Privacy policy

The controller is BUSINESS FINANCIAL GROUP SRL, a company registered in Romania, with its registered office at T 110 P2915 Odobești, Vrancea, Romania, unique registration code (CUI) RO52016980, Trade Register number J2025044895003, trading as Yero.

Yero is a platform that connects people sending parcels with carriers who are already making the trip: individuals driving their own car (“Lite” carriers) and transport companies. For the data described here, Yero is the controller within the meaning of Article 4(7) GDPR, except as explained in sections 5 and 13, where a partner decides on the data itself.

We have designated a data protection officer (DPO), in line with Article 37 GDPR and Article 4 of Romanian Law no. 190/2018. For any question or request about your data, contact them at confidentialitate@yero.ro.

• Senders, who send parcels through the app;
• Recipients, whose details the sender gives us so we can deliver;
• Lite carriers, individuals who carry parcels in their own car;
• Transport companies and their staff: director, managers, dispatchers and drivers;
• Visitors to the websites, including those who join a waiting list or receive an offer for companies;
• Anyone who contacts us by email, phone, WhatsApp or social media.

3.1 Your account

• Name, email address, phone number, password (stored only in hashed form, which we cannot read) and, optionally, a profile photo.
• If you sign in with Google, Google gives us the name, email address and profile photo of your Google account. We do not receive your Google password.
• Your role on the platform and your account settings, including notification preferences.

3.2 Senders and recipients

• Order details: the parcel’s description and category, weight, dimensions, number of items, packaging, declared value, whether it is fragile or needs refrigeration, the parcel photo, pickup and delivery addresses and time windows, budget, deadlines and, for recurring orders, how often they repeat.
• Recipient details: name, phone, address and, for deliveries to a business, its name, tax code, address and opening hours.
• Billing details: name or company name, tax code, address, phone and email.
• The declaration you accept about the parcel’s contents when placing an order.

3.3 Lite carriers

• Full name, phone, profile photo.
• Driving licence (photo, category and expiry date), a bank statement and, if the car is not yours, the owner’s letter of authorisation.
• Vehicle: make, model, colour, registration number, type, capacity, consumption, fuel type, photo and documents (registration certificate, roadworthiness test, insurance).
• The result of your identity verification (section 5), your payout account status and your guarantee fund movements (contributions, deductions, refunds).

3.4 Transport companies and their staff

• The company: name, tax code, NACE code, registered office, cities of operation, email, phone, licences (Community licence, postal services licence), insurance, registration certificate, bank statement, rates and pricing rules.
• Director, managers and dispatchers: name, email, phone, city, account permissions and, where applicable, proof of directorship, a letter of authorisation or an employment certificate.
• Drivers: name, phone, photo, city, driving licence (category, expiry, photo), employment contract or certificate, CPC certificate and tachograph card, with their expiry dates.
• The company’s vehicles and trailers, with their documents.

Some documents (for example, a Romanian driving licence) show the personal numeric code (CNP). We do not extract the CNP or use it separately: we keep it only as part of the document, with restricted access, limited retention periods and under the supervision of the data protection officer, the safeguards required by Article 4 of Romanian Law no. 190/2018.

3.5 Trips and deliveries

• The route, stops, departure times, the order status and, for each checkpoint the carrier confirms (arrival at pickup, pickup, arrival in the destination city, delivery), the time and the phone’s location at that moment (section 7).
• Trip evidence: the pickup photo, the delivery photo and signature, the names of those who sign, and the transport documents generated by the app (section 6).
• The vehicle checklist at departure, incidents reported by the driver and trip costs entered by the driver, with photographed receipts.
• Ratings (score and comment) left after delivery.

3.6 Payments

• Amounts paid, commissions, VAT, refunds, transfers to carriers and the identifiers of these operations at the payment processor.
• You enter your card details directly with Stripe; Yero never sees or stores your full card number.

3.7 Complaints and communications

• Complaints and disputes: the category, description, amount claimed, uploaded evidence (photos, documents, notes), the history of every step and the decision (section 8).
• The messages you send us on any channel and our replies.

3.8 Technical data

• Device and operating system type, an identifier for push notifications, app crash reports, IP address and security logs.
• On the websites: the data described in section 12 and in the cookie policy (in Romanian).

3.9 Device permissions

The app asks for access to your camera and photo library only so you can photograph or upload the parcel, documents or evidence, for notifications only to tell you about your orders, and, for carriers, for location only to confirm the trip’s checkpoints. You can withdraw these permissions at any time in your phone’s settings; some features will stop working without them.

• Your account and the service (creating the account, placing and matching orders, payment and its release to the carrier, tracking, transport documents, support): performance of our contract with you, Article 6(1)(b) GDPR.
• Verifying carriers and their documents: performance of the contract and our legitimate interest in keeping only real, authorised carriers on the platform, Article 6(1)(b) and (f); for biometric data, your explicit consent, Article 9(2)(a) (section 5).
• The carrier’s location at checkpoints, as proof of arrival, pickup and delivery: performance of the contract and our legitimate interest in resolving complaints, Article 6(1)(b) and (f).
• Data about a company’s staff, entered by the company: the legitimate interest of Yero and of the company in knowing who operates on its behalf, Article 6(1)(f).
• Recipient data: the legitimate interest of the sender and of Yero in delivering the parcel, Article 6(1)(f).
• Invoicing, accounting and tax obligations, including reporting the income carriers earn through the platform to the Romanian tax authority (ANAF) where the law requires it (Directive (EU) 2021/514, “DAC7”, as transposed into the Romanian Fiscal Procedure Code): legal obligation, Article 6(1)(c).
• Complaints, disputes, fraud prevention and the defence of legal claims: legitimate interest, Article 6(1)(f), and, where the contract requires it, performance of the contract.
• Platform security and crash reports: legitimate interest, Article 6(1)(f).
• Messages about your orders (confirmations, status changes, refunds): performance of the contract.
• Newsletter, news and the waiting list: consent, Article 6(1)(a). You can unsubscribe from every message.
• Statistics and analysis of how the website is used: consent, given through the cookie banner (Romanian Law no. 506/2004).
• Replies to authorities: legal obligation, Article 6(1)(c).

Where we rely on legitimate interest, we have weighed that interest against your rights and process only what is necessary. You can ask us for the details of that assessment and you can object at any time (section 16).

Everyone who carries parcels through Yero verifies their identity in the app. A carrier account cannot be activated without it. Verification is done by one of the two providers below, depending on your role.

5.1 Lite carriers and company directors: Stripe

Those who receive money through the platform open a payout account with Stripe when they register. Stripe verifies their identity (an identity document and, where needed, a selfie), bank details and other information required by anti-money-laundering law. For this data Stripe is an independent controller and processes it under its own privacy policy. Yero receives from Stripe only the verification status (“unverified”, “pending”, “verified”), whether more information is due and by when, and whether payouts to you are enabled.

5.2 Drivers, managers and dispatchers: Didit

A company’s staff verify their identity through Didit, which acts as Yero’s processor.

• What is processed: a photo of your identity document and the data read from it, a selfie used to confirm you are a real person and to compare your face with the photo on the document, and your device’s IP address. The face comparison uses biometric data, a special category of data.
• Legal basis: your explicit consent, Article 9(2)(a) GDPR, for the biometric data, asked for before the check; legitimate interest, Article 6(1)(f), for the rest. You can withdraw your consent at any time, without affecting the check already carried out; without verification, however, the carrier account can no longer be used.
• What Yero keeps: only the verification result and a summary of its steps. We do not keep the photos, the selfie, the document number or its machine-readable zone. The full report stays with Didit, which keeps it under the data processing agreement it has with us.

An automatic rejection is not a final decision: you can retry the verification or ask for a person to review your case (section 9). The Yero team also reviews every registration before activating it.

Evidence is the most important protection for both sides: it shows that a parcel was picked up intact and delivered to the right person. That is why we collect it on every trip:

• The pickup photo, taken by the carrier, showing the parcel’s condition;
• The signatures of the sender, the carrier and the recipient, drawn on screen, with each signer’s name and time;
• The delivery photo and any notes;
• The transport documents generated by the app, which contain the sender’s, recipient’s and carrier’s details, the registration number and a description of the goods.

These files are kept in private storage: only the parties to the order, the carrier’s company and the Yero support and disputes team can see them. The legal basis is performance of the contract and our legitimate interest in proving delivery and resolving complaints; transport documents that support accounting records are also kept to comply with a legal obligation.

Please make sure photos show the parcel, not people, faces or the inside of homes. If a photo accidentally captures another person, we use it only as proof of delivery and you can ask us to blur it.

• You enter the pickup and delivery addresses. We convert them into coordinates (through LocationIQ) to work out the distance, price and route and to show the order map.
• When the carrier confirms a trip checkpoint (arrival at the pickup point, pickup, arrival in the destination city, delivery), the app records their phone’s GPS location at that moment, with the permission given in the operating system. This proves, for example, that the carrier arrived at the agreed time.
• We do not track location continuously or in the background: it is read only at the moment of confirmation. We do not collect senders’ or recipients’ location at all.
• The sender sees the parcel’s progress, not the carrier’s real-time position. Checkpoint locations are kept with the rest of the order’s evidence (section 15).

When you open a complaint (for example, a parcel not delivered, damaged, delivered late, or a payment dispute), or when a carrier reports a problem at pickup, we process:

• the order and trip data, the evidence in section 6, the related payments and the communications with the parties;
• the evidence each party uploads and the description of the problem;
• every step of the review: who took it, when, what was decided and why, including temporarily holding payments to the carrier while the review is ongoing;
• each user’s dispute history (for example, the number of confirmed disputes), used for the decisions in section 9.

Small compensation amounts may be paid from the guarantee fund built from Lite carriers’ contributions; we keep a record of every contribution, deduction and refund.

Depending on the case, we may share the strictly necessary data with: the other party to the order (for example, the proof of delivery); the payment processor and the card issuer, in the case of a chargeback; the transport company’s cargo insurer; the Romanian Road Authority (ARR), when a transport company seriously breaches its obligations; the police and the public prosecutor, through a criminal complaint, in the case of theft; lawyers, bailiffs and courts, to recover a loss. In the case of a suspected theft, we tell the other senders whose parcels are with the same carrier that their delivery is affected, without telling them more than necessary.

The legal basis is performance of the contract and our legitimate interest in resolving complaints, preventing fraud and defending our rights, Article 6(1)(b) and (f), and, where applicable, a legal obligation. Data relating to criminal offences is processed only within the limits of Article 10 GDPR, for the establishment, exercise or defence of legal claims.

Most decisions about your account are taken by a person. A few rules, however, apply automatically, because senders’ safety depends on them:

• a carrier with a rating below 3.5 after at least 10 deliveries is suspended automatically;
• the number of confirmed disputes and repeated problems (for example, missing pickup evidence) within a 90-day window may automatically trigger a review or a temporary suspension;
• a suspected theft leads to the immediate suspension of the account and holding of payments until it is cleared up;
• an identity verification may be rejected automatically by the verification provider (section 5).

These decisions are necessary for performing the contract, Article 22(2)(a) GDPR. A permanent exclusion from the platform and the forfeiture of any amount are always decided by a person, after reviewing the evidence. For any automated decision you have the right to obtain human intervention, to express your point of view and to contest the decision, by writing to confidentialitate@yero.ro. A suspension based on a dispute in which evidence was missing through the platform’s fault is reversed on appeal.

The suggested price of a trip is calculated from distance, weight, volume and options, not from your personal data.

• For each trip, senders see the carrier’s or company’s name, profile photo, rating and vehicle type and, once the order is accepted, the details needed for the handover: the driver’s name, phone number and registration number.
• Carriers see the orders available on their route (the parcel, its photo, the cities and time windows) and, once they accept, the addresses, names and phone numbers of the sender and the recipient.
• Ratings: the score counts towards the carrier’s public rating. Abusive or discriminatory comments may be removed, while the score stays.
• Within a company, the director and managers see the staff’s and the company’s trip data, within the permissions set in the account.

You may use data about other people that you receive through Yero only for the order in question, not for any other purpose.

• Push notifications and emails about your orders are part of the service. You can adjust them in the app’s notification settings and in your phone’s settings.
• We send promotional messages and the newsletter only if you have agreed to receive them. Every message has an unsubscribe link, and unsubscribing costs nothing.
• If you write to us on WhatsApp or a social network, your message also passes through that platform’s services, under its own privacy policy.

• The waiting list and the launch list for companies: your email address, account type (sender, carrier, company) and the page you signed up from. Legal basis: consent.
• Searching for a route: the cities and countries searched and, if you choose to leave it so we can tell you when a trip appears, your email address. Legal basis: consent for the email, legitimate interest for statistics on the routes searched.
• Offers sent to companies: each personal offer link is tied to the company’s name. We record when it is opened, when it expires and, if the company accepts, the email address it accepted with. Legal basis: our legitimate interest in managing commercial offers and taking steps prior to entering into a contract.
• The demo account for companies: the email address we send the access code to and the last sign-in.
• Statistics: only after you click “Acceptă tot” (“Accept all”) in the cookie banner do we use Vercel Web Analytics, Speed Insights and Microsoft Clarity. Details, durations and how to withdraw consent are in the cookie policy (in Romanian).
• Server logs: the IP address, browser and pages requested, kept by the hosting provider for security and troubleshooting.

We do not sell or rent your data to anyone. We share it only as far as necessary, with:

• The other parties to the order: sender, carrier, the carrier’s company and recipient (section 10).
• Processors, who process data only on our instructions, under a contract in line with Article 28 GDPR:
  • Supabase: database, authentication and file storage (EU, Frankfurt);
  • Vercel: website hosting and, with consent, statistics;
  • Didit: identity verification for companies’ staff;
  • Google Firebase: push notifications (Cloud Messaging) and app crash reports (Crashlytics);
  • LocationIQ: address completion, coordinates, distances and maps;
  • Resend: sending emails;
  • Microsoft: Clarity, on the website, only with your consent;
  • accounting, IT and advisory providers, when needed.
• Independent controllers, who decide on the data they receive themselves: Stripe (payments, carriers’ payout accounts and their identity verification); Google, when you sign in with your Google account; the transport company, for its own staff; insurers, banks, lawyers, bailiffs and auditors, where applicable.
• Authorities: the tax authority, the police, the public prosecutor, the courts, the Romanian Road Authority and other authorities, when the law requires it or to defend a legal claim (section 8).
• A potential buyer or successor of the business, in the event of a merger, acquisition or sale of assets, with the same safeguards as in this policy.

The app’s database and files are hosted in the European Union. Some providers (for example Stripe, Google, Microsoft, Vercel, Resend or LocationIQ) may access or process data outside the European Economic Area, in particular in the United States. In those cases the transfer takes place only on the basis of an adequacy decision of the European Commission (including the EU-U.S. Data Privacy Framework, for certified providers) or of the standard contractual clauses adopted by the Commission, with supplementary measures where needed. You can ask us for a copy of these safeguards.

We keep data only as long as needed for the purpose we collected it for, then delete or anonymise it. The specific periods:

• Your account: while it is active. Once it is closed, we delete or anonymise the data within 30 days at most, except for the data below, which we must keep for longer.
• Orders and trip evidence (addresses, photos, signatures, checkpoint locations, incidents): 3 years from delivery, the period within which a claim can be brought under the transport contract (the Romanian Civil Code and, for international transport, Article 32 of the CMR Convention). After that we keep only the cities, dates and amounts, with no personal data.
• Financial and accounting documents (invoices, payments, refunds, transport documents and other supporting documents): 5 years from 1 July of the year following the end of the financial year in which they were drawn up, under Article 25 of Romanian Accounting Law no. 82/1991.
• Complaints and disputes: 3 years from the case being closed; if it goes to court, until a final judgment and its enforcement.
• Carriers’ documents (licence, vehicle documents, company licences, staff documents): for as long as we work together and 3 years after the account is closed. When you upload a new version of a document, it replaces the old one.
• The identity verification result: for as long as the carrier account exists and 3 years after. The full report stays with Didit or Stripe, under our agreement or their policy respectively.
• A permanent exclusion from the platform: we keep the name, contact details and reason for the exclusion for as long as the exclusion applies, to prevent re-registration, and review whether this is still necessary at least every 3 years.
• Ratings: for as long as the rated account exists. If the person who left the rating closes their account, the rating stays without their name.
• Trip costs and receipts uploaded by the driver: 3 years.
• Messages to support: 3 years from the last message.
• The waiting list: until launch and at most 12 months after, or until you unsubscribe.
• Route searches with an email address: 12 months, or until you ask us to delete them.
• Offer link events: for as long as our business relationship with the company lasts and 3 years after.
• The push notification identifier: until you delete your account, the system replaces it or it goes unused for 270 days.
• Crash reports: 90 days.
• Security logs: 12 months.

These periods are extended only as far as necessary while a dispute, an investigation or a request from an authority is ongoing.

Under Articles 15–22 GDPR, you have the right:

• to know whether we process data about you and to receive a copy of it (access);
• to correct inaccurate or incomplete data (rectification);
• to have your data erased (the “right to be forgotten”), except data the law requires us to keep or that we need for a dispute;
• to restrict processing, for example while we look into a challenge;
• to receive the data you gave us in a structured, machine-readable format and to have it sent to another controller (portability);
• to object at any time to processing based on legitimate interest, on grounds relating to your particular situation, and at any time, without giving a reason, to processing for direct marketing;
• not to be subject to a decision based solely on automated processing (section 9);
• to withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.

In the app, under Settings → Confidențialitate & GDPR, you can download all your account data at once (a JSON file) and close your account. The account closes immediately and your profile data is deleted within 30 days at most; what must be kept (section 15) stays, no longer linked to an active account. If you have a parcel on its way, a payment in progress, an open complaint, or you are the director of an active company, the app tells you what needs to be finished first. You can correct your profile details directly in the app.

For any other right, or if you have no account, write to confidentialitate@yero.ro from the email address linked to your account. You can leave the waiting list and route alerts with the unsubscribe link in any email we send you. We reply free of charge within one month of receiving your request; if the request is complex or there are many requests, this may be extended by two more months, and we will tell you so within the first month. If we have reasonable doubts about your identity, we may ask for additional information to confirm it.

If you are not satisfied with our reply, you can lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28–30, sector 1, postal code 010336, Bucharest, Romania, dataprotection.ro, or with the supervisory authority of the EU country where you live or work. You can also go to court.

The data marked as required in the app is needed to enter into and perform the contract, and some of it (billing data, carrier verification) is required by law. Without it we cannot create your account, place or accept an order, or activate a carrier account. You can leave data marked optional (for example, a profile photo) blank with no consequence.

When you give us someone else’s data, for example a parcel recipient’s details or those of your company’s drivers and employees, you confirm that you are entitled to give it to us and you tell those people about this policy. Recipients and employees who do not have a Yero account have the same rights as any user and can contact us directly.

You must be at least 18 to open a Yero account. We do not knowingly collect data about minors, except when a minor is the recipient of a parcel, in which case we process only the name, address and phone number needed for delivery. If you learn that a minor has opened an account, write to us and we will close it.

We use encryption of data in transit, row-level access rules in the database so that each user sees only their own data, private storage for documents and evidence, two-factor authentication and an action log for the internal team, backups, and access granted strictly by role. No system is perfectly secure, but we treat data protection as a basic requirement.

If a personal data breach occurs that poses a risk to you, we notify ANSPDCP within 72 hours of becoming aware of it and, if the risk is high, we also tell you without undue delay, in line with Articles 33 and 34 GDPR.

We update this policy when the way we process data changes. The new version is published on this page, with the date of the update. If a change affects you significantly, we will tell you in the app or by email before it takes effect, and if a new processing needs your consent, we will ask for it.

BUSINESS FINANCIAL GROUP SRL · T 110 P2915 Odobești, Vrancea, Romania · CUI RO52016980 · J2025044895003
Data protection officer: confidentialitate@yero.ro
Other questions: contact@yero.ro