Privacy Policy

We collect information to provide and improve our service. Here's what we collect and why:

Information you give us directly

• Account information: Your name, email address, and password when you create an account.
• Profile information: Your phone number, delivery addresses, and order preferences.
• Payment information: We do not store your full card number. Payment is processed securely by Stripe. We store only the last 4 digits and card type.
• Communications: Messages you send us through the app, email, or contact form.

Information we collect automatically

• Order data: Details of every pickup, delivery, and cleaning service you use.
• Device information: Your device type, operating system, and app version.
• Usage data: How you interact with the app — screens visited, features used, time spent.
• Location data: Your delivery address. We do not track your real-time GPS location.

Information from third parties

• If you sign in with Google, we receive your name and email from Google. We do not access any other Google account data.
• Referral data: If someone referred you, we receive a referral code to apply your reward.

We use your information to:

• Create and manage your account
• Process and fulfil your orders (pickup, cleaning, delivery)
• Send you order status updates, pickup reminders, and delivery notifications
• Process payments and send you receipts
• Respond to your questions and support requests
• Improve the Policote app and service
• Send you marketing emails if you opted in (you can opt out anytime)
• Detect and prevent fraud and abuse

We do not use your information to build advertising profiles or sell it to third parties. Ever.

We share your information only in the following situations:

Service providers

We work with trusted third parties who help us run the service:

• Stripe: payment processing
• Twilio: SMS notifications
• Google Maps: address lookup and driver navigation
• Firebase: push notifications
• AWS / cloud hosting: data storage and infrastructure

Each provider has their own privacy policy and is bound by a data processing agreement with us.

Drivers and cleaning partners

Your name, delivery address, and order details are shared with the driver assigned to your pickup/delivery. Cleaning partners receive the items themselves and any relevant handling notes. They do not receive your payment information.

Legal requirements

We may disclose your information if required by law, court order, or government authority.

Business transfers

If Policote is acquired or merged with another company, your information may be transferred. We'll notify you before this happens.

We do not sell, rent, or trade your personal information to anyone.

Your data is stored on secure servers hosted in Canada and the United States. We use industry-standard encryption (TLS/HTTPS) for all data in transit and AES-256 encryption for data at rest.

We retain your account data for as long as your account is active, and for up to 3 years after account deletion for legal and financial compliance purposes.

No method of electronic storage is 100% secure. We take reasonable precautions, but we cannot guarantee absolute security.

Our website uses a small number of cookies:

• Essential cookies: Required for the website to function (login sessions, security). Cannot be disabled.
• Analytics cookies: We use privacy-friendly analytics (no cross-site tracking) to understand how people use our site. You can opt out.
• No advertising cookies: We do not place third-party advertising cookies on our website.

You can manage cookie preferences through our cookie banner or your browser settings.

You have the following rights over your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate information.
• Deletion: Request that we delete your account and personal data.
• Portability: Request your data in a machine-readable format.
• Opt out of marketing: Unsubscribe from marketing emails at any time using the link in any email we send.
• Withdraw consent: Where we process data based on your consent, you can withdraw it at any time.

To exercise any of these rights, email us at hello@policote.com. We'll respond within 30 days.

If you're in the European Economic Area, you also have the right to lodge a complaint with your local data protection authority.

Policote is not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has created an account, contact us at hello@policote.com and we'll remove the data promptly.

We may update this policy from time to time. When we do, we'll update the "Last updated" date at the top and notify you by email if the changes are significant. Your continued use of Policote after changes are posted means you accept the updated policy.

Questions about this policy? We're happy to help.