Privacy Policy for B-Line Logistics

Effective Date: [DATE — set when this version is published]

Draft pending legal review. This document was drafted to describe what the app actually does, but it has not yet been reviewed by an attorney. Do not rely on it as your final Privacy Policy for paying customers until it has been reviewed and this notice is removed.

1. Introduction

This Privacy Policy explains how B-Line Logistics ("we," "us," or "our") collects, uses, and safeguards information when you use the B-Line Logistics dispatch and routing application (the "Service"). B-Line Logistics is a multi-tenant platform: each customer organization's data is kept separate from every other organization's, and this policy applies the same way to every organization that uses the Service, whatever its size.

2. Who This Applies To

This policy covers three separate parts of the Service, and what we collect differs between them:

3. Information We Collect

CategoryWhatFrom whom
Account dataName, email address, phone number (optional), city/state/ZIP, role Dispatch staff, at signup or when invited
Operational dataPickup and route records, business directory entries, notes, time-clock punches, activity labelsDispatch staff, entered while using the app
Receipt imagesPhotos of receipts uploaded for expense tracking, and the merchant, amount, category and date extracted from themDispatch staff
Request dataBusiness name, address, phone/email, and pickup notes Client/business contacts (via the QR portal) and public requesters (via the intake form)
Usage/security dataBasic access timestamps and device/browser information logged by our infrastructure providers to keep the system secureAutomatically, from all users

4. How We Use Your Information

We do not use your information for advertising, and we do not sell, rent, or share personal data with third-party marketing or advertising companies.

5. Third-Party Services We Use

Some information is necessarily processed by outside services in order for the Service to work. We choose providers that only use this data to provide the service we've asked for, not for their own purposes.

ProviderWhat we send itWhy
Google FirebaseAccount data, operational data, request data, receipt images Authentication, database, file storage, and push notifications — the platform the app is built on
Google Gemini APIReceipt photos you upload Automatically reads the merchant, date, and amount off the receipt so you don't have to type it in (analyseReceipt). This is an automated process; no person at Google reviews your receipts as part of it.
ResendYour email address, name, and (for invitations) a one-time account setup link Delivers account verification, password-reset, and team-invitation emails on our behalf. Every automated email comes only from noreply@b-linelogistics.com.
ntfy.shA driver pickup alert (no customer names or addresses) is currently posted to a shared, publicly-readable ntfy.sh topic An interim way to push a "new request" alert to a driver's phone. This is a known gap we are actively closing — the same shared topic is presently used across organizations, meaning someone who knew the topic name could see that an alert was sent. We are moving this notification server-side and per-organization; until that ships, treat it as not fully private.

6. Data Sharing and Protection

Your data is stored within Google's encrypted Firebase infrastructure, scoped to your organization. Access to your organization's data is limited to your organization's own signed-in administrators and drivers, plus the third-party processors in Section 5 solely for the purposes described there. We do not sell, rent, or share your personal data with third-party marketing or advertising agencies.

7. Data Retention

We keep your organization's operational data (pickups, routes, timesheets, receipts, and similar records) for as long as your organization has an active account, so that history, reporting, and payroll records stay available. If your organization's account is terminated, we retain data for a reasonable period afterward in case of a billing dispute or legal requirement, then delete it. See our Terms of Service for account termination.

8. Your Choices and Account Deletion

You can ask to see, correct, or export the personal information tied to your account at any time.

You can also request deletion of your personal account. Where an in-app "Delete my account" option is available, you can use that directly; otherwise, email us at the address in Section 10 and we will process the request within a reasonable time. Deleting your personal account removes your login (your Firebase Auth account) and your personal profile fields. It does not delete your organization's shared business records — completed pickups, history entries, receipts, and similar records you created while working stay with your organization, the same way a departing employee's paperwork stays on file, and any entries that named you keep showing your name as the person who created them. If you are the only administrator of your organization, we may ask you to promote another teammate to administrator first, so the organization is not left without one.

9. Children's Privacy

The Service is intended for business use by adults (dispatch staff and business contacts). It is not directed at children, and we do not knowingly collect personal information from anyone under 13.

10. Contact Us

Questions about this Privacy Policy or your account data can be sent to: support@b-linelogistics.com.

11. Changes to This Policy

We may update this Privacy Policy as the Service changes. For material changes, we will update the effective date above and, for active organizations, provide notice by email or an in-app notice.