Privacy Policy

Account information: When you register, we collect your name, email address, and company details.

Billing information: Payment details (card number, expiry, CVV) are collected and processed directly by Stripe. We store only a tokenized reference and your Stripe customer ID — never raw card data.

Fleet and operational data: Vehicle details, pricing rules, and booking records that you input into the Service.

End-customer booking data: Names, email addresses, phone numbers, pickup and drop-off locations, and booking details submitted through your embedded booking widget by your customers.

Usage data: Log files, IP addresses, browser type, pages visited, and timestamps collected automatically when you interact with the Service.

Communications: Messages you send to our support team.

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Process subscription payments and manage your billing relationship.
• Send transactional emails including booking confirmations and notifications (via Resend).
• Respond to support requests and troubleshoot issues.
• Monitor and analyze usage patterns to improve the Service.
• Enforce our Terms of Service and prevent fraud or abuse.
• Comply with legal obligations.

We do not sell your personal information or your customers’ personal information to third parties.

We share information only in the following circumstances:

• Service providers: We share data with trusted third-party vendors who assist us in operating the Service (see Section 5). These providers are contractually bound to use your data only to perform services for us.
• Legal requirements: We may disclose information if required by law, subpoena, court order, or to protect our rights or the safety of users.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change via email or prominent notice on the Service.
• With your consent: We may share information for other purposes with your explicit consent.

The Service integrates with the following third-party providers who may process your data:

• Supabase — database and authentication infrastructure. Data is stored on servers in the United States.
• Stripe, Inc. — payment processing. Stripe handles all payment card data under PCI-DSS compliance. See stripe.com/privacy.
• Mapbox, Inc. — address geocoding and route distance calculations. Pickup and drop-off addresses are transmitted to Mapbox servers. See mapbox.com/legal/privacy.
• Resend — transactional email delivery. Customer name and email addresses are transmitted to send booking confirmation emails.
• Upstash — Redis-based rate limiting. IP addresses of widget API requests are processed transiently for abuse prevention.
• Vercel — hosting and edge infrastructure. Request logs including IP addresses may be retained per Vercel’s data retention policies.

We use essential cookies and local storage to maintain your authenticated session. We do not use third-party advertising cookies or cross-site tracking. Our session cookies are set by Supabase for authentication purposes and expire when your session ends or after a defined inactivity period.

The embedded booking widget does not set any cookies on your customers’ browsers. It communicates with Routeivo’s API directly.

We retain your account and operational data for as long as your account is active. If you cancel your subscription, we retain your data for 30 days to allow for reactivation or export, after which it is permanently deleted from our systems.

End-customer booking data is retained for 24 months from the date of the booking, after which it is deleted or anonymized unless you request earlier deletion.

You may request deletion of your data at any time by contacting support@routeivo.com. We will process deletion requests within 30 days subject to legal retention requirements.

We implement industry-standard technical and organizational measures to protect your data, including encryption in transit (TLS 1.2+), encrypted storage, row-level security policies on our database, and access controls limiting employee access to production data.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your information, we will notify you as required by applicable law.

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal obligations.
• Portability: Request your data in a machine-readable format.
• Objection: Object to processing of your personal data for certain purposes.

To exercise any of these rights, contact support@routeivo.com. We will respond within 30 days.

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will promptly delete it.

Routeivo operates in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to such transfers.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date, and by sending an email notification to your registered address at least 14 days before changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the revised policy.

This Privacy Policy is governed by the laws of the State of New Jersey, United States, without regard to conflict of law principles.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

You may also review our Terms of Service.