Privacy-Policy

Data Retention & Deletion

Retention Periods

ReVerta retains your personal data only as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are:

• Account information (name, email, phone, address): retained while your account is active. Upon account deletion, personally identifiable information is wiped immediately (see Account Deletion below).
• Transaction and financial records (order history, payments, surcharges, tips, refunds): de-identified and retained indefinitely after account deletion as required by tax laws, financial regulations, and fraud prevention obligations.
• Driver identity and compliance records (license information, verification status, background check references): retained for the duration of the driver relationship plus the applicable statute of limitations for legal claims.
• Order-related records (order details, chat messages, delivery proof photos): de-identified and retained indefinitely alongside transaction records for dispute resolution and regulatory compliance.
• Analytics and usage data: retained in aggregate form in accordance with our data retention configuration. Raw event-level data ages out according to the storage lifecycle policy.

Account Deletion

You may request deletion of your account at any time via the in-app account settings or by visiting reverta.app/account/delete. Upon deletion:

• Your account is immediately disabled and you can no longer log in.
• Personally identifiable information (for example name, email, phone, address, location data, date of birth, SSN last 4, license and vehicle details for drivers) is obfuscated immediately.
• All active sessions are terminated and authentication tokens are revoked.
• Profile photos, document uploads, and non-order media files are permanently deleted. Order evidence photos (parcel location, delivery proof, weight verification) are retained in de-identified form for dispute resolution.
• A daily automated process re-scans for any PII that may not have been wiped and applies the same tombstone values to accounts deleted more than 30 days ago.
• Transaction records, financial records, order history, and order-associated chat messages are de-identified and retained as required for tax and legal compliance.
• Stripe account data is handled according to Stripe's data retention policies. ReVerta initiates account closure with Stripe as part of the deletion process.

Revoking Consent

You control how your data is collected and used. Each consent category can be toggled independently at any time — no feature is gated on providing data beyond what is necessary for the service.

Behavioral Tracking & Analytics

ReVerta collects first-party analytics events (order flow steps, screen views, feature usage) to improve the service. No third-party analytics SDKs are used. You can opt out:

• In the app: visit Profile > Settings > Privacy & Data and toggle "Allow anonymized analytics" off. This sets a persistent opt-out flag on your account and stops all custom analytics event collection. The toggle takes effect immediately — no app restart needed.
• Browser signals (web): ReVerta respects the Global Privacy Control (GPC) signal sent by compatible browsers and extensions. When the Sec-GPC: 1 header is present, analytics events are dropped server-side regardless of your in-app toggle state. The legacy Do Not Track (DNT) header is also honored on the web client.

Coarse Location (Service Area Detection)

ReVerta uses approximate location (~500 m accuracy) at app launch to detect whether you are in a supported service area. This is the only location data collected before you sign in. You can opt out:

• In the app: visit Profile > Settings > Privacy & Data and toggle "Coarse location for service area detection" off. The coarse_location_collection_consent flag is stored on your account and the app stops all coarse location requests.
• Default: coarse location consent is enabled by default (opt-out model) because service area detection is required for basic app functionality. You may disable it at any time.

Precise Location (Driver GPS)

Drivers share high-accuracy GPS coordinates only when they choose to go online and accept orders. Precise location is never collected from customers. Drivers can revoke consent:

• In the app: visit Profile > Settings > Privacy & Data and toggle "Precise location for order matching" off. You will be taken offline and prompted to set a fixed operating address as an alternative to GPS-based matching.
• System-level: you may also revoke location permission for the ReVerta app entirely via your device's system settings (iOS: Settings > Privacy > Location Services; Android: Settings > Location > App permissions).

Push Notifications

Push notifications are managed entirely through your device's operating system. ReVerta does not gate any functionality on notification permission:

• iOS: Settings > Notifications > ReVerta.
• Android: Settings > Apps > ReVerta > Notifications.
• In-app notifications continue to function regardless of push notification permission.

Data Deletion Requests

You may request full account deletion at any time. See the Account Deletion section above for the complete deletion process and retention timelines.

To exercise any of these rights or for questions about our data practices, contact us at [email protected].