1. What this policy covers
This policy explains what personal data Parcelane (the "Platform", "we") collects, why, with whom we share it and what rights you have. It applies to the website, the account and all related communication. It is part of the Terms of Service. Cookies are described separately in the Cookies policy.
2. What data we collect
- Account: email, password (stored as a hash), name, phone number and its verification status, avatar, chosen language and role, date of registration, acceptance of the Terms (version and date).
- Social sign-in: identifier and basic profile data received from Google, Facebook, X or Telegram when you sign in with them.
- Requests and trips: route (cities and countries), dates, description of the item, photos, reward, meeting point and other details you enter.
- Offers and chats: messages, files and photos exchanged with other users, offer statuses, reviews.
- Reports and support: content of reports, support tickets and our correspondence with you.
- Technical data: IP address, device and browser type, pages visited, time of actions, an anonymous visitor identifier, error logs.
- Data from other users about you: for example, a review or a report mentioning you.
We do not knowingly collect data of persons under 18 and do not ask for payment card details — the Platform does not process payments.
3. Why we use data and on what basis
- To run the Platform (contract with you): account, matching requests and trips, chats, offers, notifications about them.
- Safety and moderation (our legitimate interest and legal obligations): checking content and messages for prohibited items, fraud and abuse — including with automated tools and AI-based classification; handling reports; blocking accounts; preventing multiple accounts.
- Legal compliance: responding to lawful requests of law-enforcement and customs authorities, keeping records required by law.
- Communication (contract and legitimate interest): service emails about your account, offers and rule changes. We do not send marketing emails without your consent.
- Improving the Platform (legitimate interest): aggregated statistics about usage; no advertising profiling.
4. Automated processing
Requests, trips, photos and chat messages may be checked by automated tools, including large language models (AI), to detect prohibited items, fraud, attempts to move communication off-platform and other rule violations. A negative automated result leads to manual review by our team before a decision that significantly affects you (such as a block). You can contest any decision at [email protected].
5. Who we share data with
- Other users: your public profile (name, avatar, verification badges, reviews) and the content of your requests and trips; your contacts and messages — only with the user you have an offer or chat with.
- Authentication providers: Google, Facebook, X, Telegram — only when you choose to sign in with them.
- Authorities: law-enforcement, customs and courts — on a lawful request, or where necessary to protect life, safety or our rights.
- Successors: in a merger or sale of the Platform, under the same protections.
We do not sell personal data and do not share it with advertisers.
6. Where data is stored and transfers
Data is stored on servers in the European Union. Some providers (for example, LLM or email providers) may process data outside your country; we rely on their contractual safeguards and transfer only the minimum needed.
7. How long we keep data
- Account and profile: while the account exists, then deleted within 30 days of deletion.
- Requests, trips, chats and offers: while the account exists; after deletion — anonymized or removed, except data needed for the items below.
- Reports, moderation records and blocked-account data: up to 3 years after the last event, to prevent repeat abuse and to respond to authorities.
- Support correspondence: up to 3 years.
- Technical logs: up to 12 months.
- Longer where the law requires or a dispute is ongoing.
8. Your rights
You can: see the data we hold about you; correct it; delete your account; receive a copy of your data in a machine-readable format; object to processing based on legitimate interest; withdraw consent where processing is based on consent; contest an automated decision; complain to a supervisory authority.
Most of this you can do in your account settings; for the rest write to [email protected]. We respond within 30 days and may ask you to confirm your identity.
9. Security
We use encryption in transit (HTTPS), hashed passwords, access control and logging. No system is completely secure; if a breach affects your data we will notify you and the authorities as required by law.
10. Children
The Platform is for adults only. If we learn that we hold data of a person under 18, we delete it.
11. Cookies
What cookies we use and how to manage them is described in the Cookies policy.
12. Changes
We may update this policy. The current version and date are shown at the top. For material changes we notify you by email or on the Platform.