This Privacy Policy explains how CarpoolQR ("we", "us") collects, uses, and discloses personal information when you use the CarpoolQR website, application, and related services (the "Service"). We design CarpoolQR to minimize personal data — especially home street addresses.
Canada / PIPEDA
If you are in Canada, we handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws (including Alberta PIPA and BC PIPA where they apply). You may request access to or correction of your personal information, and you may withdraw consent subject to legal or contractual restrictions.
What we collect
- Account: name or nickname, email, password (hashed)
- Location area only: postal code (Canada) or ZIP code (US) — not home street address
- Workplace lots: full site address (for the employer-created lot only)
- Messages you send to other members on a lot
- Payments (when live): payment status and processor tokens — we do not store full card PAN data
- Device / log data needed to run the Service securely
Why we use it
- Provide matching, maps, messaging, and QR join flows
- Process payments and host plans
- Security, abuse prevention, and legal compliance
- Improve the Service
CASL (Canada's anti-spam law)
We do not send commercial electronic messages without consent. Product emails (e.g. account security) are transactional. Marketing email, if ever offered, will require express consent and an unsubscribe.
Sharing
We share information with service providers under contract (hosting, database, email, payment processing). We do not sell personal information. We may disclose information if required by law.
Retention & security
We retain information only as long as needed for the purposes above or as required by law. We use reasonable safeguards appropriate to a small SaaS service. No method of transmission is 100% secure.
Children
CarpoolQR is for users 18 years of age or older.
Your rights
Contact us at the email associated with your CarpoolQR account to access, correct, or delete personal information, subject to legal limits.
Contact
Privacy questions: use the email on your account profile or, when live, privacy@carpoolqr.com (or your business email on the domain you register).