Privacy Policy

We determine the purposes of processing for accounts, matching, messaging, billing, and product operations. When someone posts a lot, that person is responsible for their own site policies; we process lot and membership data to provide the Service they and the people on that lot use.

If you are in Canada, we handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial private-sector laws (including Alberta’s PIPA and British Columbia’s PIPA where they apply). You may request access to or correction of your personal information, and you may withdraw consent subject to legal or contractual restrictions and reasonable notice.

If you use the Service from the United States, we process information as described here to provide the Service, secure accounts, and bill Host plans or $4 unlocks. We do not sell personal information. Depending on your state, you may have additional rights (access, deletion, correction). Contact us using the details below to exercise rights we can fulfill.

• Account: name or nickname, email address, password (stored hashed), language preference
• Area location: postal code (Canada) or ZIP code (US) used for approximate map placement — not a home street address
• Lots: site name, full site/parking address, site postal/ZIP, country, notes, QR/join code, schedule defaults you choose to set
• Membership & status: which lots you joined, ride status (for example looking / found a ride / hidden), days and hours you enter, optional “found a ride” counters for Hosts
• Messages: content you send to other people on a lot
• Notifications: optional email alerts for new messages when enabled in Profile; password-reset and security emails as needed
• Payments: plan type ($4 unlock, monthly Host, annual Host, Host trial), payment status, customer and subscription identifiers from our processor — we do not store full card PAN data
• Host analytics: aggregated usage such as sign-ups, on-map counts, chats started, and lifetime “rides found” totals (not continuous GPS tracking of homes)
• Safety tools: blocks and reports you submit (and limited related metadata)
• Technical data: IP address, device/browser type, logs, and cookies or similar technologies needed to run, secure, and improve the Service

• Provide matching, maps, messaging, QR join, and Host tools
• Authenticate users and protect accounts
• Process $4 unlocks, Host plans, trials, and invoices
• Show Hosts usage statistics for their lots
• Send transactional emails you enable or that are necessary for the account
• Prevent abuse, enforce Terms, and comply with law
• Improve reliability, performance, and product design

We do not use home street addresses because we do not collect them for matching.

We do not send commercial electronic messages without appropriate consent. Account security emails, password resets, and optional message alerts you turn on are transactional or based on your settings. Marketing email, if offered later, will require express consent and an easy unsubscribe. Contact info@carpoolqr.com about communications preferences.

We share personal information only as needed to operate the Service:

• Service providers under contract (hosting, database, email delivery, payment processing, analytics limited to operating the product)
• Other people on a lot — display name, postal/ZIP area, hours you set, ride status, and messages you send them
• Hosts of lots you join — roster-level information needed to manage the lot (postal/ZIP area, status, hours labels — not home street addresses)
• Legal and safety — when required by law, valid legal process, or to protect rights, safety, and security

We do not sell personal information.

We and our providers may process data in Canada, the United States, or other countries where servers or vendors are located. Where we transfer personal information, we use appropriate contractual and organizational measures consistent with applicable law.

We retain information only as long as needed for the purposes above, legitimate business records (including billing), dispute resolution, and legal obligations. You may delete your account in the product where available, which removes or de-identifies personal data subject to legal retention needs.

We use reasonable administrative, technical, and physical safeguards appropriate to a cloud software service. No method of transmission or storage is 100% secure.

The Service is for users 18 years of age or older. We do not knowingly collect personal information from children.

• Update profile, postal/ZIP, hours, and email notification settings in the app
• Hide yourself from maps and lists using ride status controls
• Block or report other users
• Request access, correction, or deletion by emailing us from your account address
• Close your account using in-app tools where available

We will respond to privacy requests within timeframes required by applicable law. Some requests may be limited by legal exceptions (fraud prevention, legal claims, or mandatory records).

We use cookies and local storage as needed for sign-in sessions, preferences (for example language), and security. Essential cookies are required for the Service to function.

We may update this Privacy Policy. We will post the revised version with a new effective date. Material changes will be highlighted where practical.

Privacy questions and requests:
GSR Solutions Inc. (CarpoolQR)
Alberta, Canada
info@carpoolqr.com