Privacy Policy

Effective May 3, 2026

Overview

This Privacy Policy describes how ShuttleSnap ("we", "us", "our") collects, uses, and shares information when you use our website and services (the "Service"). By using the Service, you agree to the practices described here.

Information We Collect

Information you provide

  • Account information: name, email address, phone number, and password (hashed).
  • Vehicle information: make, model, color, license plate, and other details you add to your account to facilitate shuttles.
  • Booking information: river, put-in and take-out access points, dates, vehicle details, key-exchange instructions, and any special notes.
  • Provider information: if you sign up as a Provider, your business name, service description, rivers and access points serviced, and Stripe Connect account details.
  • Communications: messages you send us through support, email, or SMS.

Information collected automatically

  • Device & log data: IP address, browser type, pages viewed, timestamps.
  • Cookies & similar technologies: session cookies for authentication and preference cookies (e.g., cookie-consent state). See "Cookies" below.

Payment information

Payments are processed by Stripe, Inc. Card numbers and bank details are entered directly into Stripe and are not stored on our servers. We receive a token and metadata (e.g., last four digits, brand, expiration) needed to display and manage your payment methods.

How We Use Information

  • To create and manage your account;
  • To facilitate bookings and payments between Customers and Providers;
  • To send transactional emails (booking confirmations, receipts, login links);
  • To send SMS notifications about your booking, where applicable;
  • To provide customer support and respond to inquiries;
  • To detect, prevent, and address fraud, abuse, and security issues;
  • To improve and personalize the Service;
  • To comply with legal obligations.

How We Share Information

We share information only as described below:

  • With Providers you book with: your name, contact details, vehicle details, and booking information so they can fulfill the shuttle.
  • With Customers who book a Provider: the Provider's business name, contact information, and pricing.
  • Service providers who help us operate the Service:
    • Stripe, Inc. — payment processing and Connect payouts
    • Mailgun (Sinch) — transactional email delivery
    • Twilio — SMS notifications
    • Fly.io — application hosting
  • Legal compliance: when required by law, subpoena, or to protect rights, safety, or property.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, your information may be transferred, subject to standard confidentiality protections.

We do not sell your personal information.

SMS Messaging

When you provide your mobile phone number and opt in during booking, we use it to send transactional SMS messages about your booking — including booking confirmations, status updates, and communications from your shuttle driver. SMS messages are delivered through our messaging provider, Twilio.

Message frequency varies based on your booking activity. Message and data rates may apply. You may opt out at any time by replying STOP to any message, or get help by replying HELP.

No mobile information (including phone numbers and SMS opt-in data) will be shared with third parties or affiliates for marketing or promotional purposes. All the categories listed in "How We Share Information" above exclude text-messaging originator opt-in data and consent; this information will not be shared with any third parties other than the messaging provider strictly necessary to deliver the messages you've requested.

Cookies

We use cookies and similar technologies to keep you signed in, remember your preferences, and measure site usage. Strictly necessary cookies (e.g., session and CSRF) cannot be disabled. You can clear cookies in your browser at any time, though this may affect site functionality.

Data Retention

We retain account and booking information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it.

Your Rights

Depending on where you live, you may have the right to access, correct, delete, or export the personal information we hold about you, or to object to or restrict certain processing. To exercise these rights, contact privacy@shuttlesnap.com . We will respond within the time required by applicable law.

California residents: You may have additional rights under the CCPA/CPRA, including the right to know what personal information we collect and to request deletion.

EEA/UK residents: Where we process your information under GDPR, our lawful bases are contract performance, legitimate interests, legal obligation, and consent (where required). You may lodge a complaint with your local data protection authority.

Security

We use industry-standard safeguards (TLS in transit, hashed passwords, role-based access) to protect your information. No system is perfectly secure, however, and we cannot guarantee absolute security.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or by posting a notice on the Service. Continued use of the Service after a change constitutes acceptance of the revised Policy.

Contact

Questions about this Policy or our data practices? Email privacy@shuttlesnap.com .