Privacy Policy

Effective Date: 1/1/2025
Last Updated: 3/6/2026

Welcome to mileXchange, a leading on-demand delivery and logistics platform that connects customers, restaurants, merchants, and delivery drivers. mileXchange, Inc. ("we," "our," "us," or "Company") is committed to protecting your privacy and being transparent about our data practices.

This Privacy Policy explains how we collect, use, share, and protect information when you use our mobile application, website, and related services (collectively, the "Services"). This policy applies to all users of our platform, including customers, delivery drivers, restaurant partners, and merchants.

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

a. Personal Information You Provide

When you create an account or use our Services, we collect:

  • Account Information: Name, email address, phone number, profile photo
  • Identity Verification: Government-issued ID, Social Security Number (for drivers), tax information
  • Payment Information: Credit card details, bank account information, payment preferences
  • Delivery Information: Delivery addresses, special instructions, contact preferences
  • Communications: Messages, reviews, ratings, customer service interactions

b. Information We Collect Automatically

  • Cookies and Similar Technologies: Cookies and local storage to enhance user experience

c. Information from Third Parties

  • Social Media: Profile information when you connect social media accounts

2. Location Information and Mobile Permissions

a. Location Data Collection

Location information is fundamental to our delivery services. We collect location data through:

  • Precise Location (GPS): Real-time location for order matching, delivery tracking, and navigation
  • Approximate Location: General area information for service availability and local content
  • Background Location: Continuous location tracking for active drivers to provide real-time updates

b. How We Use Location Information

  • Service Delivery: Match customers with nearby restaurants and available drivers
  • Real-time Tracking: Provide order tracking and estimated delivery times
  • Proximity Notifications: Alert restaurants when drivers are nearby for pickup
  • Safety Features: Emergency assistance and incident reporting
  • Service Improvement: Analyze delivery patterns and optimize service areas

c. Mobile App Permissions

Our mobile app may request the following permissions:

  • Location Services: Required for core delivery functionality
  • Camera: To scan QR codes, take delivery photos, and verify identity
  • Photo Library: To upload profile photos and delivery confirmation images
  • Push Notifications: Order updates, delivery notifications, and promotional messages

Permission Control: You can manage these permissions through your device settings. Note that disabling certain permissions may limit app functionality.

3. How We Use Your Information

a. Service Provision

  • Process and fulfill delivery orders
  • Connect customers with restaurants and drivers
  • Facilitate payments and process refunds
  • Provide customer support and resolve disputes
  • Verify driver eligibility and conduct background checks

b. Safety and Security

  • Verify user identity and prevent fraud
  • Investigate security incidents and policy violations
  • Provide emergency assistance and safety features
  • Comply with legal obligations and law enforcement requests

c. Service Improvement

  • Analyze usage patterns to enhance user experience
  • Develop new features and improve existing ones
  • Conduct research and analytics for business optimization
  • A/B test different app features and interfaces

d. Communications

  • Send order confirmations, delivery updates, and receipts
  • Provide customer support and respond to inquiries
  • Send promotional offers and marketing communications (with consent)
  • Notify about policy changes and service updates

4. Information Sharing and Disclosure

We do not sell, rent, or lease your personal information to third parties for advertising or marketing purposes.

We may share your information in the following circumstances:

a. Within the mileXchange Platform

  • Between Users: Limited information sharing between customers, drivers, and restaurants necessary for service delivery
  • Delivery Updates: Sharing delivery status and location with all parties involved in an order
  • Reviews and Ratings: Publicly displaying reviews and ratings (without personal contact information)

b. Service Providers and Business Partners

  • Payment Processors: For secure payment processing and fraud prevention
  • Background Check Providers: For driver verification and safety screening
  • Cloud Service Providers: For data storage and infrastructure services
  • Analytics Services: For app performance monitoring and user experience improvement
  • Customer Support: Third-party support services to assist with user inquiries

c. Legal and Safety Requirements

  • Legal compliance and law enforcement requests
  • Protection of rights, property, or safety of users and the public
  • Investigation and prevention of fraud or illegal activities
  • Enforcement of our Terms of Service and policies

d. Business Transactions

  • Mergers, acquisitions, or sale of assets
  • Bankruptcy or restructuring proceedings
  • Due diligence for potential business transactions

5. Data Retention and Storage

We retain your information for different periods depending on the type of data and purpose:

a. Account Information

  • Active Accounts: Retained while your account remains active
  • Inactive Accounts: Deleted after 3 years of inactivity
  • Closed Accounts: Most data deleted within 30 days, with some information retained for legal compliance

b. Transaction and Order Data

  • Order History: Retained for 7 years for tax and accounting purposes
  • Payment Information: Tokenized data retained as required by payment processors
  • Delivery Records: Retained for 2 years for customer service and dispute resolution

c. Driver Information

  • Background Check Results: Retained for 7 years as required by law
  • Driving Records: Retained for the duration of driver relationship plus 3 years
  • Tax Documents: Retained for 7 years for IRS compliance

6. Your Privacy Rights and Choices

You have several rights regarding your personal information:

a. Access and Portability

  • Account Dashboard: View and manage your information through your account settings

b. Correction and Updates

  • Profile Updates: Modify your account information directly in the app

c. Deletion and Restriction

  • Account Deletion: Delete your account and associated data (subject to legal retention requirements)
  • Selective Deletion: Request deletion of specific types of personal information
  • Processing Restriction: Limit how we use your personal information

d. Communication Preferences

  • Notification Settings: Customize push notifications and alerts
  • Communication Channels: Choose your preferred contact methods

Exercising Your Rights: To exercise these rights, contact us at privacy@milexchange.ai or through your account settings.

7. Data Security and Protection

We implement comprehensive security measures to protect your personal information:

a. Technical Safeguards

  • Encryption: Data encrypted in transit (TLS 1.2+) and at rest (AES-256)
  • Access Controls: Multi-factor authentication and role-based access systems
  • Network Security: Firewalls, intrusion detection, and regular security monitoring
  • Secure Infrastructure: SOC 2 compliant cloud hosting with regular security audits

b. Operational Safeguards

  • Employee Training: Regular privacy and security training for all staff
  • Incident Response: 24/7 security monitoring and rapid incident response procedures

c. Data Breach Response

In the event of a security incident affecting your personal information, we will:

  • Investigate and contain the breach immediately
  • Notify affected users within 72 hours when legally required
  • Cooperate with law enforcement and regulatory authorities
  • Implement additional safeguards to prevent future incidents

8. Children's Privacy

Our Services are not intended for children under 13 years of age.We do not knowingly collect personal information from children under 13. If we discover that we have inadvertently collected personal information from a child under 13, we will delete such information immediately.

Age Verification: Users must be at least 18 years old to create a driver account or 13 years old for a customer account (with parental consent for users 13-17). We may request age verification during account creation.

If you are a parent or guardian and believe your child has provided personal information to us, please contact us at privacy@milexchange.ai.

9. California Consumer Privacy Act (CCPA) Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

a. Right to Know

  • Categories of personal information collected about you
  • Sources from which personal information is collected
  • Business or commercial purposes for collecting personal information
  • Categories of third parties with whom we share personal information

b. Right to Delete

Request deletion of your personal information (subject to certain exceptions for legal compliance, fraud prevention, and service provision).

c. Right to Opt-Out

While we do not sell personal information for monetary consideration, if we ever change this practice, you will have the right to opt-out of such sales.

d. Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights by denying services, charging different rates, or providing different service quality.

e. Exercising CCPA Rights

To exercise these rights, submit a request via:

10. International Data Transfers and Global Privacy

mileXchange operates globally and may transfer your information to countries outside your country of residence, including the United States, for processing and storage.

a. Data Transfer Safeguards

  • Standard Contractual Clauses: We use EU-approved Standard Contractual Clauses for transfers to countries without adequacy decisions
  • Adequacy Decisions: We rely on European Commission adequacy decisions where applicable
  • Binding Corporate Rules: Internal policies ensuring consistent privacy protection across global operations

b. Regional Compliance

  • GDPR (European Union): Full compliance with General Data Protection Regulation
  • PIPEDA (Canada): Compliance with Personal Information Protection and Electronic Documents Act
  • CCPA (California): Compliance with California Consumer Privacy Act
  • Local Laws: Adherence to applicable privacy laws in all jurisdictions where we operate

11. Analytics and Advertising

a. Analytics Services

We use third-party analytics services to understand app usage and improve our services:

  • Google Analytics: Website and app usage analytics (data anonymized)
  • Firebase Analytics: Mobile app performance and user behavior analytics
  • Amplitude: User engagement and feature usage analytics

b. Advertising and Marketing

  • Promotional Communications: We may send marketing emails and push notifications (opt-out available)
  • Referral Programs: Track and reward user referrals and promotional campaigns
  • Social Media: Integration with social platforms for sharing and promotion

c. Cookie Policy

We use cookies and similar technologies for:

  • Essential functionality and security
  • Performance monitoring and analytics
  • Personalization and user preferences
  • Marketing and advertising (with consent where required)

You can manage cookie preferences through your browser settings or our cookie preference center.

12. Third-Party Integrations and Services

Our Services integrate with third-party platforms and services:

a. Payment Processors

  • Stripe: Credit card and ACH payment processing
  • PayPal: Alternative payment options
  • Apple Pay/Google Pay: Mobile wallet integration

b. Mapping and Navigation

  • Google Maps: Mapping, geocoding, and navigation services
  • Mapbox: Additional mapping and location services

c. Communication Services

  • Twilio: SMS notifications and two-factor authentication
  • SendGrid: Email delivery and marketing communications

These third-party services have their own privacy policies and terms of service. We encourage you to review their policies when using these integrated services.

13. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, regulations, or for other operational, legal, or regulatory reasons.

a. Notification of Changes

  • Material Changes: We will provide at least 30 days advance notice via email and in-app notifications
  • Minor Updates: Posted on our website with updated "Last Updated" date
  • Legal Requirements: Immediate updates when required by law with prompt user notification

b. Continued Use

Your continued use of our Services after any privacy policy changes indicates your acceptance of the updated policy. If you disagree with changes, you may close your account before the changes take effect.

14. Contact Information and Data Protection Officer

For questions, concerns, or requests related to this Privacy Policy or your personal information, please contact us:

a. General Privacy Inquiries

  • Email: privacy@milexchange.ai
  • Phone: 1-800-MILE-X-CHANGE (1-800-645-3924)
  • Mail: mileXchange, Inc., Privacy Department, 123 Innovation Drive, San Francisco, CA 94105

b. Data Protection Officer

For GDPR-related inquiries and European users:

  • Email: dpo@milexchange.ai
  • EU Representative: mileXchange EU Ltd., Data Protection Officer, Dublin, Ireland

c. Customer Support

  • In-App Support: Available 24/7 through the mobile app
  • Live Chat: Available during business hours on our website

d. Regulatory Complaints

If you believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with your local data protection authority:

  • EU Residents: Contact your national Data Protection Authority
  • California Residents: California Attorney General's Office
  • Other Jurisdictions: Contact your local privacy regulator