Privacy Policy

**SmartStuff2Buy LLC (DBA Airdrop Delivery) — Privacy Policy** *Last updated: May 2026* This Privacy Policy describes how SmartStuff2Buy LLC ("we," "us," or "our") collects, uses, shares, and protects your personal information when you use the Airdrop Delivery mobile application and website (collectively, the "Service"). By using the Service, you agree to the practices described in this policy. --- **1. DATA CONTROLLER** SmartStuff2Buy LLC PO BOX 71, Sedalia, KY 42079, USA Email: airdrop.deliveries@gmail.com Phone: 1-502-682-7777 --- **2. INFORMATION WE COLLECT** We collect the following categories of personal data: **A. Account & Identity Information** - Full name, email address, phone number, and physical/billing address. - Profile photo (optional, user-uploaded). - Date of birth / age (for age-restricted feature eligibility and driver onboarding). - User role (customer, driver, merchant, admin). **B. Location Data** - Precise GPS location during active delivery sessions (drivers), order placement (customers), and merchant onboarding. - Approximate location (city, state, country) for public driver/merchant profiles and delivery zone matching. - IP address, which may be used to infer general geographic region. - Full street addresses are NEVER shared publicly — only city/state is shown on public profiles. **C. Camera & Media** We request camera and media access for the following specific purposes only. We NEVER access your camera in the background or without a direct user action. **Camera is used for:** 1. **Delivery Proof Photos (Drivers):** After completing a delivery, drivers may take a photo at the drop-off location as proof of delivery. This photo is stored and linked to the order record. 2. **Driver Profile Photo:** Drivers can take a selfie to upload as their profile photo during onboarding or from their profile settings. 3. **Driver Identity Verification Selfie:** During driver onboarding, a selfie is captured and compared against the uploaded government-issued ID for identity verification purposes. 4. **Driver's License Photo (Drivers):** Drivers photograph their government-issued driver's license during onboarding for identity and eligibility verification. 5. **Vehicle Photo (Drivers):** Drivers photograph their vehicle during onboarding for account verification and safety review. 6. **Insurance & Registration Documents (Drivers):** Drivers photograph their vehicle insurance and registration documents during onboarding. 7. **Merchant Menu / Product Item Photos:** Restaurant and store owners can photograph menu items or products to upload as item images in their catalog. 8. **AI-Assisted Menu Scanning (Merchants):** Merchants can photograph a printed menu to use our AI feature that automatically extracts item names and prices to populate their digital catalog. 9. **Customer Profile Photo:** Customers can take a photo to upload as their profile picture. **Photo Library / Media Storage is used for:** - Selecting existing photos from your device's photo library for any of the above purposes (profile photos, menu items, delivery proof, identity documents). We do not scan or upload photos without an explicit user-triggered action. **File Storage (Device):** - The app may temporarily cache images and assets to your device's local storage for performance and offline viewing. No personal data is written to device storage beyond standard app caching. **D. Payment & Financial Information** - Payment card details are processed securely by **Stripe, Inc.** — we do not store raw card numbers on our servers. - Transaction history, order totals, delivery fees, tips, and payout information. - Driver payout method details (e.g., PayPal, CashApp handle — no full bank account numbers stored by us). **E. Communications & User-Generated Content** - In-app chat messages between customers, drivers, and merchants during active orders. - Order special instructions, reviews, ratings, and feedback submissions. - Support messages submitted through Live Help or email. - Voice messages or AI-generated phone call transcripts (for merchant order notification calls via Twilio). **F. Device & Technical Data** - Device type, operating system, browser type, and app version. - Device identifiers (e.g., device ID, advertising ID). - App usage data, feature interactions, session duration, and crash/error reports. - Push notification tokens (for order and delivery alerts). **G. Verification Data (Drivers Only)** - Government-issued ID / driver's license photo (for identity verification). - Vehicle registration, insurance documentation, and vehicle photos. - Selfie photos (for identity verification matching). - Background check consent and results (processed by a third-party screening provider where screening is required). **H. Microphone** - Microphone access may be requested if a user initiates a voice-based support chat or if voice AI features are enabled. We do not record microphone audio without explicit user action. **I. Tracking & Analytics** - Referral codes and affiliate tracking parameters to attribute sign-ups and orders. - Click tracking on affiliate links to measure campaign performance. - Aggregate analytics data for platform performance and feature improvement. --- **3. HOW WE USE YOUR DATA** We use the information collected for the following purposes: | Purpose | Data Used | |---|---| | Account creation and authentication | Name, email, phone, password | | Order fulfillment and delivery routing | Location, delivery address, order details | | Driver matching and dispatch | GPS location, vehicle type, driver status | | Payment processing | Payment info (via Stripe) | | Identity verification (drivers) | ID photos, selfie, background check data | | Fraud detection and risk scoring | IP address, location, device data, order patterns | | In-app communications | Chat messages, support messages | | Push notifications and alerts | Device tokens, order status | | SMS/Voice order notifications (merchants) | Phone number, order details (via Twilio) | | Affiliate and referral tracking | Referral codes, sign-up data | | Platform analytics and improvement | Usage data, crash reports | | Legal compliance and dispute resolution | All relevant data | | Marketing communications (with consent) | Email, phone | --- **4. HOW WE SHARE YOUR DATA** We share your data only as necessary and never sell it for advertising. Sharing occurs with: **A. Other Platform Users (In-App)** - Drivers receive customer first name, delivery address, and phone number (only during active delivery). - Customers see driver first name, vehicle info, and phone number (only during active delivery). - Merchants receive customer name, order details, and contact info for order fulfillment. **B. Referral / Affiliate Program** - If you sign up using another user's referral link, we share **only your first name and last initial** (and the general role you signed up as — customer, driver, or merchant) with the person who referred you, so they know their referral was successful. - Your email address, phone number, street address, order history, and payment details are **never** shared with the referrer. - Referrers see aggregate counts and this limited name format only. This applies to all regions, including the United States and the Philippines. **C. Third-Party Service Providers** - **Stripe** — Payment processing - **Twilio** — SMS and voice call notifications - **Shipday** — Third-party driver dispatch and logistics - **Square** — POS integration for merchants - **Third-party background screening provider** — Driver background checks, where screening is required - **Base44 / Wix** — Platform hosting and backend infrastructure - **OpenStreetMap / Nominatim** — Mapping and geocoding - These providers are bound by their own privacy policies and data processing agreements. **D. Legal Obligations** We may disclose your information if required by law, court order, or to protect the safety of users and the public. **E. Business Transfers** In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. --- **5. DATA RETENTION** - Active account data is retained for as long as your account is active. - Order history is retained for up to 7 years for tax and legal compliance. - Delivery proof photos are retained for 90 days after delivery. - Driver verification documents are retained for up to 3 years after account closure. - Support messages are retained for up to 2 years. - We do not automatically delete accounts for inactivity; unfinished or unused accounts may be marked inactive and retained. - You may request deletion of your data at any time (see Section 8). On a verified request we delete your personal data and close your account, retaining only anonymized or legally required records (such as transaction and tax records) as described above. --- **6. INTERNATIONAL DATA TRANSFERS** Our servers are located in the United States. If you access the Service from outside the U.S., your data will be transferred to and processed in the U.S. We take appropriate safeguards (including standard contractual clauses where required) to ensure your data is protected in accordance with applicable law. --- **7. CHILDREN'S PRIVACY** The Service is not directed to children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe a child has provided us personal data, contact us immediately at airdrop.deliveries@gmail.com. --- **8. YOUR RIGHTS & CHOICES** Depending on your location, you may have the following rights: - **Access:** Request a copy of the personal data we hold about you. - **Rectification:** Request correction of inaccurate or incomplete data. - **Erasure ("Right to Be Forgotten"):** Request deletion of your personal data. - **Data Portability:** Receive your data in a structured, machine-readable format. - **Objection / Restriction:** Object to or request restriction of certain processing. - **Withdraw Consent:** Withdraw consent for marketing communications at any time. - **Lodge a Complaint:** You have the right to file a complaint with a supervisory authority in your country. **To exercise any of these rights**, contact us at airdrop.deliveries@gmail.com or through the "Request Data Deletion" feature in your profile settings. We will respond within 30 days. **Applicable Regulations:** This policy is designed to comply with the GDPR (EU/UK), CCPA (California), PIPEDA (Canada), and other applicable global privacy laws. --- **8B. PHILIPPINES — DATA PRIVACY ACT OF 2012 (REPUBLIC ACT NO. 10173)** If you are located in the Philippines, this section applies to you in addition to the rights described in Section 8 above: - We process your personal data in accordance with the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations. - **Sensitive personal information** under RA 10173 — including your government-issued ID, driver's license, and identity-verification selfie (drivers only) — is collected only with your explicit, separate consent during onboarding, and is used solely for identity verification and platform safety. - You have the right to be informed, to access, to object, to erasure or blocking, to damages, to file a complaint, to rectify, and to data portability, as provided under RA 10173. - You may lodge a complaint with the **National Privacy Commission (NPC)** at privacy.gov.ph if you believe your data privacy rights have been violated. - To exercise any of these rights, contact us at airdrop.deliveries@gmail.com, the same channel used for all data rights requests under this policy. --- **8A. SMS / TEXT MESSAGING (A2P 10DLC)** - We send text messages only to users who explicitly opt in by checking an SMS consent box at checkout, in their profile, or during driver/merchant onboarding. Consent is never a condition of purchase. - Message types: order confirmations, driver assigned/en route/delivered updates, delivery coordination during an active order, merchant new-order alerts, and one-time account verification codes. - Message frequency varies with your order activity. Message and data rates may apply. - **We do not sell your personal information, and we never sell, rent, or share your phone number or SMS opt-in data with third parties or affiliates for their own marketing purposes.** Phone numbers are shared only with our messaging provider (Twilio) to deliver these messages, and with the driver who has accepted your specific order (along with your first name, last initial, and delivery address) solely to complete that delivery. - Reply **STOP** to any message to unsubscribe immediately, **START** to re-subscribe, or **HELP** for help. You may also email airdrop.deliveries@gmail.com. - Full program details are in our [SMS Terms & Conditions](/sms-terms). --- **9. COOKIES & TRACKING TECHNOLOGIES** We use cookies and similar technologies (e.g., local storage, session tokens) for authentication, session management, and basic analytics. We do not use third-party advertising cookies or tracking pixels for ad targeting. --- **10. SECURITY** We implement industry-standard security measures including TLS/SSL encryption in transit, encrypted storage at rest, access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure. --- **11. CHANGES TO THIS POLICY** We may update this policy periodically. We will notify you of material changes via email or in-app notification. Continued use of the Service after changes constitutes acceptance. --- **12. CONTACT US** SmartStuff2Buy LLC DBA Airdrop Delivery Email: airdrop.deliveries@gmail.com Phone: 1-502-682-7777 Address: PO BOX 71, Sedalia, KY 42079, USA