Privacy Policy for Ganbatte

1. Information We Collect

We collect the following types of personal information:

Personal Identifiers:

• Full name and contact information
• Phone number (for SMS notifications and service coordination)
• Email address (for account verification and communications)
• IP address and device information

Location and Delivery Data:

• Pickup and delivery addresses (Los Angeles, Orange County, and surrounding areas)
• GPS coordinates and real-time location data (for delivery tracking)
• Driver location data (for service optimization)
• Route information and delivery preferences

Service and Communication Data:

• SMS message content and delivery status
• Email communications and preferences
• Chat history with our AI assistant
• Service requests and job details
• Payment information (processed securely via third-party providers)

Media and Documentation:

• Job-related photos (for service verification and documentation)
• Delivery confirmation images
• Communication records with our team

2. Legal Basis and How We Use Your Information

Legal Basis for Processing (GDPR):

• Contract Performance: To fulfill delivery and logistics services
• Legitimate Interest: To improve services and prevent fraud
• Consent: For SMS notifications and marketing communications
• Legal Obligation: To comply with transportation and business regulations

Primary Uses:

• Provide and coordinate logistics and delivery services in Los Angeles and Orange County
• Send SMS notifications for delivery updates, driver coordination, and service status
• Process email communications for account management and service updates
• Verify identity and process secure payments
• Track deliveries and provide real-time location updates

AI and Automation:

• Process chat messages with our AI assistant for service requests
• Automate route optimization and delivery scheduling
• Analyze service patterns to improve efficiency
• Generate automated SMS and email notifications

3. Data Storage, Retention, and International Transfers

Data Storage:

Your data is stored securely in the United States using cloud-based services. We implement appropriate safeguards for international data transfers as required by applicable law.

Retention Periods:

• Account Information: Retained for 7 years after account closure
• Delivery Records: Retained for 3 years for service documentation
• SMS Messages: Retained for 2 years for communication history
• Chat History: Retained for 2 years for service improvement
• Payment Information: Retained as required by financial regulations
• Location Data: Retained for 1 year for service optimization

Data Deletion:

You may request deletion of your data at any time. We will delete your data within 30 days of receiving a valid request, except where retention is required by law or for legitimate business purposes.

4. Cookies and Tracking

We currently do not use cookies or other tracking technologies. This may change as our services scale, in which case this policy will be updated accordingly.

5. Third-Party Services

We use the following third-party services, which may access your information as necessary to provide their respective services:

• Supabase – for backend data storage
• OpenAI – for AI chat parsing and assistance
• Cloudinary – for image hosting and delivery
• Google Maps – for routing and map services
• Twilio – for SMS communication
• Resend – for transactional emails
• Zoho – for business email communication

We are not responsible for the privacy practices of these providers but strive to work with reputable and compliant vendors.

6. Data Security

We implement reasonable technical and organizational measures to protect your personal data. However, no method of transmission or storage is 100% secure.

7. Children's Privacy

Our services are intended for adults only. We do not knowingly collect data from individuals under 18 years old.

8. Your Rights and Choices

GDPR Rights (EU Residents):

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data
• Portability: Receive your data in a portable format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for SMS/email communications

CCPA/CPRA Rights (California Residents):

• Know: Request disclosure of data collection and sharing
• Delete: Request deletion of personal information
• Opt-Out: Opt out of data sales (we do not sell personal data)
• Non-Discrimination: Equal service regardless of privacy choices
• Authorized Agent: Designate someone to act on your behalf

Communication Preferences:

• Opt out of SMS notifications by replying “STOP” to any message
• Unsubscribe from emails using the link in any email
• Update communication preferences in your account settings
• Request data access or deletion via privacy@ganbatte.run

9. Data Breaches and Security

In the event of a data breach that affects your personal information, we will notify you within 72 hours of becoming aware of the breach, as required by applicable law. We will also notify relevant authorities as required.

We implement industry-standard security measures including encryption, access controls, and regular security audits to protect your data.

10. Contact Us

For privacy-related inquiries, please reach out via:

• Privacy Email: privacy@ganbatte.run
• General Support: team@ganbatte.run
• Data Protection Officer: privacy@ganbatte.run
• California Privacy Requests: privacy@ganbatte.run
• EU Privacy Requests: privacy@ganbatte.run

Response Time: We will respond to privacy requests within 30 days, or 45 days if additional time is needed.

Verification: We may need to verify your identity before processing certain requests to protect your privacy and security.