This Privacy Policy explains how Ropayo ("we", "us") collects, uses, and shares personal information when you use our dry cleaning and laundry pickup-and-delivery service, our mobile apps, our customer web app at app.ropayo.com, and this website. If you deliver for us with the Ropayo Driver app, the Drivers section below explains what we collect about you as a driver.
Information we collect
- Account information — your name, email address, and mobile phone number. If you sign in with Google or Apple, we receive your name and email address from that provider.
- Addresses — the pickup and delivery addresses you enter, and any delivery instructions or entry codes you add so our driver can reach your door.
- Order information — the items you send, service selections, order status and history, any special instructions, and photographs our drivers take as proof of pickup and delivery. We remove location and camera details from these photos before we store them. Once an order is delivered, you can see its delivery photo on that order's details, in the app and at app.ropayo.com, until the photo is deleted.
- Payment information — processed by our payment provider. We receive a token and limited card details such as the brand, last four digits, and expiration date; we never receive or store your full card number.
- Device and usage information — push notification tokens, the type of device (iOS or Android), and server logs that include IP address, the pages or endpoints requested, and timestamps.
- Location information — while an order is in progress we process our driver's location so you can follow the delivery, and we keep the driver's last recorded position for each order in case of a dispute. We do not collect your device's location.
- Notification records — a record of each notification we send you, including the message text and whether it was delivered.
How we use your information
- To schedule, fulfill, and deliver your orders.
- To charge you for services and handle refunds and payment problems.
- To send you notifications about your own orders (see below).
- To provide customer support and respond to your requests.
- To detect and prevent fraud, abuse, and security incidents.
- To meet legal, tax, and accounting obligations.
SMS notifications
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. We use a messaging provider solely to deliver the messages you have opted in to receive.
Message frequency varies and depends on your order activity — typically a few messages per order.
Message and data rates may apply. Reply STOP to any message to opt out, or reply HELP for help.
SMS notifications are optional and off by default. You opt in at app.ropayo.com or in the Ropayo app by verifying your mobile number with a one-time passcode, turning on Text notifications in Profile → Notifications, and pressing “Agree & Enable Text Notifications” on the confirmation screen that shows the SMS terms. See how opt-in works, with a screenshot of that screen. When you opt in, we record the date and time, the device you used, and the version of this policy you agreed to, so we can show that you asked for these messages. We send only transactional messages about your own orders — pickup and delivery status, and problems with payment for an order. We do not send marketing or promotional text messages.
You can opt out at any time by turning Text notifications off in Profile → Notifications or by replying STOP. Opting out of SMS does not affect your account, your orders, or email and in-app notifications.
How we share information
We do not sell your personal information. We share it only with service providers who process it on our behalf, under contract, and only as needed to run the service:
- Sign-in and verification — Google Firebase Authentication verifies your sign-in and sends the one-time passcode that confirms your mobile number.
- Payment processing — to charge your card and manage saved payment methods. Our payment provider receives your card details directly; we send it only an internal account identifier and order amounts.
- Messaging and notifications — to deliver SMS, push notifications, and email.
- Cloud hosting and infrastructure — to run and store the service.
- Mapping and address lookup — to validate addresses and plan driver routes. Entry codes are never sent to mapping providers.
- Drivers — the driver assigned to your order sees your name, phone number, address, delivery instructions, and the proof photos for their own stops, and only while they are assigned to it.
- Cleaning facilities — receive the information needed to identify, clean, and return your items.
- Our staff — operations and support staff can view your account, orders, and the notifications we have sent you in order to run the service and help you. Access is limited by role, and changes to who has access are logged.
We may also disclose information when required by law, to enforce our terms, or to protect the rights and safety of our customers, our staff, or the public. If our business is transferred, information may move with it, subject to this policy.
Data retention
We keep your account and order information for as long as your account is active. When you delete your account we remove or anonymize your personal information within 30 days, except for the records we must keep for legal, tax, and accounting purposes, which we keep for 7 years and no longer.
- Proof-of-pickup and delivery photos are deleted 90 days after the order is delivered.
- The driver's last recorded position for an order is deleted 120 days after the order is delivered or closed, in case of a dispute or a chargeback.
- Notification records, including message text, are deleted 12 months after they are sent. The order details attached to a notification are deleted after 30 days.
- Push notification tokens are deleted when you sign out of a device or delete your account.
- Server logs are kept for 30 days.
Security
We use encryption in transit and at rest, role-based access controls, and managed secret storage to protect your information. Entry codes and delivery instructions are visible to the staff and driver who need them to complete your order. No system is perfectly secure, and we cannot guarantee absolute security.
Your choices and rights
- Review and update your account details and addresses in the app.
- Turn text or push notifications on or off at any time in Profile → Notifications.
- Delete your account in the app under Profile → Delete account, or by emailing support@ropayo.com from the address on your account.
- Request a copy of your personal information by emailing support@ropayo.com from the address on your account.
We will verify your request and respond within 45 days. We may need to keep certain records to meet legal obligations, and we will tell you if we do.
Children
Ropayo is for adults. You must be 18 or older to create an account, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, email us and we will delete it.
This website
This website (ropayo.com) sets no cookies and runs no advertising trackers. The ZIP-code check runs entirely in your browser; the ZIP you type is not sent to us or to anyone else. We use Google Analytics in a cookieless mode to count page views and anonymous interactions such as whether a ZIP check succeeded and which area it matched, and which buttons are used. This does not identify you, sets no cookie, and is not used for advertising. Our web host records standard server logs, including IP addresses, for security and reliability. Links from this site to app.ropayo.com may carry a promotional code so it can be applied to your first order.
Your privacy rights
Whether or not a law requires it, every Ropayo customer can ask us what personal information we hold about them, obtain a copy of it, correct it, and have it deleted, and we will not treat you differently for asking. Texas residents may also have rights under the Texas Data Privacy and Security Act. To exercise any of these rights, email support@ropayo.com from the address on your account. We will verify your request and respond within 45 days. We do not sell personal information, and we do not use it for targeted advertising.
Drivers
This section applies if you deliver for Ropayo using the Ropayo Driver app. The rest of this policy also applies to you where it is relevant, such as how we protect information and how to contact us.
- Account information — the name, email address, and US mobile number a Ropayo administrator enters when inviting you, and the sign-in method you use (Google, Apple, or email and password). Your mobile number is confirmed with a one-time code that Google Firebase sends by text message; we never see the code.
- Location — while you are signed in to the Driver app and have a route in progress, the app sends your device's location (coordinates, heading, speed, and accuracy) about every 12 seconds, and about every 3 seconds while a customer is watching their delivery. The app does not collect your location until we have confirmed that you have a route in progress. The app asks for location only while it is in use; it does not request background (“Always”) location access. We do not collect your location while you are signed out.
- Work records — your routes and stops: when you start a route and arrive at and complete each stop, the tasks you complete (such as bag counts, weights, and check-ins), problems and notes you report, and the proof-of-pickup and delivery photos you take with the app's camera. We remove location and camera details from these photos before we store them.
- Device and usage information — your push notification token and device type, server logs (IP address, the requests made, and timestamps), and app usage events (see Analytics below).
The Driver app does not collect your driver's license, vehicle details, Social Security number, date of birth, or a photo of you.
How we use driver information
- To assign and run your routes, and to let customers follow their delivery.
- To confirm pickups and deliveries and to resolve disputes about them.
- To verify your identity and keep your driver account secure.
- To understand how the Driver app is used and to fix problems.
Who sees it
- Customers — while a customer's order is out for delivery and you are on your way to their stop, they can see your live position on a map until the order is delivered. Customers do not see your name or a photo of you in the app. Once their order is delivered, a customer can see the delivery photo you took for it. If you call or text a customer from the Driver app, the call or message comes from your own phone, so the customer will see your phone number.
- Ropayo staff — administrators can see your name, email address, mobile number, account status, and the time of your last location update. Operations staff can see your routes, stop times, notes, and proof photos. Changes to driver accounts, such as invitations and role changes, are logged.
- Service providers — Google Firebase (sign-in, mobile-number verification, and push notifications), Google Analytics for Firebase (app usage), Google Maps (the map customers use to follow a delivery, and directions to your stops), and our cloud hosting provider.
Analytics
The Driver app uses Google Analytics for Firebase to record how the app is used, for example that a route was started, a stop was completed, or a problem was reported. These events are linked to your Ropayo account ID and include standard device information such as the device model and operating system. They do not include your location, customer information, or names, and advertising features are turned off.
How long we keep it
- Your most recent location is stored as a single record that each new update overwrites; we do not keep a history of where you have been. It is deleted when your driver account is deleted.
- The last position recorded for each delivery is kept for 120 days after the order is completed or closed, in case of a dispute or a chargeback.
- Proof photos are deleted 90 days after the order is delivered.
- Route and stop records and notes are kept with the order records they belong to.
- Push notification tokens are deleted when your driver account is deleted.
Your choices as a driver
Driver accounts are closed by a Ropayo administrator rather than in the app. To close your account, or to ask for a copy of your information or a correction, email support@ropayo.com from the address on your account; we will verify your request and respond within 45 days. When your account is deleted, we remove or anonymize your account information within 30 days and delete your stored location and push notification tokens. Route and stop records and account-change logs that refer to you are kept, because they are part of customers' order history and our business records.
Changes to this policy
We may update this policy from time to time. When we do, we will change the "Last updated" date above, and for significant changes we will notify you in the app or by email.
Contact us
Ropayo support@ropayo.comSee our contact page for more ways to reach us.