Privacy Policy

1. Data we collect

• Account data — name, email address, phone number, password (stored only as a secure hash), and preferred language.
• Profile and verification data — profile photo and, for drivers, the identity documents required for verification.
• Delivery data — pickup and drop-off addresses, package descriptions and photos, and delivery proof.
• Payment data — processed by Stripe; we store only references such as customer and account identifiers, never card numbers. Affiliates additionally provide a PayPal email for payouts.
• Communications — in-app messages and support conversations.
• Technical data — IP address, device and browser information, and usage events.

2. How we use your data

• Operate the marketplace: match requests with drivers, process payments, and send notifications.
• Verify driver identity and prevent fraud and abuse.
• Track affiliate referrals and calculate commissions, XP, and payouts.
• Provide customer support and send transactional emails.
• Comply with legal, tax, and accounting obligations.

3. Who we share it with

When a delivery is matched, the Sender and Driver see each other's name, photo, rating, and the details needed to complete the handoff. Beyond that, we share data only with the service providers that run the platform:

• Stripe — payment processing, driver payouts, and identity verification.
• PayPal — affiliate commission payouts (your PayPal email and payout amount only).
• Supabase — database, authentication, and file-storage infrastructure.
• Vercel — application hosting.
• Resend — transactional email delivery.
• Authorities — where required by law or to protect against fraud or security threats.
• We never sell your personal data.

4. Affiliate data

If you join the affiliate program we additionally process your referral code, PayPal email, referral activity, earnings, XP, and payout history. You can see aggregate data about your referrals in your dashboard, but we do not disclose their personal details (names, addresses, emails) to you. Your PayPal email is used exclusively for payouts; we never store PayPal login credentials.

5. Security

All traffic is encrypted in transit with TLS, access to data is restricted by role-based access rules enforced at the database level, and payment credentials are handled exclusively by Stripe. No system is perfectly secure — keep your account credentials private and contact us immediately if you suspect unauthorized access.

6. Data retention

• Account data is retained while your account is active.
• Delivery, payment, and affiliate-earnings records are retained for up to 7 years for tax and legal compliance.
• Support conversations and chat logs are retained for up to 2 years.
• If you delete your account, remaining personal data is deleted or anonymized within 30 days, except where retention is legally required.

7. Your rights

You may access, correct, export, or delete your personal data, opt out of marketing communications, and object to or restrict certain processing. EU and UK users have these rights under the GDPR, including the right to complain to a data protection authority; California residents have equivalent rights under the CCPA (we do not sell personal data). To exercise any right, contact us — we respond within 30 days.

8. International transfers

We operate globally and may process data in the United States and other countries. We use appropriate safeguards for international transfers, including Standard Contractual Clauses for data transferred from the EU.

9. Children

AeroPerk is not intended for anyone under 18, and we do not knowingly collect data from minors. If you believe a minor has provided us data, contact us immediately.

10. Changes to this policy

We may update this policy from time to time. Material changes are announced by email or an in-app notice, and the effective date above is updated. Continued use after changes constitutes acceptance.

11. Contact

Privacy questions and data requests: theaeroperk@gmail.com (subject line: Privacy Inquiry or Data Request).