a notification through the Platform or by email. We encourage you to review this policy periodically to stay informed about how we protect your data.

13 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please do not hesitate to contact us:

TIRwork Srl
Milan, Italy
Email: info@tirwork.com

You also have the right to lodge a complaint with the Italian Data Protection Authority:
Garante per la protezione dei dati personali
Website: www.garanteprivacy.it