Driver and Applicant Privacy Notice

This Driver and Applicant Privacy Notice supplements the CommuterCart Privacy Policy at /privacy and applies to people who apply to provide or provide Delivery Services through the Platform. It explains CommuterCart's role-specific processing. The main Privacy Policy controls generally; this notice controls if it provides more specific information about Drivers or applicants.

• Identity, contact, date of birth, profile image, government identification, account credentials, signatures, and communications.
• Driver's license, motor-vehicle, address-history, screening, work-authorization where required, insurance, registration, vehicle, permit, professional-credential, emergency-contact, and eligibility information.
• Bank, payout, taxpayer, transaction, earnings, tip, adjustment, chargeback, expense, and information-reporting records.
• Availability, registered trips, home and work areas, route preferences, active days and times, precise and approximate location, heading, movement, route, stop, pickup, delivery, return, distance, and device information.
• Accepted, declined, timed-out, cancelled, reassigned, completed, late, damaged, disputed, or failed delivery records; proof photographs; signatures; support records; ratings; feedback; and incident information.
• Inferences and scores concerning route fit, response, acceptance, cancellation, punctuality, reliability, trust, risk, fraud, qualifications, predicted success, and opportunity ranking.

We collect information from the Driver or applicant; devices and Platform activity; Senders, Recipients, merchants, other Drivers, witnesses, insurers, and claimants; identity, screening, motor-vehicle, insurance, payment, mapping, communications, security, analytics, and support providers; public records; and authorities or other lawful sources.

• Process applications; verify identity, credentials, vehicle, insurance, eligibility, and account security.
• Find, rank, offer, batch, dispatch, track, document, and pay for deliveries.
• Calculate distance, route deviation, timing, payout, tax reporting, ratings, safety, fraud, reliability, and service quality.
• Communicate about applications, offers, deliveries, support, incidents, payments, policy changes, and legal notices.
• Investigate claims, safety events, fraud, account sharing, prohibited items, manipulation, and legal matters.
• Train, test, validate, and improve TransportAI and Platform operations under the safeguards in the main Privacy Policy.

When enabled, we collect location while the Driver is online, available, or performing a delivery, including background location when needed for matching, safety, live tracking, route verification, or payment. We provide contextual device or in-app notice before collecting background location where required. Limited progress, estimated arrival, and route information may be shared with delivery participants during an active delivery. Live sharing ends when the delivery closes, but underlying records are retained under the published schedule.

TransportAI may rank opportunities, evaluate route and item compatibility, suggest timing or payouts, detect anomalies, request verification, and calculate performance or risk measures. Protected characteristics are not intended matching criteria. When an automated output materially restricts eligibility or access and applicable law requires review, the Driver may submit corrections and request human review through /privacy-request. The reviewer may confirm, modify, or reverse the result.

We disclose Driver information to Senders, Recipients, merchants, and pickup contacts only as reasonably needed for delivery, tracking, verification indicators, support, or claims; to providers for hosting, mapping, payments, identity, screening, insurance, communications, analytics, AI, security, storage, and support; to insurers, financial institutions, advisers, authorities, courts, and transaction participants when lawfully necessary; and to recipients directed or authorized by the Driver. Complete credentials, screening reports, government identifiers, and unrelated history are not displayed to ordinary delivery participants.

Covered consumer reports require a permissible purpose, standalone disclosure, and separate authorization under /screening-notice. Required pre-adverse and adverse-action procedures apply. Regulated biometric processing requires the notice and consent described at /biometric-notice. An applicant should submit sensitive identifiers only through an approved secure workflow.

We ordinarily retain core application, eligibility, delivery, payout, tax, screening, and credential-verification records for up to seven years after the application, transaction, or relationship; proof photographs and signatures for up to five years; precise route traces and granular movement data for up to twenty-four months; and recorded support communications for up to three years. Claims, safety investigations, chargebacks, legal holds, insurance requirements, and law may require longer retention. Biometric information follows its separate destruction schedule.

Depending on law, a Driver or applicant may request access, correction, deletion, portability, limitation of sensitive-data use, opt-out of qualifying profiling, withdrawal of consent, or appeal of a denied request. Submit requests through /privacy-request. Device permissions and online availability may also be managed through device and Platform settings, although limiting required information may prevent eligibility, offers, tracking, or payment.

We use safeguards described in the main Privacy Policy and limit screening, identity, payout, and location information to people and providers with an operational need. Alternative accessible formats are available through /support by selecting Accessibility Request, and reasonable assistance with a privacy request is available through /privacy-request.

Privacy questions, complaints, rights requests, and automated-decision appeals may be submitted through /privacy-request. General support, safety reports, claims, accessibility requests, legal notices, and arbitration opt-outs must use /support, or mailed to CommuterCart, 186 Main Street, Farmington, ME 04938, United States. Do not send original identity documents or biometric samples through ordinary mail or messages.