RushVanGet early access

Legal

Privacy Policy

What RushVan collects, why, how long we keep it, and the rights you have over it. Privacy isn’t an afterthought here — it’s built into the product. Last updated: draft, 2026.

Draft — not yet reviewed by counsel. This document is an early-stage skeleton for RushVan. It is not the final policy, may change substantially, and should not be relied on until it is reviewed and published in force.

RushVan is a data controller under the EU General Data Protection Regulation. We process personal data on the bases of: contract (to provide the delivery you booked), legitimate interest (safety, fraud prevention, and improving the service), legal obligation (tax and regulatory), and consent where required (for example, marketing).

  • Booking data — contact details, shipment description, declared value, meeting point or (for heavy/car transport) address, and payment tokens held by our payment processor.
  • GPS location — during active deliveries only. A driver’s location is processed while a shipment is in transit, to power tracking and checkpoints. Tracking stops when the delivery completes; we do not track drivers between jobs.
  • Custody photos — the pickup photo and, for car transport, the condition report, kept as proof of handover state.
  • Account & device data — the information needed to run your account and secure it. Sensitive PII is encrypted at the application layer.
  • Meeting points, not home addresses. For small parcels, handovers happen at public meeting points and home addresses are never stored — the database schema itself forbids storing them. Exact addresses are used only for heavy items and car transport, and revealed to the driver only after matching.
  • Masked calls. Shipper and driver communicate through in-app chat and a neutral number in the middle. Real phone numbers are not shared between users.
  • QR-only labels and delivery PIN. Labels carry a code, not a name or address, and delivery completes with a one-time PIN — so the identity chain stays minimal by default.
  • Tracking pings: retained for 90 days, then deleted.
  • Custody photos: retained for up to 2 years where a shipment is disputed, otherwise deleted sooner.
  • Booking and account records: retained as required for contractual, tax, and legal-obligation purposes, then deleted or anonymized.

Under the GDPR you have the right to access, rectify, erase, restrict, and port your personal data, to object to certain processing, and to withdraw consent where processing relies on it. You may also lodge a complaint with your national supervisory authority. To exercise any of these, contact us using the details below.

Data protection enquiries and rights requests can be sent to our Data Protection Officer at privacy@rushvan.com (placeholder — a named DPO and postal address will be confirmed before launch). RushVan is based in Bacău, România.