DrivePad Privacy Policy

Effective: 2025-01-01

This Privacy Policy explains how DrivePad collects, uses, shares, and protects personal information when you use our mobile apps, websites, and related services (the “Services”). By using the Services, you agree to this Policy. If you do not agree, do not use the Services.

1) Information We Collect
- Account: name, email, password hash, role (driver/owner), verification status.
- Identity & Verification: documents and images you upload for owner verification (e.g., bill/lease/mortgage/tax/utility) and driveway photos you provide.
- Listings & Bookings: driveway address and details, booking time windows, prices, payouts, reviews, messages, incident reports.
- Payments: we integrate with Stripe for payment processing and owner payouts. Stripe collects payment method data; we store references (IDs, metadata).
- Device & Usage: app version, device model, IP address, logs, crash data, basic analytics (e.g., page views, taps, errors) and coarse location when you request “near me”.
- Location: when you search by “near me” or map navigation, we use device location to center the map. We do not track in the background.

2) How We Use Information
- Provide and improve the Services, including listings, search, booking, messaging, payouts, and support.
- Identity verification, fraud prevention, and safety (e.g., incident response).
- Payment processing via Stripe, chargeback handling, and accounting.
- Communications: account confirmations, booking updates, support messages, and legal/policy updates.
- Compliance with law, enforcement requests, dispute resolution, and to protect DrivePad and users.

3) Legal Bases (EEA/UK)
- Contract: to provide the Services you request.
- Legitimate Interests: to secure and improve the Services and prevent fraud.
- Consent: where required (e.g., marketing, certain location uses).
- Legal Obligation: recordkeeping and responding to lawful requests.

4) Sharing
- Payment Processors: Stripe for payments and owner payouts.
- Service Providers: cloud hosting, analytics, email delivery, and customer support tools under confidentiality obligations.
- Owners/Drivers: limited sharing to fulfill bookings (e.g., masked contact info, booking details).
- Legal/Safety: to comply with laws, enforce terms, protect rights, or investigate suspected violations.
- Business Transfers: in mergers, acquisitions, or asset sales, your information may be transferred subject to this Policy.

5) Data Retention
- Accounts: retained while active; deleted upon request subject to legal requirements.
- Payments/Accounting: retained per law (e.g., 7 years or local equivalent).
- Verification Docs: retained for the verification lifecycle, then minimized or deleted. We store summaries and decisions.
- Logs/Analytics: retained for a limited period for debugging and service improvement.

6) Your Rights
- Access, correction, deletion, and portability (where applicable).
- Objection/restriction for certain processing.
- Withdraw consent at any time where consent is the legal basis.
- Residents of California (CPRA) and the EEA/UK (GDPR) have additional rights. To exercise rights, contact us at drivepad.app@gmail.com.

7) Security
- We use administrative, technical, and physical safeguards to protect information. No system is 100% secure. Report concerns to drivepad.app@gmail.com.

8) Children
- The Services are not directed to children under 16. We do not knowingly collect data from children under 13. If you believe a child has provided data, contact us to remove it.

9) International Transfers
- We may process and store information in the United States and other countries where we or our providers operate, subject to appropriate safeguards.

10) Changes
- We may update this Policy. Material changes will be notified in the app or by email with an effective date.

11) Contact
- drivepad.app@gmail.com

Supplemental Disclosures (California)
- We collect identifiers (name, email), commercial information (bookings, payouts), internet activity (logs, app interactions), geolocation (when requested), and in limited cases verification imagery. We do not sell personal information. We do not share for cross-context behavioral advertising. We honor deletion, access, and correction requests subject to exceptions.