Privacy Policy

1. Introduction

Laundry Shuttle LLC ("Company," "we," "us," or "our") operates the Laundry Shuttle platform ("Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform, whether as a business operator ("Tenant"), staff member, driver, or end customer. Please read this policy carefully.

2. Information We Collect

2.1 Information You Provide

• Account information: Name, email address, phone number, password, and profile photo
• Business information (Tenants): Business name, address, tax ID, bank account details for payment processing
• Order information: Delivery addresses, service preferences, special instructions, and order history
• Payment information: Credit/debit card numbers and billing addresses (processed and stored by Stripe; we do not store full card numbers)
• Communications: Messages sent via SMS, email, or in-app support

2.2 Information Collected Automatically

• Device information: IP address, browser type, operating system, and device identifiers
• Usage data: Pages visited, features used, click patterns, and session duration
• Location data: Geolocation data when you use address autocomplete or when drivers use route optimization (with your permission)
• Cookies and tracking: We use cookies and similar technologies to maintain sessions, remember preferences, and analyze usage

2.3 Information from Third Parties

• OAuth providers: When you sign in with Google or Facebook, we receive your name, email, and profile picture
• Stripe: Payment confirmation, dispute, and payout information
• Mapbox: Geocoded address data and routing information

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Platform
• Process orders, payments, and refunds
• Create and manage your account
• Send transactional communications (order confirmations, delivery updates, receipts)
• Optimize driver routes and delivery schedules
• Provide customer support and respond to inquiries
• Generate business analytics and reports for Tenants
• Detect, prevent, and address fraud, abuse, and security issues
• Comply with legal obligations, including tax reporting (1099-K)
• Improve the Platform through usage analysis and feedback

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• With Tenants: When you place an order through a Tenant's storefront, your order details, contact information, and delivery address are shared with that Tenant to fulfill your order
• With Drivers: Your name, address, and order details are shared with assigned drivers for pickup and delivery
• Service Providers: We share data with third-party services that help us operate the Platform:
  • Stripe — payment processing
  • Mapbox — geocoding and route optimization
  • Amazon SES — transactional emails
  • Telnyx — SMS notifications
  • Firebase — push notifications
  • Cloudflare R2 — file storage
  • Sentry — error monitoring
  • Vercel — hosting and infrastructure
• Legal Requirements: When required by law, subpoena, court order, or to protect the rights, property, or safety of the Company, our users, or the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. When an account is deleted or a Tenant subscription is terminated, we retain data for up to 30 days to allow for data export requests, after which it is permanently deleted. Certain data may be retained longer as required by law (e.g., financial records for tax compliance are retained for 7 years).

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption in transit (TLS/HTTPS) and at rest
• Secure password hashing (bcrypt)
• Role-based access controls ensuring tenant data isolation
• Regular security monitoring via Sentry
• Rate limiting on authentication and API endpoints
• PCI-DSS compliant payment processing through Stripe

While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Multi-Tenant Data Isolation

The Platform is a multi-tenant system where multiple businesses share the same infrastructure. All data is logically separated by Tenant. Each Tenant can only access data belonging to their own business. The same email address may be used across different Tenants, and each account is treated as separate and independent. Platform administrators do not access Tenant customer data except when necessary for support or legal compliance.

8. Cookies and Tracking Technologies

We use the following types of cookies:

• Essential cookies: Required for authentication, session management, and security (e.g., session tokens, CSRF protection)
• Functional cookies: Remember your preferences and settings (e.g., tenant context, theme selection)
• Analytics cookies: Help us understand how the Platform is used to improve the experience

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using certain features of the Platform.

9. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data, subject to legal retention requirements
• Portability: Request your data in a structured, machine-readable format
• Opt-out: Unsubscribe from marketing communications at any time
• Restrict processing: Request that we limit how we use your data

To exercise these rights, contact us at privacy@laundryshuttle.com. We will respond to your request within 30 days.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To make a CCPA request, contact us at privacy@laundryshuttle.com.

11. Children's Privacy

The Platform is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers and service providers are located. By using the Platform, you consent to the transfer of your information to the United States and other jurisdictions where we operate.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we will also notify registered users via email. Your continued use of the Platform after changes take effect constitutes acceptance of the revised policy.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Laundry Shuttle LLC
Email: privacy@laundryshuttle.com