Privacy Policy

This Privacy Policy explains what personal information ZypRoute ("ZypRoute", "we", "us") collects when you use our website at https://zyproute.com and the ZypRoute mobile apps (together, the "Service"), how we use and share it, how long we keep it, and the choices and rights you have. By using the Service you agree to this policy. If you do not agree, please do not use the Service.

1. Information we collect

Account information:

• Your name, email address, phone number and password. Passwords are stored only as a one-way hash, never in readable form.
• Your role (customer, driver or administrator) and the date and time you created your account.
• The version of our Terms you accepted, when you accepted it and the IP address you used.

Delivery (order) information:

• Pickup and drop-off addresses, the contact names and phone numbers for each address, and any delivery instructions.
• Package details such as size, weight, contents description, declared value and whether a permit is needed.
• Quotes, prices, tolls, order status and a timeline of each order's events.

Driver information (for people who apply to drive):

• Driver's license number and state, vehicle make, model, year and plate, and insurance company, policy number and expiry date.
• Photos or files you upload, such as your license, insurance card and vehicle.
• The email address you choose for payouts, your earnings and payouts, and ratings from customers.

Signatures and proof of delivery:

• At pickup and at drop-off we capture an on-screen signature and the typed name of the person signing, the date and time, and the location where the signature was taken. These are added to the order's waybill (a PDF proof-of-delivery document).

Location information:

• Drivers: while a driver is online (on duty) in the driver app, the app sends the device's location to us so we can offer jobs to the nearest driver and show progress on deliveries. We keep the driver's most recent location only; we do not keep a history of every point a driver has driven. Location is not collected while the driver is offline.
• Customers: a customer can see the assigned driver's live location only while their package is on board, from the moment it is picked up and signed for until it is delivered. Live tracking ends automatically at drop-off.
• We do not collect the location of customers' devices. We use the addresses you enter to calculate distances and prices.

Payment information:

• Payments are processed by PayPal and Square. You enter your card or PayPal details directly with them; ZypRoute never receives or stores your full card number or security code. We keep the payment provider's transaction and refund references, the amounts and the payment status.

Technical information:

• When you use the Service our servers receive basic technical information such as your IP address, browser or app version and the pages or features requested. We use it to operate, secure and troubleshoot the Service and to prevent abuse (for example, by limiting repeated failed sign-in attempts).
• If you allow notifications in the driver app, we store a push-notification token for your device.

2. How we use your information

• To create and manage your account and to verify and approve drivers.
• To quote, price, dispatch, track and complete deliveries, including offering jobs to nearby drivers and sharing the information needed to complete a delivery between the customer, the driver and the people at the pickup and drop-off.
• To take payments, issue refunds, pay drivers and keep accurate financial records.
• To create waybills and proof of delivery.
• To provide customer support, handle claims and disputes, and communicate with you about your orders and account.
• To keep the Service safe, prevent fraud and abuse, enforce our Terms and comply with the law.

3. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only as follows:

• Between customers and drivers, as needed to complete a delivery (for example, the driver sees the addresses, contact names and phone numbers for the job; the customer sees the driver's name, vehicle and live location during the delivery).
• With service providers that help us run the Service, under obligations to protect it, including:
• PayPal and Square, to process payments and refunds.
• The United States Postal Service (USPS) address and ZIP code services, to check and standardize addresses.
• Mapping and routing providers, such as Google Maps Platform, OpenStreetMap and related services, to find addresses, calculate distances and tolls and display maps. Map images are loaded from these providers by your browser or app.
• Our web hosting provider, which stores the Service's data on our behalf.
• Expo, Apple and Google, to deliver push notifications to drivers' phones.
• When required by law, such as to respond to a subpoena or court order, or when we believe in good faith that disclosure is necessary to protect the rights, property or safety of ZypRoute, our users or others.
• In connection with a merger, acquisition or sale of all or part of our business, in which case this policy will continue to apply to the information transferred.

4. Cookies and local storage

The ZypRoute website does not use advertising or analytics cookies. When you sign in, your browser stores a sign-in token and basic account details in its local storage so you stay signed in; they are removed when you sign out. The mobile apps store the same information on your device. PayPal and Square may set their own cookies when you pay through them; their privacy policies apply to those.

5. How long we keep information

• Waybills and signatures: kept for exactly one year after the delivery is completed and then permanently deleted. This happens automatically.
• Financial records (order prices, payments, refunds, commissions, driver payouts and our accounting ledger) are kept longer, for as long as we need them for tax, accounting and legal purposes, which is typically at least seven years.
• Account and order information is kept while your account is open and afterwards for as long as needed for the purposes above, to resolve disputes, and to comply with the law.
• Driver documents are kept while the driver account is active and afterwards only as long as needed for legal, insurance or safety purposes.

6. Security

We use reasonable administrative, technical and physical safeguards to protect your information, including encrypted (HTTPS) connections, hashed passwords, encrypted storage of payment-provider keys, access limited to authorized staff, and protection against repeated sign-in attempts. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please keep your password private and tell us right away if you think your account has been accessed without permission.

7. Your choices and privacy rights

You can view and update much of your account information by signing in. You can also contact us to:

• Ask for a copy of the personal information we hold about you.
• Ask us to correct information that is inaccurate.
• Ask us to delete your account and personal information.

Residents of some U.S. states, including California (under the California Consumer Privacy Act as amended by the California Privacy Rights Act) and other states with consumer privacy laws, may have additional rights, such as the right to know what personal information we collect, use and disclose; to access, correct or delete it; to opt out of the sale or sharing of personal information or of targeted advertising (we do not sell or share personal information for those purposes); and to not be discriminated against for exercising these rights. To use any of these rights, contact us as described below. We will verify your request (for example, by asking you to confirm details of your account) and respond within the time the law requires. You may use an authorized agent where the law allows. If we deny your request, you may appeal by replying to our decision.

Some information cannot be deleted right away. For example, we must keep financial records for tax and accounting purposes, and we keep waybills until their one-year retention period ends. When you delete your account, we delete or de-identify the rest of your personal information unless the law requires or permits us to keep it, and we will tell you what we have to keep and why.

8. Children

The Service is meant for adults. You must be at least 18 years old to create an account, and drivers must meet the age and licensing requirements for their vehicle. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, please contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. When we do, we will post the new version on this page with a new "last updated" date, and if the changes are significant we will tell you through the Service or by other means before they take effect. Using the Service after an update means you accept the updated policy.

10. Contact us

For questions about this policy, to make a privacy request or to ask us to delete your account, contact us through the Contact page on our website.