Privacy Policy

Return It ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.

We collect information that you voluntarily provide to us when you:

• Register for an account
• Make a booking for return services
• Apply to become a driver
• Contact customer support
• Participate in surveys or promotions

This information may include:

• Contact Information: Name, email address, phone number, mailing address
• Account Credentials: Username, password (encrypted)
• Identity Verification (Drivers Only): Date of birth, driver's license, government-issued ID, Social Security Number (for tax reporting and background checks via Stripe Identity)
• Financial Information: Payment card details (processed by Stripe), bank account information for driver payouts (stored securely by Stripe Connect), debit card information for instant payouts
• Return Details: Store locations, item descriptions, item values, photos of items/receipts/tags/packaging
• Communications: Messages you send through our in-app chat, customer support inquiries

When you use our Service, we automatically collect certain information, including:

• Device Information: Device type, operating system, unique device identifiers, mobile network information
• Location Data: Real-time GPS location (when you enable location services), especially for drivers during active deliveries. Location data is used to match customers with nearby drivers and enable real-time tracking.
• Usage Data: App features you use, pages viewed, time spent on pages, clicks, scrolling behavior
• Log Data: IP address, browser type, access times, pages viewed before and after using our Service
• Camera Access: Photos captured for package verification (drivers) and proof of purchase (customers)

We may receive information about you from third parties, including:

• Social Media Platforms: If you choose to link your account with Google, Apple, or Facebook, we receive basic profile information (name, email, profile picture)
• Payment Processors: Stripe and PayPal provide transaction confirmation and payment status information
• Background Check Providers: For driver applicants, we receive verification results through Stripe Identity
• Analytics Providers: Aggregate usage statistics and performance metrics

We use the information we collect to:

• Provide and Improve Services: Process bookings, match customers with drivers, facilitate deliveries, improve app functionality
• Process Payments: Charge customers, pay drivers, process refunds, handle instant payouts ($0.50 fee), manage subscription billing
• Communicate with You: Send booking confirmations, delivery updates, push notifications, promotional offers (with your consent), customer support responses
• Safety and Security: Verify driver identities, conduct background checks, prevent fraud, ensure platform safety, investigate disputes
• Legal Compliance: Generate 1099-NEC tax forms for drivers, respond to legal requests, comply with applicable laws
• Analytics and Research: Understand usage patterns, improve user experience, develop new features, optimize routes
• Marketing: Send promotional emails (you can opt out), show personalized content, run referral programs

We do not sell your personal information. We may share your information with:

3.1 Service Providers

• Stripe: Payment processing, identity verification, driver payouts, 1099 tax form generation
• PayPal: Alternative payment processing
• Google Maps: Location services, routing, address autocomplete
• Mapbox: Real-time GPS tracking and mapping
• Resend: Transactional email delivery
• Expo: Push notifications for mobile app users
• Replit App Storage (Google Cloud Storage): Secure file storage for photos and documents

3.2 Between Users

• We share limited information between customers and drivers to facilitate deliveries (first name, pickup/dropoff locations, contact phone number, order details)
• Drivers can see customer ratings and order history to assess delivery feasibility
• Customers can see driver names, ratings, and real-time location during active deliveries

3.3 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to:

• Comply with legal processes (subpoenas, warrants)
• Protect our rights, property, or safety
• Prevent fraud or illegal activity
• Respond to emergency situations

3.4 Business Transfers

If we merge with, are acquired by, or sell assets to another company, your information may be transferred as part of that transaction.

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account Information: Retained while your account is active and for 7 years after closure (for legal/tax purposes)
• Order Records: Retained for 7 years for accounting, tax reporting, and dispute resolution
• Payment Information: Stored by Stripe/PayPal per their retention policies; we only store references
• Driver Tax Documents (1099s): Retained for 7 years as required by IRS regulations
• Photos and Files: Retained for 2 years after order completion for verification purposes
• Location Data: Real-time GPS data is deleted 90 days after delivery completion
• Chat Messages: Retained for 1 year for customer support and dispute resolution

You have the following rights regarding your personal information:

5.1 Access and Portability

• Request a copy of your personal data in a portable format
• Download your order history, earnings reports, and tax documents

5.2 Correction and Deletion

• Update your account information at any time through app settings
• Request deletion of your account and associated data (subject to legal retention requirements)
• Delete uploaded photos and documents (except those needed for active orders)

5.3 Marketing Preferences

• Opt out of promotional emails by clicking "unsubscribe" in any marketing email
• Disable push notifications through your device settings or app preferences
• Continue to receive transactional emails (booking confirmations, delivery updates) necessary for service operation

5.4 Location Services

• Enable or disable location access through your device settings
• Note: Drivers must enable location services during active deliveries; customers may disable location after booking

5.5 Do Not Sell My Personal Information (CCPA)

• We do not sell personal information to third parties
• California residents can request information about data sharing practices

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted between your device and our servers uses HTTPS/TLS encryption
• Password Protection: Passwords are hashed using bcrypt with salt
• Payment Security: PCI-compliant payment processing via Stripe (we never store raw credit card numbers or bank account details)
• Access Controls: Role-based access restrictions for admin and driver portals
• Secure Storage: Private object storage with ACL policies for sensitive documents (tax forms, IDs)
• Regular Security Audits: Ongoing monitoring and vulnerability assessments
• Session Management: Secure session cookies with automatic expiration

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. Drivers must be at least 18 years old and pass identity verification. If we discover that we have collected information from a child under 18, we will promptly delete that information.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to the transfer of your information to the United States and other countries where we operate.

Our Service may contain links to third-party websites, services, or retailers. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any information.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting the updated policy on our website and app
• Updating the "Last Updated" date at the top
• Sending an email notification for significant changes (if you have an account)
• Displaying an in-app notification upon your next login

Your continued use of the Service after changes are posted constitutes your acceptance of the updated Privacy Policy.

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request details about personal information collected, used, disclosed, or sold
• Right to Delete: Request deletion of personal information (subject to exceptions)
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell data)
• Right to Non-Discrimination: Equal service and pricing regardless of privacy choices
• Right to Correct: Request correction of inaccurate personal information

To exercise these rights, contact us at privacy@returnit.online

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process data based on consent, contract performance, legal obligations, and legitimate interests
• Right to Access: Obtain confirmation of data processing and a copy of your data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion under certain circumstances
• Right to Restrict Processing: Limit how we process your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing
• Right to Lodge a Complaint: File a complaint with your local data protection authority

By using Return It, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.