Privacy Policy

Deloe Platform Inc ("Deloe", "we", "us")

This policy explains how Deloe collects, uses, discloses, and protects personal information when you use the Deloe website (deloe.vercel.app) and the Deloe Driver mobile app (together, the "Services"). We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario law.

1. Accountability

Deloe is responsible for personal information under its control. Our Privacy Officer oversees compliance and can be reached at support@deloe.ca [LEGAL: confirm dedicated privacy contact and mailing address in London, Ontario].

2. What we collect

Customers (website):

• Contact details: name, email address, phone number
• Booking details: pickup and drop-off addresses, item descriptions, photos you choose to upload, preferred time windows
• Payment records [LEGAL: describe processor and what Deloe itself stores]
• Messages exchanged with your driver

Drivers (Deloe Driver app):

• Account details: name, email address, phone number, internal user ID
• Job activity: jobs viewed, accepted, and completed, and job status history
• Messages exchanged with customers

What the driver app does NOT collect: the app requests no device permissions — it does not access your location (no GPS tracking), camera, microphone, contacts, or photos, and it contains no advertising or analytics trackers.

Technical data: standard server logs (IP address, timestamps, request metadata) generated when the Services are used, retained briefly for security and troubleshooting.

3. Why we collect it (purposes)

• Matching customer bookings with available drivers and dispatching jobs
• Enabling driver–customer communication about a booking
• Operating driver accounts (vetting, provisioning, support) [LEGAL: confirm vetting-data scope — licence/insurance checks are handled off-app]
• Processing customer payments and settling driver payouts (handled outside the driver app)
• Providing customer support and resolving disputes
• Meeting legal, tax, and safety obligations

We do not sell personal information. We do not use it for third-party advertising or cross-app tracking.

4. Consent

We collect, use, and disclose personal information with your consent — given when you book a move, apply to drive, sign in to the driver app, or send messages through the Services. You may withdraw consent at any time, subject to legal or contractual restrictions; withdrawing consent may mean we cannot provide the Services.

5. Limiting collection, use, and retention

We collect only what the purposes above require. Personal information is retained only as long as needed for those purposes or as required by law [LEGAL: set concrete periods — suggested: account data for the life of the account + 7 years for financial records; chat logs 24 months; server logs 90 days], then securely deleted or anonymized.

6. Disclosure and service providers

We do not share personal information with third parties for their own purposes. We disclose it only:

• To the counterparty of your job (drivers see customer name, phone, and addresses for accepted jobs; customers see their driver's first name)
• To service providers who process data on our behalf under contract:
• Supabase — database, authentication, and storage hosting
• Vercel — website hosting
• [LEGAL: add payment processor, email/SMS provider, and any others in use at publication]
• When required by law, court order, or to protect safety

Cross-border transfers: our service providers may store or process data on servers outside Canada (including the United States). While outside Canada, data is subject to the laws of those jurisdictions. [LEGAL: confirm Supabase project region and tailor this clause.]

7. Safeguards

We protect personal information with safeguards appropriate to its sensitivity: encryption in transit (TLS/HTTPS for all connections), access controls and row-level security on our database, least-privilege staff access, and provisioned (no self-signup) driver accounts.

8. Accuracy

We keep personal information as accurate and complete as the purposes require. Contact us to correct your information; drivers can also contact support to update account details.

9. Access, correction, and deletion

You may request access to your personal information, ask how it has been used or disclosed, and challenge its accuracy. Drivers can request account deletion in the app (Profile → Delete Account) or at deloe.vercel.app/delete-account; anyone can email support@deloe.ca. We respond within 30 days as PIPEDA requires. We may retain information we are legally required to keep (e.g., financial records) and will tell you when that applies.

10. Children

The Services are not directed at children and drivers must be of legal working age. We do not knowingly collect personal information from minors.

11. Changes to this policy

We may update this policy from time to time; the current version is always at deloe.vercel.app/privacy with its "Last updated" date. Material changes will be communicated through the Services.

12. Complaints and challenging compliance

Contact our Privacy Officer first at support@deloe.ca. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca, 1-800-282-1376).