Kârgo – Privacy Policy

Kârgo – Privacy Policy

Last Updated: May 3, 2026

Your privacy is important to us. This Privacy Policy explains how Kârgo Technologies ("Kârgo", "we", "us", "our") collects, uses, and protects your personal information.

1. Data Controller

For users in the European Economic Area (EEA), the data controller is:

Kârgo Technologies

Contact: kargoappinfo@gmail.com

For legal and privacy matters, please contact us at the email address above. If you are located in the EEA, you also have the right to lodge a complaint with your local data protection authority.

2. Data We Collect

3. How We Use Your Data

For the iOS waitlist, we collect only the email address you submit, the requested platform, the page or campaign source, the consent notice version, and the submission time. We do not store raw IP addresses for the waitlist.

We do not sell your personal data to third parties.

We use third-party service providers to operate the Platform, including:

• Supabase (database and authentication)
• AWS (cloud infrastructure and face detection services)
• Twilio (SMS messaging for verification)
• Payment processors (when payment features are enabled)
• Analytics services (for platform improvement)

These providers are contractually bound to protect your data and use it only for the purposes we specify.

4. Legal Bases (GDPR)

We process data under the following legal bases:

• Contractual necessity – to provide Kârgo services
• Legitimate interests – fraud prevention, safety, product improvement
• Consent – for location, notifications, and certain analytics
• Legal obligation – to comply with applicable laws

5. Data Sharing

We may share limited data with:

• Payment processors
• SMS/Email providers
• Customer support tools
• Analytics and infrastructure providers
• Law enforcement (when legally required)

We do not share your data for advertising or sell your data to third parties.

6. Retention

We retain data for as long as necessary to operate the service and meet legal obligations, including:

• account data – until deletion or inactivity under our retention rules
• trip and item data – for operational, trust, and legal purposes
• logs – for a limited security-related duration

Users may request deletion at any time, subject to legal retention requirements.

6.1 Account Deletion

You have the right to delete your account at any time. Account deletion follows a two-phase process:

Phase 1 (Immediate):

• Your account is immediately marked as deleted and hidden from the platform
• Self-only online package requests and trip listings are withdrawn from matching
• You are logged out of all devices and sessions
• Your profile information is no longer visible to other users

Phase 2 (Within 24 hours):

• Personal data is permanently deleted (messages, notifications, preferences)
• Your identity in historical records is anonymized (ratings, trips, carry requests show as "Deleted user")
• Your authentication account is permanently removed

Data Handling:

• Deleted: Profile information, messages, notifications, notification preferences, account appeals
• Anonymized: Ratings, carry requests, trips (preserved for platform integrity but with anonymized user identity)
• Retained: Safety and fraud reports, earnings records (for tax compliance), account strikes (for safety records)

Recovery Window:

You have 7 days after initiating account deletion to contact support if this was a mistake. After 7 days, deletion cannot be reversed.

How to Delete Your Account:

1. Go to Settings → Privacy & Security → Delete Account
2. Review what data will be deleted, anonymized, or retained
3. Verify your identity (password or OTP code)
4. Type "DELETE" to confirm

Unresolved Transactions:

You cannot delete your account while you have unresolved trips or carry requests involving another user. Online requests and routes with nobody assigned are withdrawn when deletion starts.

Right to Data Portability:

Before deleting your account, you may request a copy of your data by contacting us at kargoappinfo@gmail.com. We will provide your data in a machine-readable format within 30 days.

7. Your Rights (EU/EEA Users)

If you are in the EU/EEA, you have the right to:

• access your data
• correct inaccurate data
• request deletion ("right to be forgotten")
• restrict processing
• object to certain processing
• request data portability
• withdraw consent at any time (where processing is based on consent)

To exercise your rights, contact: kargoappinfo@gmail.com

8. Children

Kârgo is not intended for individuals under 18.

We do not knowingly collect data from minors. If we become aware that a minor has created an account, we will delete the account and associated data.

9. Security

We use industry-standard measures to protect your data, including encryption in transit, secure access controls, and regular security reviews.

No system is perfectly secure. Users are responsible for protecting their own devices, credentials, and network access.

10. International Transfers

Your data may be transferred to and processed in countries outside your country of residence (for example, where our service providers are located).

Where required, we use Standard Contractual Clauses (SCCs) and equivalent safeguards for international transfers.

11. Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay, in accordance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to you via email (to your registered email address) or through a prominent notice in the Platform at least 30 days before the changes take effect, unless changes are required by law or for security reasons.

Continued use of the Platform after changes take effect constitutes acceptance of the updated Policy. If you do not agree to the changes, you must stop using the Platform and may delete your account.

13. Your California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, disclose, and sell
• The right to delete personal information we hold about you (subject to exceptions)
• The right to opt-out of the sale of personal information (Kârgo does not sell personal information)
• The right to non-discrimination for exercising your privacy rights

To exercise these rights, contact: kargoappinfo@gmail.com

14. Contact

If you have questions about your data or this Policy, you can contact us at:

Email: kargoappinfo@gmail.com

For legal and privacy matters, please use the email address above. If you are located in the EEA, you also have the right to lodge a complaint with your local data protection authority.