Privacy Policy

Personal Information

When you register for ProtoPost, we collect:

• Full name
• Email address
• Phone number
• Delivery addresses
• Payment information (processed securely through third-party providers)

Delivery Information

We collect details about your parcels including sender and recipient information, package dimensions, delivery instructions, and tracking preferences to facilitate our delivery services.

Device Information

We automatically collect device information such as device type, operating system, unique device identifiers, mobile network information, and app version to improve our services and troubleshoot issues.

Identity Verification Information

For senders using our service, we collect government-issued identification documents to verify identity and prevent fraud. This includes:

• Government ID (national ID card or passport)
• Photo captured via device camera for verification purposes

ID verification is required only for senders to ensure secure and trustworthy delivery services. Regular recipients do not need to provide ID verification.

Service Providers

We share data with third-party service providers who assist us in operating our app, processing payments, sending notifications, and analyzing app usage. These providers are contractually obligated to protect your data and may only use it for the specific services they provide to us.

Delivery Personnel

We share necessary delivery information (recipient name, address, phone number) with our delivery personnel to complete your orders.

Data Storage Location

Your data is stored on secure servers located in France through OVH Cloud infrastructure. We use dedicated hosting to ensure optimal performance and security. France is part of the European Union and subject to GDPR data protection regulations. We do not store data in countries designated as foreign adversaries by the United States or European Union.

No Advertising or Cross-App Tracking

Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or to protect our rights, property, or safety.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.

Essential Cookies (Required)

Required for app functionality, authentication, security, and session management. These cannot be disabled.

Analytics Cookies (Optional - Future)

When Firebase Analytics is implemented in the future, it will help us understand how users interact with our app to improve services. You will be able to opt-out through app settings.

Preference Cookies

Remember your settings and preferences (language, notification preferences) for a personalized experience.

Age Verification

We rely on age verification mechanisms provided by the Apple App Store and Google Play Store to ensure users meet the minimum age requirement of 18 years. These platforms verify user age during account creation and app download. Our app is rated 18+ on both app stores.

Parental Consent

In jurisdictions requiring parental consent for minors, we comply with app store-level consent mechanisms. Parents or guardians maintain control over app downloads and purchases through Family Sharing settings on their respective platforms (Apple Family Sharing or Google Family Link).

If We Discover Underage Users

If we become aware that a user under 18 has provided us with personal information, we will take immediate steps to delete such information from our systems within 48 hours. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at [email protected].

Primary Data Storage

Your data is primarily stored on secure servers located in France (European Union) through OVH Cloud infrastructure. France is subject to the EU General Data Protection Regulation (GDPR), which provides strong data protection standards.

Cross-Border Transfers

When we transfer data internationally, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Transfers only to countries with adequate data protection laws
• Encryption of data in transit and at rest
• Contractual obligations with third-party service providers

Restricted Countries

We do NOT transfer or store your data in countries designated as foreign adversaries or countries with inadequate data protection standards by the United States, European Union, or international regulatory bodies.

Your Rights Across Borders

Regardless of where your data is stored or processed, you retain all privacy rights described in this policy, including the right to access, correct, delete, and port your data.

Your California Rights

• Right to Know: Request information about the personal data we collect, use, disclose, and sell
• Right to Delete: Request deletion of your personal data (subject to legal exceptions)
• Right to Correct: Request correction of inaccurate personal data
• Right to Opt-Out: Opt-out of the sale or sharing of personal data
• Right to Limit: Limit the use of sensitive personal information
• Right to Non-Discrimination: Not be discriminated against for exercising your rights

Categories of Personal Information We Collect

How to Exercise Your Rights

To exercise your California privacy rights:

• Email us at [email protected] with "California Privacy Request" in the subject line
• Use the in-app account deletion feature (Settings → Account Settings → Delete Account)
• We will verify your identity before processing your request
• We will respond within 45 days (may extend to 90 days with notification)

Authorized Agent

You may designate an authorized agent to make requests on your behalf. The agent must provide written authorization signed by you, and we may require you to verify your identity directly with us.