Privacy Policy

1.1 Account Information — Name, email address, phone number, password (encrypted).

1.2 Pro Verification Data — Photo ID, CSLB license numbers, Google Business URLs, selfies (for identity verification only), DOT/MC numbers, insurance certificates, driver certifications, driver's license numbers, vehicle year/mileage, vehicle inspection photos, safety equipment acknowledgments.

1.3 Identity Verification (Stripe Identity) — For fraud prevention, users making payments or posting loads may be required to verify their identity. This involves: a photo of a government-issued ID (driver's license, passport, or state ID), a live selfie for facial comparison, and extracted data (name, date of birth, ID number, expiration date). This data is processed and stored by Stripe, Inc. CloudeFlip receives only a pass/fail verification result and the verified name. Biometric facial data is used solely for identity matching and is handled per Stripe's privacy policy.

1.4 Listing & Project Data — Addresses, descriptions, photos, pricing, contact preferences, cargo details, delivery instructions.

1.5 Payment Information — Processed and stored by Stripe, Inc. We do not store credit card numbers on our servers. 3D Secure authentication records (confirming cardholder verified the transaction) are retained by Stripe for dispute evidence.

1.6 Location Data — For delivery drivers: real-time GPS coordinates collected every 30 seconds while a delivery is in progress. GPS coordinates recorded at: job acceptance, pickup arrival, pickup confirmation, delivery confirmation, and job completion. Location is used to verify physical presence at pickup/dropoff locations (within 1 mile). Customers see driver location in real-time during active deliveries only.

1.7 Photos — Pickup and delivery photos taken by drivers as proof of service. Before/after photos for service jobs. All photos stored securely on AWS S3.

1.8 Ratings & Reviews — Mutual ratings between drivers and customers after each completed delivery. Rating scores (1–5 stars), written comments for ratings below 4 stars, and rating history. Driver ratings of customers include: load accuracy, communication, facility access, wait times, and professionalism.

1.9 Usage Data — Device type, browser, IP address, pages visited, actions taken on the platform.

• To create and manage your account
• To process payments via Stripe
• To verify user identity via Stripe Identity (fraud prevention)
• To provide chargeback/dispute evidence to payment processors
• To connect Customers with Pros (sharing contact info upon lead unlock)
• To verify Pro identity and credentials
• To verify driver presence at pickup/dropoff locations via GPS
• To provide real-time delivery tracking to customers
• To store photo proof of pickup and delivery conditions
• To facilitate mutual ratings between drivers and customers
• To identify and remove bad actors (drivers or customers with repeated complaints)
• To send service emails (verification codes, notifications, receipts)
• To prevent fraud and enforce our Terms
• To improve our platform and services

3.1 With Other Users — When a Pro unlocks a lead, they see the Customer's name, email, phone, and project/listing details. When a Customer hires a Pro, they see the Pro's name, email, phone, rating, and verification status.

3.2 Contact Preferences — Users control which contact methods (email, phone, text) are shared with others via their settings.

3.3 Service Providers — We share data with: Stripe (payments + identity verification), AWS (hosting & storage), Resend (email delivery), Checkr (background checks for drivers), Certificial (insurance verification).

3.4 Dispute Evidence — In the event of a payment dispute or chargeback, we may share the following with Stripe, banks, and payment networks: verified identity records, 3D Secure authentication logs, GPS coordinates proving service delivery, timestamped photos, delivery code confirmation records, and transaction details. This is necessary to protect against fraudulent disputes.

3.5 Legal Requirements — We may disclose information if required by law, court order, or to protect safety.

3.6 Transloading & Helper Services — When a delivery requires transloading (cross-dock transfer) or on-site helpers for unloading, we may share the customer's dropoff address, cargo description, weight, and delivery timeline with third-party transloading facilities or local labor providers arranged by the driver. This data is shared solely to facilitate safe cargo delivery and is not retained by third parties beyond the service window.

We use industry-standard security measures:

• HTTPS encryption on all connections
• Passwords hashed via AWS Cognito
• Payment data secured by Stripe (PCI-DSS compliant)
• Verification documents stored in encrypted S3 buckets
• Access controls on all internal systems

5.1 Active Accounts — Data retained while account is active.

5.2 Deleted Accounts — Personal data deleted within 30 days of account deletion request. Transaction records retained for legal/tax purposes.

5.3 Verification Documents — ID photos and license documents deleted after verification is complete (within 90 days) unless needed for ongoing dispute resolution.

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and data
• Opt out of marketing communications
• Export your data
• Restrict processing of your data

California residents: You have additional rights under CCPA. Contact us to exercise them.

We use localStorage for session management (authentication tokens). We do not use third-party tracking cookies. Analytics are collected anonymously for service improvement only.

7.1 Google Ads — We use Google Ads conversion tracking to measure advertising effectiveness. This may use cookies set by Google.

7.2 GPS/Location Tracking — Delivery drivers' locations are tracked in real-time only during active deliveries. Location sharing stops automatically when the delivery is complete. Drivers must grant location permission in the app. Location data is not sold to third parties. GPS data is retained for 90 days for dispute resolution, then deleted.

7.3 Photo Storage — Pickup, delivery, and verification photos are stored on encrypted AWS S3 servers. Photos are retained for the duration of the account plus 90 days after deletion for dispute resolution.

CloudeFlip is not intended for users under 18. We do not knowingly collect data from minors. If we discover a minor's account, it will be immediately deleted.

We may update this policy periodically. Changes will be posted on this page with an updated date. Continued use after changes constitutes acceptance.

For privacy questions, data requests, or concerns:

Email: support@cloudeflip.com