Privacy policy
Version 1.2, 6 September 2026. Prepared for legal review.
Who this covers
Clients and their agents, delivery recipients, drivers, merchants who install the RentADriver app for Shopify and their customers, and visitors to rentadriver.ai. Controller for client, driver and visitor data: RentADriver. For the personal data of a merchant’s customers received through Shopify, the merchant is the controller and we act as their processor under the Terms of Service. Contact: privacy@rentadriver.ai.
What we collect and why
| Data | Who | Purpose | Retention |
|---|---|---|---|
| Name, email, company, API usage | Clients | Account, billing, abuse prevention | Life of account + 7 years for financial records |
| Pickup and drop-off addresses, contact names and phones, instructions | Recipients (provided by clients) | Performing the delivery; shared with the assigned driver only while active | Delivery record kept 3 years; phones masked after 30 days |
| Shopify order data: order number, shipping name, address and phone, order note, line items (title, quantity, weight, price), amount paid for delivery | Merchants’ customers (received from Shopify when an order is paid or when the merchant books it) | Quoting the delivery at checkout, booking and dispatching the driver, fulfilling the order with a tracking link | Recipient details blanked 90 days after the order; booking record 3 years; deleted on Shopify redact requests |
| Shopify store profile: store name, contact email, currency, timezone, primary location address | Merchants | Operating the app: pickup location, pricing currency, notifications | Until the app is uninstalled; deleted on shop-redact |
| Proof photos, signatures, recipient names, handoff coordinates | Recipients, drivers | Proof of delivery, disputes | 90 days (photos), 3 years (structured record) |
| Identity documents, licence, selfie, vehicle | Drivers | Verification, safety, legal compliance | Duration of engagement + statutory period; visible to verification staff only |
| Live location while on shift, device attestation results | Drivers | Dispatch, tracking for the active delivery, safety, fraud prevention | 30 days history; live position shared publicly only rounded and anonymous |
| Earnings, payouts, bank or wallet details | Drivers | Payment | 7 years |
| Wallet and payment references | Clients, merchants | Payment; cards handled by Stripe, we never store card numbers | 7 years |
| Site analytics (aggregate) | Visitors | Improving the site | 13 months |
The RentADriver app for Shopify
When a merchant installs the app we receive an access token for their store, which we store encrypted. We read orders only to quote and book deliveries and write back fulfillments, tracking links, order tags and a delivery metafield. We process the minimum needed to deliver: the shipping name, address and phone, the order note and the line items. We never read customer accounts, marketing preferences, browsing behaviour or payment details, and we do not use merchants’ customer data for analytics, advertising, personalisation or any purpose other than the delivery the merchant asked for. Customers’ data is shared with the assigned driver only while the job is active. Shopify’s customers/data_request, customers/redact and shop/redact requests are honoured automatically, and the merchant can request deletion at any time at privacy@rentadriver.ai.
Driver app analytics
RentADriver Go uses Firebase Analytics for app screens and interaction events, such as signing in, starting a shift and responding to an offer. These events can be associated with the driver account identifier and app installation identifier. Push and device-security services also use device or installation identifiers. We use this information for app functionality, reliability, fraud prevention and service improvement, not advertising tracking.
Optional driver navigation
When you choose in-app navigation in RentADriver Go, Google receives your device location and the destination coordinates needed to provide maps, directions and turn-by-turn guidance. Guidance can continue while the app is in the background, subject to your device permissions, and ends when you close in-app navigation. We do not send recipient names, phone numbers or delivery instructions as navigation waypoint labels. You can choose an external navigation app instead; that app processes the destination and your location under its own privacy policy. TomTom and OpenStreetMap-based services support our separate route previews and delivery estimates. Navigation does not change the agreed delivery price or automatically confirm a pickup or delivery.
Legal bases
Contract (performing deliveries, paying drivers, operating the Shopify app under the merchant’s instructions), legitimate interests (safety, fraud prevention, service improvement, security logging), legal obligation (financial records, verification) and consent (marketing to drivers, optional cookies). We do not make automated decisions with legal or similarly significant effects on individuals; driver assignment is automated but only affects which vetted driver performs a job.
Sharing and processors
Assigned drivers see the details needed for the job. Our processors: Supabase (self-hosted database and storage, EU), DigitalOcean (application hosting in Frankfurt and encrypted off-site backups), Shopify (merchant orders and fulfillment, for the Shopify app), Stripe (payments), Resend (email), Twilio (SMS), Novu (notification delivery, self-hosted), Apple and Google (push notifications and device attestation), Google Firebase (driver app analytics), Google Maps (optional driver navigation), TomTom (routing and traffic estimates), and OpenStreetMap-based geocoding and routing providers (addresses and coordinates only, no names). We do not sell personal data and we do not share it with advertisers.
Security
Transport is encrypted everywhere; API keys are stored hashed and shown once; Shopify access tokens are encrypted at rest; access to personal data is limited to operations staff behind role-based admin accounts and is logged; backups are encrypted in off-site storage. Our incident response commitments are set out on the Security page: affected clients and merchants are notified within 72 hours of a confirmed incident, Shopify within 24 hours where its data is involved, and authorities where the law requires.
International transfers
Data is stored in the EU and processed in the countries where deliveries occur (currently the UK, Australia, the US and Canada). Transfers rely on the UK and EU standard contractual clauses or an adequacy decision where required.
Your rights
Access, correction, deletion, portability, objection and restriction, and the right to complain to your supervisory authority. Recipients and merchants’ customers can ask the client or merchant to delete a delivery record, or write to us directly; where we act as a processor we forward the request to the controller and assist them. Drivers can export their data from the app.
Delete your driver account and data
Full instructions for drivers, clients and merchants, including deletion without the app: rentadriver.ai/legal/data-deletion. Drivers using the RentADriver Go app can request deletion at any time: in the app open Account → Delete account and confirm the deletion request, which is tracked in Support. Signing out does not delete your account. You can also email drivers@rentadriver.ai from the address or phone number you signed in with, or write to privacy@rentadriver.ai. We confirm within 72 hours and delete the account, profile, documents, location history, device records and preferences within 30 days. Records we must keep by law are retained only for that purpose: earnings and payout records for 7 years, completed delivery records for 3 years (with your name and contact details removed), and proof-of-delivery photos until their 90-day retention ends. No account is needed to make the request, and deletion is free.
Approximate location for quote examples
Public quote forms may request your approximate country and city from GeoJS using your browser’s IP address. The request does not include your account, delivery addresses or precise device GPS. We use the result to select a supported example area; IP location can be inaccurate, particularly with a VPN. You can change the area and addresses, and unavailable or unsupported locations default to a US example. This lookup does not discover your street address.
Cookies
See the Cookie Policy. The console stores your API key in your browser only if you choose to sign in there. The embedded Shopify app stores no cookies of its own.
Changes
We will post changes here and notify account holders and installed merchants of material changes by email.
Business clients: our data processing addendum and subprocessor list sets out how we process the personal data in your deliveries.