Privacy policy
What we collect, why, who sees it, and how to get a copy or have it deleted. Last updated 4 November 2026.
Who is responsible
SwiftHaul is responsible for the personal information described here. Our privacy contact is [email protected].
We are a Manitoba business, so the Personal Information Protection and Electronic Documents Act (PIPEDA) applies to us. Manitoba has no general private-sector privacy statute; its health-information law does not cover this service.
What we collect
- Account: name, email, phone number, password (stored only as a salted scrypt hash), and whether you signed in with Google.
- Jobs: pickup and drop-off addresses, the description of the load, photos you or the driver take at booking, pickup and delivery, the depot or donation receipt, and the job timeline.
- Payments: the amount, its status and the provider reference. Card details go directly to the payment provider and never reach our servers.
- Drivers: licence class and expiry, vehicle description and plate, gross vehicle weight rating, insurance and cargo-cover expiry, background-check date and WCB clearance date.
- Location: a driver's device location while the driver is online, so jobs can be offered nearby and tracked. It is refreshed when the driver updates presence, and the last position stays on the driver record until it is replaced.
- Technical: session records (token hash, user agent, IP address) so you can be signed in and sessions can be revoked.
Why we use it
- To quote, book, dispatch, track and complete a job.
- To keep drivers, customers and loads safe, including checking that a driver and vehicle are legally allowed to carry the load.
- To take payment, issue receipts and handle claims and refunds.
- To meet tax, insurance and record-keeping duties.
- To answer support requests and, where you have agreed, to tell you about your job.
Consent and location
We ask for your agreement to these terms and this policy when you create an account and again when you book, and we record the time you agreed.
Driver location is collected only while a driver is online. It is required to offer nearby jobs and to show the customer where the truck is, and it is not used for anything else. Turning off "online" stops collection.
We do not require you to agree to marketing to use the service, and we do not send marketing messages without a separate, optional opt-in.
Who sees it
- The driver assigned to your job sees your name, phone number and pickup address. The exact drop-off address is hidden from drivers until they accept the job; before that they see only the neighbourhood.
- Service providers who host our systems, process payments, send messages and store photos, under contracts that limit them to our instructions.
- Authorities where the law requires it, or where we need to establish or defend a legal claim.
- We do not sell personal information.
Where it is processed
Some providers process data outside Canada, including in the United States. Where that happens, the information is still protected by this policy and by the providers' contractual obligations, and it may be accessible to courts and authorities in those countries.
How long we keep it
- Account details while your account is open, and for a short period after it is closed while backups cycle.
- Job, photo, claim and payment records for as long as tax, insurance and limitation periods require. Photos of a delivery are evidence in a damage claim, so they are kept with the job record, not deleted when the job ends.
- Breach records for two years, as PIPEDA requires, whether or not the breach was reported.
Your rights
You can ask for a copy of your information, ask us to correct it, withdraw consent (which may end the service), or ask us to delete it.
The account page has a "Download my data" link that returns a machine-readable copy immediately, and an account-closing option that removes your personal details.
Closing your account removes your name, email, phone and driver documents. Completed jobs, delivery photos and claims are kept without your name attached, because they are our tax, insurance and dispute records.
To make any other request, email [email protected]. We respond within 30 days.
Security and breaches
Passwords are hashed with scrypt, session tokens are random and stored only as hashes, and traffic is encrypted in transit.
If a breach creates a real risk of significant harm, we report it to the Office of the Privacy Commissioner of Canada and notify affected people as soon as feasible, and we keep a record of every breach.
Cookies
The website sets one HttpOnly session cookie so you stay signed in. It is not used for advertising or cross-site tracking.