Last updated: 2026-08-01
This is a template starting point, not a substitute for legal advice — have a qualified lawyer review this policy, particularly around location-data handling, before relying on it for a live commercial service.
Depending on how you use journey.delivery, we collect:
To operate the Service: showing live trip progress to invited viewers, sending trip-invite and progress/arrival alert emails, processing subscription payments, and responding to support requests. We don't sell your data, and we don't use your location data for advertising.
A trip's live position and route are visible only to viewers the traveler specifically invited to that trip — access is scoped per-trip, not standing access to a traveler's future trips. Company admins can see journeys made by their own company's drivers. Platform administrators can access account and trip data for support and operational purposes.
Position history for a trip is kept until roughly 12 months after that trip is marked complete, so it remains viewable as a record for that period, after which it's eligible for deletion. Account information is kept for as long as the account is active. You can request earlier deletion — see section 8.
Map tiles, address lookup, and route calculation are provided by Google Maps Platform (a Google service); this is a third-party service with its own logging practices for the requests we send it. Payments are processed by Stripe. Email is sent from our own server. None of these providers receive more information than is necessary to perform their function.
We use a session cookie to keep you logged in. We don't use third-party advertising or tracking cookies.
We send transactional email tied to your account or an active trip (viewer invites, progress/arrival alerts, account notices) — these aren't optional while you're actively using the Service. We may also send occasional platform updates or news; every such email includes an unsubscribe link, and opting out is honored platform-wide.
You can ask us to access, correct, or delete your personal data, or to stop processing it, by emailing us at the address below. We'll respond as soon as we reasonably can.
Passwords are stored hashed, never in plain text. Platform administrator accounts require two-factor authentication. We take reasonable technical measures to protect your data, but no online service can guarantee absolute security.
We may update this policy from time to time; the "last updated" date at the top will reflect the most recent change.
Questions about this policy, or to exercise your data rights: admin@journey.delivery