Privacy Policy

We collect information you give us, information generated when you use the Services, and information other users give us about you in the course of a delivery. We collect as little as the service needs to work.

Account information. When you create an account or sign in, we collect your name, email address, and, if you provide it, your phone number, address, and city. If you sign in with Google, we receive the basic profile information Google shares for sign-in (name and email address). You choose a plan at signup: a driver plan, a dispatch plan, or a free Connect account. Your plan sets your role automatically — nobody assigns roles by hand.

Driver information. If you use Fiorego as a driver, we collect your vehicle type, your live location (latitude and longitude) while you are on a route, your route and stop progress, your availability status (active / offline), your delivery results, and your earnings totals. Your phone number is visible only to dispatchers — never to customers.

Dispatcher and fleet information. If you use Fiore Dispatch, we collect your fleet data: your drivers and members, your routes, your stops, your depots, your delivery zones, your service offerings (names, cutoff times, prices), your team invitations, and your unassigned parcel queue. You also provide information about your customers and drivers — their names, delivery addresses, and contact details — because a delivery cannot be planned or completed without them.

Customer (recipient) information. If you receive a delivery through Fiorego, we collect the delivery address, the order details, your delivery preferences (for example "leave at the side door" and instructions to the driver), and your availability notes ("Not Home", "Back in 5 / 10 / 15 / 30 minutes"). If you create a Connect account, we also keep your order history.

Commercial sender information. If you ship parcels as a business through Fiore Connect, we collect your business name, your contact details, the parcels you submit (recipient name, address, notes), and the parcel photos you upload. You can only upload parcels into a dispatcher's system after that dispatcher approves your invitation request.

Proof-of-delivery information. When a delivery is completed, we collect the proof the driver captures: a photo, a signature, a scanned barcode or parcel number, a GPS point, and a timestamp. If a delivery fails, we record the reason given. If a parcel changes drivers, we log each handoff (driver, time, GPS point). Proof photos are of parcels and delivery locations — do not upload identity documents or photos of people unrelated to the delivery.

Payment and billing information. When you start a paid plan, you enter a card during signup so the automatic charge can run after your 7-day free trial. Your card details are handled by Stripe through its secure payment fields. Fiorego does not store your card number in its own database. We keep your billing information (name, billing country, postal / ZIP code, and, for dispatch plans, company name and tax ID if you provide them) and your subscription history (plan, billing period, trial dates, invoices).

Usage and device information. When you use the Services, we collect the features you use, your language preference (English / French), and basic device and connection information (device type, operating system, browser type, IP address, and crash data). We use your approximate location from your IP address or country setting only to show you the right language and currency.

Cookies and similar technologies. The website uses three kinds of cookies, and no advertising cookies:

• Strictly necessary cookies: sign-in session, security, and load balancing. The Services cannot work without these.
• Preference cookies: your language choice (English / French) so the site remembers it.
• Analytics cookies: Wix Analytics, which measures aggregated visits and pages viewed so we can improve the site. Analytics data is aggregated and does not identify you personally.

You can set your browser to refuse non-essential cookies, but some parts of the Services may not work properly without the strictly necessary ones.

We do not collect sensitive categories of personal information (such as race, religion, health data, or biometrics), and we do not sell, trade, or rent your personal information to anyone.

• To provide the Services. To plan and optimize routes, to show drivers their itinerary, to show dispatchers their live fleet board, to show customers live tracking with an ETA, and to record proof of delivery.
• To run live tracking and availability. Your live location as a driver, and your availability note as a customer, are shown to the people who need them for that delivery — and only them (see §3).
• To send notifications. Transactional emails (account, trial reminders, receipts, delivery updates) and delivery notifications to recipients. Notifications respect quiet hours: messages scheduled inside a fleet's or a customer's quiet hours are held and sent when the window opens. Email is currently the notification channel; SMS is not offered unless this policy is updated to say so.
• To bill you. To run your 7-day free trial, to charge the card on file automatically when the trial ends (unless you cancel first), to send receipts and invoices, and to handle failed payments and plan changes.
• To support you and keep the Services safe. To answer support requests, to verify accounts and activity, to detect fraud or misuse, and to enforce our terms.
• To improve the Services. To understand how the Services are used and to build new features. Where we use data for improvement, we work from aggregated or de-identified information wherever possible.
• To comply with the law. Where required by law, or where necessary to protect our legal rights and the safety of our users.

We do not use your delivery data for advertising, and we do not use driver location data for any purpose other than operating the delivery you are on.

This is the core of Fiorego's privacy design. Every view and every query in the Services is gated by role:

• Drivers see only their own assigned route, their own earnings, and their own account. They never see another driver's route or another fleet's stops.
• Dispatchers see everything operational in their own workspace: their drivers' live locations, their routes, their parcels, and their customers' delivery information. They never see another fleet's workspace.
• Customers (recipients) see only their own orders: their own tracking, their own proof of delivery, and their own history.
• Commercial senders see only their own parcels, and only inside the dispatcher system that approved their invitation.
• Driver phone numbers are visible only to dispatchers.
• Availability notes are controlled by the recipient: a new note replaces the old one, and the note clears when the delivery completes.

If you are a dispatcher or a commercial sender, you are responsible for making sure you are allowed to share the recipient and driver information you upload into Fiorego.

We share information only as described here:

• The people involved in your delivery, as set out in §3 (driver, dispatcher, customer, commercial sender — each within their own role).
• Service providers who operate parts of the Services for us, under contracts that limit them to our instructions: Wix, including the Base44 platform, for app and website hosting, Google for maps and navigation and for Google sign-in, Stripe for payment processing, and our email delivery provider for transactional emails. These providers may process data in countries other than your own.
• Legal authorities, only where required by law or to protect safety and our legal rights.

We do not sell your personal information, and we do not share it with advertisers or data brokers.

• Dispatch workspace data (routes, stops, parcels, proof of delivery, analytics) is kept for the retention period of the dispatch plan: Starter 30 days, Premium 1 year, Expert 5 years. After that period, the data is deleted or anonymized.
• Driver and free Connect records are kept while your account is active. When you delete your account, we delete or anonymize them within 30 days, except information we must keep under the legal-hold paragraph below.
• Account and billing information is kept while your account is active and, after deletion, only as long as needed to comply with legal obligations (for example tax records), resolve disputes, and enforce our agreements.
• Marketing preferences are kept until you ask us to delete them.
• Lapsed subscriptions do not delete your data. If a driver plan lapses, it falls back to the Free plan. If a dispatch subscription lapses, the workspace becomes read-only. Nothing is ever deleted because a payment failed or a subscription ended — deletion happens only under this section or at your request under §6.

Under Québec's Law 25 and Canada's federal privacy law (PIPEDA), and similar laws where they apply to you, you have the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Delete your personal information, including deleting your account. To request deletion, use the account settings where available, or contact us at support@fiorego.com. We will confirm once deletion is complete, subject to the legal holds in §5.
• Withdraw consent where processing relies on your consent. Withdrawing consent does not affect processing that has already happened, and may mean you can no longer use the affected Service.
• Ask how your information is used, and to complain to the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada if you believe your rights have not been respected.

You can also, at any time: change your language preference; set your quiet hours; update or replace your availability note; cancel a trial or a subscription from your billing settings (cancelling during a trial means you pay nothing and the automatic charge never happens); and update the card on file.

Access to the Services is gated by account and by role (§3). We apply technical and organizational measures appropriate to the data we hold, including encrypted connections for data in transit. No security system is impenetrable, and we cannot guarantee absolute security of data transmitted over the internet. Keep your account credentials private and tell us promptly at support@fiorego.com if you believe your account has been compromised. Two-factor authentication is not currently offered; this section will be updated if that changes — do not rely on it until it does.

The Services are not directed at children under 14, and accounts may only be created by people with legal capacity to enter into a contract. If you believe a child's information has been provided to us, contact us at support@fiorego.com and we will delete it.

Fiorego is offered worldwide. Your information may be processed and stored in countries other than your own, including where our service providers operate. By using the Services, you understand that your information may be transferred as described in §4.

We may update this policy from time to time. When we do, we will revise the effective date at the top of this page and, for material changes, give notice in the Services or by email before the change takes effect. Your continued use of the Services after a change takes effect means you accept the updated policy. This policy is governed by the laws of the Province of Québec and the federal laws of Canada applicable in Québec.

If you have any questions about Fiorego or this Privacy Policy, or if you want to exercise any right in §6, contact us at support@fiorego.com.