Privacy Policy

• Account owners and team members who sign in to the web dispatcher portal to manage routes, drivers, vehicles, and depots.
• Drivers who sign in to the mobile app to view assigned routes, capture proof of delivery, and update stop outcomes.
• Visitors to our marketing site at routesandmaps.com.

We do not collect personal information about your end customers (the recipients of deliveries) directly — that data is provided to us by you, our customer, and is processed under your direction.

Account information

• Name, email address, and (optionally) phone number
• A hashed password (we never see your plaintext password)
• If you sign in with Google or Apple: the email address and name returned by those identity providers
• Your role within an organization (owner, admin, dispatcher, driver, viewer)

Operational data you create

• Routes, stops, delivery addresses, time windows, and notes
• Driver, vehicle, and depot profiles
• Address book entries and territories

Driver mobile app data

• Location — your device’s GPS coordinates while a route is active, so dispatchers can see live progress and so we can produce accurate ETAs. We stop collecting location when you finish or pause a route. You can revoke location permission at any time in your device settings.
• Camera and photos — if you capture proof of delivery (PoD) photos at a stop, we store those images on our servers, linked to the stop. We don’t access your camera roll or other photos.
• Signatures — if a recipient signs on screen, we store the signature image, linked to the stop.
• Push notification tokens — an opaque token issued by Apple or Google so we can deliver route assignments and updates.

Usage and technical data

• App version, operating system, device model, language
• Counts of routes planned, stops dispatched, optimizations run (used for billing)
• Crash diagnostics — if the app crashes, we collect a stack trace and device state (without personally identifying you) so we can fix bugs
• Server logs — IP address, timestamps, and request paths, retained for a limited time for security and debugging

Billing data

• Subscription status, plan, billing period, and invoice history. Payment card details are handled by Stripe and are never stored on our servers.

• To provide the route planning, optimization, and dispatch service
• To authenticate you and keep your account secure
• To deliver push notifications (route assignments, dispatch events) and transactional emails (password reset, billing, account)
• To bill subscriptions and produce invoices
• To diagnose crashes and improve the product
• To respond to your support requests
• To comply with legal obligations

We do not sell your personal information, and we don’t use your data to build advertising profiles.

We use a small set of trusted service providers (sub-processors) to run the platform. They process data only on our instructions and only to deliver their service:

• Google Cloud Platform — hosting, database, file storage (PoD photos and signatures), and crash reporting (Firebase Crashlytics)
• Google Maps Platform — geocoding, map tiles, directions, and Places autocomplete
• Google Sign-In — optional sign-in via your Google account
• Apple — Sign in with Apple authentication and Apple Push Notification service for iOS push delivery
• Firebase Cloud Messaging — push notification delivery on Android
• Stripe — subscription billing and payment processing. Stripe is PCI-DSS Level 1 certified and handles all card data directly.
• Email delivery providers — for transactional email (account verification, password reset, billing receipts)

We do not share your personal information with other third parties except:

• With your organization — if you’re a driver, your dispatchers see your assigned routes and live location while a route is active
• When required by law — in response to a valid legal process such as a subpoena or court order
• In a business transition — if Routes & Maps is acquired or merges with another company, your data may transfer to the successor entity, subject to this Privacy Policy

• Account and operational data: kept while your account is active and for up to 30 days after deletion to support recovery from accidental deletion
• Driver location pings: retained per your organization’s retention setting, typically 30 to 90 days
• PoD photos and signatures: retained as long as the linked stop record exists, then deleted with the stop
• Billing and tax records: retained for as long as required by US law (typically 7 years)
• Crash diagnostics: retained for up to 90 days
• Server logs: retained for up to 30 days

You can request deletion of your account at any time by emailing us — see “Your rights” below.

We protect your information with industry-standard measures, including:

• HTTPS / TLS for all data in transit
• Encryption at rest for our databases and file storage
• Bcrypt hashing for passwords
• HttpOnly session cookies and short-lived sign-in tokens
• Role-based access controls within each organization
• Regular software updates and dependency monitoring

No system is perfectly secure. If we discover a breach affecting your data, we’ll notify you in accordance with applicable law.

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and personal information
• Export your data in a portable format
• Object to certain processing or withdraw consent
• Lodge a complaint with a data protection authority if you’re in a jurisdiction with one (such as the EU or UK)

To exercise any of these rights, email us at support@routesandmaps.com. We’ll respond within 30 days.

Routes & Maps is intended for business users and is not directed at children under 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we’ll delete it.

Routes and Maps, LLC is based in the United States and our servers are hosted in US-based data centers. If you access the service from outside the US, your information will be transferred to and processed in the United States.

We may update this Privacy Policy from time to time. If we make material changes, we’ll notify you by email or through the app before the changes take effect. The “Last updated” date at the top of this page reflects when the policy was last revised.

Routes and Maps, LLC
Sheridan, Wyoming, USA
support@routesandmaps.com