Privacy Policy

1. Who is responsible for your data

The data controller is [Legal entity name], registration code [ЄДРПОУ / РНОКПП], address: [Registered address]. For any question about personal data, email [support@ship2drive.com].

2. Data we collect

The app does not use advertising identifiers, ad networks or third-party analytics, and does not track you across other apps or websites.

• Account data: name, email, password (stored only as a hash by our authentication provider), the company you belong to and your role.
• Work data: cars (VIN, make, model, lot, auction, status), car photos and documents, deliveries and delivery addresses, tasks and notes.
• Financial data: invoices, payments, balances owed and the payment confirmation files you upload. We do not collect or store payment card details.
• Driver data needed for transport and customs clearance: full name, passport details, address, truck and trailer numbers, EORI number and document scans. They are provided by the carrier performing the delivery and entered by a Ship2Drive administrator.
• Notifications: your push notification token and basic device details (platform, model), and your Telegram chat ID if you choose to connect Telegram notifications.
• Technical data: IP address, browser or device type, sign-in times and error logs, needed for security and reliability.
• Files you upload (photos, PDFs) may contain metadata added by your device, such as the capture date or location.

3. How we use data

Our legal bases are performing our contract with you or your company, complying with legal obligations, our legitimate interest in keeping the Service secure and, where required, your consent (for example, for push notifications). You can withdraw consent at any time in your device or app settings.

• To provide the Service: signing in and managing cars, deliveries, invoices and payments.
• To send notifications about car, delivery and invoice status — in the app, by push notification or in Telegram.
• To prepare transport and customs documents.
• To keep accounting and tax records as required by law.
• To protect the Service from abuse, investigate errors and answer your requests.

4. Who we share data with

We do not sell personal data. We share it only with providers that help us run the Service and process data on our instructions:

• Clerk — authentication and account management.
• Supabase — database and file storage.
• Vercel — hosting of the web service and API.
• Expo, Apple Push Notification service and Firebase Cloud Messaging (Google) — push notification delivery.
• Telegram — notification delivery, only if you connect Telegram.
• Carriers, customs brokers and public authorities — only the data needed to complete a delivery or customs clearance, or when the law requires it.

5. Security and international transfers

Every provider must protect data at least as well as this policy describes. Data travels over encrypted connections (HTTPS), only authorised people can access it, and each company's data is kept separate.

Our providers' servers may be located outside Ukraine, including in the EU and the US. We use providers that guarantee an adequate level of personal data protection.

6. How long we keep data

• Account data — while the account is active. After the account is deleted, up to 30 days, after which it is deleted or anonymised.
• Invoices, payments and other accounting records — for as long as tax and accounting law requires, even after the account is deleted.
• Car and delivery records belong to the client company and are kept while we work with that company or as long as the law requires.
• Push notification tokens — until you sign out or delete the app. Logs — up to 90 days.
• Backups are overwritten on a schedule; deleted data leaves them within the rotation cycle.

7. Your rights

You have the right to know what data about you is processed, get a copy, correct it, delete it, restrict or object to its processing, and withdraw consent. To use these rights, email [support@ship2drive.com] from the address linked to your account. We reply within 30 days.

How to delete your account is described on the Account deletion page: ship2drive.com/en/account-deletion.

You may also complain to the Ukrainian Parliament Commissioner for Human Rights or, if you are in the EU, to your local data protection authority.

8. Driver data

The drivers who transport cars do not use the Service. Their data is provided to us by the carrier performing the delivery, based in Ukraine or in the EU. We process it only to organise the delivery and to meet customs and border requirements. The carrier is responsible for informing its drivers that their data is shared with Ship2Drive.

The client company sees the driver's full name and vehicle numbers as delivery history. It sees the passport number and EORI number only while the car is in delivery — to prepare border, customs or terminal documents — and they are hidden once the car is delivered. The driver's address, passport issue and expiry dates, issuing authority and document scans are not shared with clients. Our Terms of Use require clients not to pass this data on or use it for any other purpose.

Drivers can exercise the rights described in section 7 by emailing [support@ship2drive.com].

9. Children

The Service is built for businesses and is not intended for anyone under 18. We do not knowingly collect their data.

10. Changes to this policy

If we change this policy we will update the date at the top of this page and announce significant changes in the Service.