Privacy Policy

This policy explains how Flux Drop handles personal information when you create an account, send or deliver a parcel, contact support, or use our apps.

The service is operated by FLUX DROP, an Ontario sole proprietorship registered under Ontario BIN 1001641803.

Registration status: effective 2026-06-11; renewal reminder is sent before 2031-06-10.

Accountability and contact

Our privacy contact is responsible for this policy and privacy requests. Email support@flux-drop.com or write to Flux Drop, London, Ontario, Canada.

Information we collect

Why we use information

We use only the information reasonably needed to create and secure accounts; quote, assign, route, track, and complete deliveries; process wallet, cash-on-delivery, support, refund, and payout workflows; prevent fraud and abuse; satisfy accounting, safety, insurance, and legal duties; and improve service reliability.

Consent and choices

We request account-policy acceptance at registration and device permission before location, microphone, or camera access. You may decline optional device permissions and use manual controls where available. Where required, public-page advertising uses a Google-certified consent message so you can choose and later revisit advertising privacy settings. You may withdraw consent for optional processing, but we may need certain information to provide an active delivery or meet legal obligations.

When information is shared

Senders and couriers receive only the delivery, vehicle, chat, and live-location details needed for their parcel. Authorized operations staff may access records for support, safety, disputes, fraud prevention, refunds, and audits. Hosting, routing, geocoding, speech, payment, notification, backup, and app-store providers process limited information on our instructions when enabled. Some providers may process information outside Canada, where local laws apply.

Flux Drop does not sell personal information. Public editorial pages may use Google AdSense to fund the service after the site and account are approved. Google may use data to select, deliver, and measure contextual or personalized ads according to your consent choices and its advertising privacy information. Authenticated sender, courier, parcel, payment, and private-chat screens remain ad-free.

Retention

Sessions expire after 30 days. Live route/location data is used for active operations. Account, parcel, payment, ledger, support, safety, and audit records are retained only as long as needed for the stated purpose and applicable legal, tax, insurance, fraud-prevention, and dispute periods, then deleted, anonymized, or securely destroyed under our retention schedule.

Safeguards and breaches

Safeguards include HTTPS, one-way password hashing, scoped bearer sessions, least-privilege admin access, rate limits, security headers, signed payment webhooks, audit logging, backups, and operational monitoring. We assess security incidents and notify affected people and regulators when required by law.

Access, correction, deletion, and complaints

You may request access to your information, ask how it was used or disclosed, correct inaccurate information, request deletion where legally available, or challenge our compliance. Contact the privacy email above with your account email and request type. We may verify identity and will respond within timelines required by law.

Children

Flux Drop accounts and courier services are intended for people who are at least 18 years old. Do not create an account for a child.