SHYFT Privacy Policy

Owned and operated by Vinetree Holdings

Last Updated: November 2025

This Privacy Policy explains how SHYFT (“the App”), owned by Vinetree Holdings, collects, uses, stores, and protects information related to users, drivers, and delivery operations. By using SHYFT, you agree to the terms outlined in this policy.

1. Information We Collect

• Name, phone number, and email address
• Account registration details
• Identity verification documents for drivers (secured and encrypted)
• Device details, usage data, and IP address
• Real-time GPS location during delivery operations

2. Location & Tracking

• The App may request location access to enable deliveries and driver tracking.
• Location may be visible to customers only for active delivery purposes.
• Location history may be stored for operational and safety reasons.

3. Orders & Delivery Information

• Pickup and drop-off addresses
• Package or cargo description
• Receiver contact details

4. Payments

• Payments may be processed through secure third-party providers such as Stripe or PowerTranz.
• SHYFT does not store or retain full payment card numbers.
• All payment data is encrypted or tokenized by the payment processor.

5. Data Security

• Data is stored on secure infrastructure such as AWS or Firebase.
• Information is encrypted in transit and at rest where applicable.
• Only authorized personnel have access to operational systems.

6. Third‑Party Services

We may integrate third-party services such as:

• Google Maps (location and routing)
• Firebase (notifications, crash reporting, analytics)
• Stripe / PowerTranz (payment processing)
• Twilio or similar (SMS verification)

7. App Permissions

• Location — used for delivery routing and driver tracking
• Camera — used for ID verification and proof‑of‑delivery photos
• Storage — used for storing delivery images only when necessary

8. Drivers & Delivery Staff

• Driver profiles may include vehicle details and identification images.
• Real-time tracking is required for safety and transparency.

9. Data Retention & Account Deletion

• Data is retained only for operational, legal, and accounting purposes.
• Users may request data deletion by contacting: privacy@vinetreeholdings.com

10. Legal Compliance

Certain delivery and payment records may be retained to meet financial, tax, or dispute‑resolution requirements.

Contact

For questions or requests regarding this policy, contact us at:
privacy@vinetreeholdings.com