P1. Who controls your data

G AND J TRADING INC. is the controller of personal information collected through CarryIt. Contact us at notifications@carryit.today for any privacy request. We handle personal information in accordance with Canada's PIPEDA and applicable Canadian provincial and U.S. state privacy laws.

P2. Information we collect

Account information: name, email, phone number, password (hashed), profile photo, and government-issued ID image for verification.

Delivery information: pickup and drop-off addresses, item descriptions, dimensions, weight, item photos, prices, timestamps, and delivery status.

Location information: approximate or precise location used for matching, route preview, and tracking of an active delivery.

Communications: in-app messages between users, and support correspondence.

Payment information: processed by Stripe. We store only limited identifiers (for example, the last digits of a card and payout status), never full card numbers or bank credentials.

Technical information: device type, browser, IP address, and usage and error logs.

P3. Why we use it

To create and secure your account; verify identity; match Requesters and Carriers; enable messaging, routing, and tracking; process payments and payouts; prevent fraud and abuse; provide support and resolve disputes; comply with legal, tax, and safety obligations; and improve and communicate about the service.

We do not sell your personal information, and we do not use your government-issued ID for advertising.

P4. What other users can see

Other users see your first name, profile photo, rating, and role. When a job is matched, the Requester and Carrier see each other's phone number and the exact pickup and drop-off addresses needed to complete the delivery. Before matching, precise addresses are shown only in an approximate form.

Your government-issued ID is never shown to other users.

P5. Who we share it with

Service providers acting on our instructions: hosting and database infrastructure, payment processing (Stripe), mapping and geocoding (Google Maps Platform), email delivery, identity verification, and analytics or error monitoring.

Authorities or third parties where required by law, to enforce these Terms, or to protect the rights, safety, or property of any person. In the event of a corporate transaction, information may transfer to a successor under equivalent protection.

P6. Storage, transfers, and security

Data may be stored and processed in Canada, the United States, or other countries where our providers operate, and may be subject to lawful access requests there. We use encryption in transit, access controls, row-level database security, and least-privilege access. No system is perfectly secure; we will notify you and applicable regulators of a breach where required.

P7. Retention

We retain account and delivery records for as long as your account is active and afterwards as needed to meet tax, accounting, safety, and legal obligations (generally up to seven years for financial records). Government-issued ID images are retained only as long as needed for verification and dispute or fraud investigation, then deleted.

P8. Your rights

Subject to applicable law, you may access, correct, delete, or obtain a portable copy of your personal information, withdraw consent, object to certain processing, and, in some U.S. states, opt out of targeted advertising, sale, or profiling. Requests go to notifications@carryit.today and are answered within 30 days. We will not discriminate against you for exercising these rights.

Withdrawing consent for identity verification or location may prevent you from using core parts of CarryIt.

P9. Children

CarryIt is not for anyone under 18. We do not knowingly collect information from minors and will delete it if identified.

P10. Cookies and similar technologies

We use strictly necessary cookies and local storage to keep you signed in and secure the session, plus limited analytics and error monitoring. We do not use third-party advertising cookies.