How Shudle Technologies INC collects, uses, and protects your information
Last updated: 2026-09-29 · Version 3.6 · Contact: privacy@shudle.ca
Shudle Technologies INC ("Shudle", "we", "us", or "our") operates the Shudle technology marketplace that connects customers seeking same-day delivery of large items with independent drivers who own and operate their own vehicles. This policy explains what information we collect when you use our mobile application, website, or services, how we use it, who we share it with, and the choices you have.
By creating a Shudle account or using our services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use Shudle.
This policy is effective as of September 29, 2026 and supersedes version 3.5 dated September 14, 2026.
**Account information.** When you sign up we collect your name, email address, phone number, country (Canada or United States), preferred language, and a securely-hashed password. Drivers additionally provide vehicle make, model, capacity, and any service capabilities they hold (curbside, threshold, full service). At registration we also record the version of this Privacy Policy and the version of the Terms of Service you accepted, along with the timestamp of acceptance.
**Email verification.** To confirm that you control the email address you signed up with, we send a six-digit one-time verification code to your inbox immediately after registration. The code is stored in our database only as a salted hash; it expires after 10 minutes; and it is automatically invalidated once successfully used or after 5 failed attempts. We retain the hashed code row only as long as needed to support security audits of the verification flow.
**Order information.** When you book or accept a delivery we collect pickup and delivery addresses, GPS coordinates resolved from those addresses, item description, dimensions and weight (entered by you or estimated by our AI tools), the chosen vehicle type and service level, schedule preferences, special instructions, and the resulting price breakdown.
**Identity & verification documents (drivers only).** Drivers upload a photo of their driver's licence, a current insurance certificate, vehicle photos, and an approved profile portrait. These documents are reviewed by our operations team and stored securely. We do not store your driver's licence number in our own database.
**Social Insurance Number (drivers only).** Canada's Income Tax Act requires delivery platforms to report each driver's yearly earnings to the Canada Revenue Agency together with their name, address, date of birth and Social Insurance Number, and to give the driver a copy, by 31 January each year. We ask for your SIN once you have earned through Shudle. It is encrypted before it is stored, only its last three digits are ever shown on screen, and access to the full number is limited to authorised staff. If it is still missing sixty days after we first ask, and after two reminders, your payouts are paused until it is on file; your account stays open. The number is deleted when you close your account, and it is never shared with anyone other than the CRA.
**Identity verification via Stripe Identity (drivers only).** As part of driver onboarding, we use Stripe Identity to verify that the person creating the account is who they claim to be. Stripe Identity captures images of the front and back of your government-issued ID and a selfie photograph of you, and performs a face-match comparison between the selfie and the ID photograph. **The biometric face-match data and the ID images are processed and stored by Stripe**, not by Shudle. We retain only the Stripe Identity session identifier, the verification status (verified, requires input, processing, canceled), the timestamp of completion, and, where your government ID shows a home address, that address (see Home address below). Stripe Identity is a separate Stripe product from payment processing and is subject to Stripe's own privacy notice. By starting the verification flow you consent to Stripe's processing and retention of this biometric data.
**Home address (drivers only).** During payout setup you enter your home address on our payout form. Where your government-issued ID shows an address, we may also take it from your Stripe Identity result. We store your address in our database together with the service area it falls in, or the distance to the nearest one when it does not. We use it to set up your Stripe payout account, which requires an address, and to plan which cities we open next. We also send it to Stripe as part of your Stripe Connect account. You can ask us to correct it at any time by writing to privacy@shudle.ca.
**Criminal record background check via Triton (drivers only, threshold and full-service tiers).** Drivers who want to deliver at threshold or full-service tiers must pass a Canadian Criminal Record and Judicial Matters Check (CRJMC) conducted by Triton Canada. You complete your consent and identity verification directly on Triton's secure page; Triton searches Canadian criminal record sources using your legal name, date of birth, and personal information. The full background-check report is stored by Triton under their retention policy; Shudle retains only the request identifier, the outcome (cleared, review required, rejected, or error), and the timestamp of completion. The check costs Shudle 24.95 CAD per driver and is recovered through 1.50 CAD deductions from the driver's threshold or full-service payouts until the cost is recovered. You can read Triton's privacy notice on their website.
**Real-time location (drivers only).** When a driver has an active pickup or delivery in progress, the app reports the driver's GPS coordinates so the customer can see live arrival. Coordinates are collected at approximately 10-second intervals when the app is running in the background. When the driver is actively using our in-app navigation, the underlying location update rate may reach approximately one fix per second to keep turn-by-turn guidance responsive. Sharing automatically stops the moment the order is marked Delivered, Cancelled, or Disputed. We do not track driver location between orders. The append-only driver_locations table is automatically purged of rows older than 24 hours; aggregate routing summaries (no per-second points) may be retained for up to 90 days for trip-quality auditing.
**Photos.** Drivers capture proof-of-pickup and proof-of-delivery photos at slot-defined checkpoints (load wide shot, strap close-ups, handoff shot, etc.). Customers may scan receipts or item photos for AI item-size estimation. All photos are stored on encrypted object storage. Photos uploaded by drivers may contain EXIF metadata that includes GPS coordinates at the moment of capture; this metadata is preserved with the photo for dispute-resolution purposes.
**Payment information.** Card numbers are collected and stored exclusively by our payment processor Stripe. We never see, store, or transmit raw card data; we only retain the Stripe session reference associated with your order. Drivers receive payouts through Stripe Connect; banking details for payouts are held by Stripe, not by Shudle.
**Communications.** We log push-notification device tokens so we can deliver order updates. Email preferences are stored as opt-in toggles per category (order updates, receipts, marketing). Direct customer-driver chat is NOT recorded by Shudle today; admin-only team messaging is logged for operational continuity.
**Waitlist and launch notifications.** If you ask us to notify you when booking opens, or join a waitlist on our website or through our browser extension, we store the email address you provide (and, if you give them, your city or postal code) only to send you that notification and to plan where we open next. We do not use it for anything else, and you can ask us to remove it at any time by writing to privacy@shudle.ca.
**Usage & analytics.** We record event-level analytics such as page views, booking flow steps, vehicle selection, and feature usage. Where possible these events are linked to your account so we can measure conversion and product quality; otherwise they are logged anonymously.
We use the information described above to: provide the delivery marketplace and match customers with available drivers; plan and roll out our service area city by city using drivers' home addresses; process payments and pay out drivers; verify driver eligibility before allowing them to accept orders; send transactional updates about your order; resolve disputes and prevent fraud; comply with applicable tax, insurance, and consumer-protection laws; and improve our product through aggregated usage analysis.
We do not sell your personal information. We do not use your data for cross-context behavioural advertising, and we do not allow our service providers to do so on our behalf.
Our mobile application requests the following device permissions. You can review or revoke any of these from your device's Settings at any time; some permissions are required for the corresponding feature to work.
**Camera.** Used to take proof-of-delivery photos and scan receipts. Rationale shown at prompt: "Shudle needs camera access for receipt scanning and delivery photos."
**Photo library.** Used to upload existing photos as proof or for item estimation. Rationale: "Shudle needs photo library access to upload receipts and delivery photos."
**Location: When In Use.** Used to power address autocomplete near you and to display the in-app map.
**Location: Always (drivers only).** Used so the app can keep reporting your position to the customer while you are navigating in another maps app during an active pickup or delivery. Sharing stops automatically once the order is marked complete. Rationale: "Shudle keeps your location updating for the customer while you have an active pickup or delivery, even when you're navigating in another maps app. Sharing stops automatically once the order is delivered."
**Foreground service & background location (Android, drivers only).** The Android operating system requires these permissions for the live-location feature to continue working when the app is backgrounded during navigation.
**Push notifications.** Used to deliver order status updates, driver-arrival alerts, and important account notices. You can disable in-app notifications from your device's Settings or via your Shudle email-and-notification preferences.
**Between you and the other party to your delivery.** When a driver accepts your order, Shudle shows each of you the other's name and phone number so you can reach each other about the delivery in progress. Drivers also see the pickup and delivery contact details you entered when booking, which may be your own or those of another person you named. This exchange begins when a driver accepts your order and ends when the delivery is marked delivered; after that point neither party can see the other's number in the Shudle app. Before a driver accepts, no driver can see your phone number. Shudle does not place, route, or record these calls: they are ordinary calls handled by your own mobile carrier under their terms. If you call or text the other party, your number will be visible to them on their phone and in their call history, and that record remains on their device after the delivery ends.
We share information with the following service providers strictly to operate Shudle. None of them are permitted to use your data for their own marketing.
**Stripe (payment processing and driver payouts).** Receives the data needed to charge a customer or pay a driver: customer email, order amount and currency, order metadata, and - for drivers - name, email, phone number, date of birth, home address, and Stripe Connect account information. Stripe's processing is governed by Stripe's own privacy notice.
**Stripe Identity (driver identity verification, biometric data).** A separate Stripe product that performs the driver identity verification described in Section 2. Receives government-issued ID images and selfie photographs and performs biometric face-matching. **Stripe Identity acts as an independent data controller for the biometric data it processes**, retaining the verification result under its own policy. By starting the verification flow you agree to Stripe Identity's terms.
**Triton Canada (driver criminal record check).** Conducts the driver's Canadian Criminal Record and Judicial Matters Check. The driver provides their consent, identity, and personal information directly to Triton, which searches Canadian criminal record sources. Triton retains the full background-check report under its own retention policy.
**Supabase (database hosting).** Hosts the secure Postgres database that stores your account, orders, photo metadata, and analytics. We have configured Supabase to keep the primary database in Canada; please contact us if you want written confirmation of the current hosting region for your specific records.
**Cloudflare R2 (photo and document storage).** Stores delivery proof photos, identity documents, and receipts. Access is restricted to short-lived signed URLs.
**Google Places (address autocomplete and geocoding).** Receives address text and country code to return matching place suggestions. We do not send your account identifier.
**OpenStreetMap / Nominatim (geocoding fallback).** Receives address text when Google Places is unavailable. Same minimal payload.
**Mapbox (driver in-app navigation).** Receives a driver's GPS coordinates and route waypoints to render maps and turn-by-turn guidance during active deliveries.
**Resend (transactional email).** Receives the recipient address, subject, and body of order receipts, status updates, verification codes, and account emails.
**Expo Push Service (push notifications).** Receives your device's push token plus the title, body, and data payload of each notification we send.
**OpenAI (AI image analysis).** Receives photographs of receipts and items so we can extract line-item data and estimate item dimensions. Per OpenAI's published policy, photographs sent to the API are not retained or used to train their models. We do not send any account identifier alongside these images.
**Render (application hosting).** Hosts the Shudle backend application in the Oregon region of the United States. Requests pass through Render's infrastructure to reach our database and downstream services.
We may also disclose information when required to do so by law (court order, subpoena, regulatory request) or when we believe in good faith that disclosure is necessary to protect Shudle's rights, the safety of our users, or to comply with a legal proceeding.
Shudle Technologies INC is based in Brantford, Ontario, Canada, and Canadian law governs how we handle personal information. Several of the service providers listed in Section 5 are based in the United States or operate infrastructure in the United States. As a result, some of your personal information will be processed in the United States and may be accessible to U.S. authorities under U.S. law.
The U.S.-based service providers we currently rely on include Stripe (payments, payouts, and identity verification), Render (backend application hosting in the Oregon region), Resend (transactional email delivery), Expo Push Service (mobile push notification delivery), Mapbox (driver in-app navigation and geocoding), and OpenAI (optional AI item-size and receipt scanning). Where required, we use Standard Contractual Clauses or equivalent contractual safeguards with these providers, and we limit the data sent to each provider to what is necessary to deliver the relevant feature.
If you do not want your personal information transferred to the United States, you should not use Shudle, because we cannot offer the service without these providers. If you have questions about a specific cross-border transfer, please email privacy@shudle.ca.
Live driver location is the most sensitive data we handle. We treat it accordingly.
Sharing only happens while a driver has an active pickup or delivery (statuses Accepted, Pickup-en-route, Picked-up, or Delivery-en-route). Sharing automatically stops when the order is marked Delivered, Cancelled, or Disputed.
Live coordinates are NOT used between orders, NOT used to evaluate driver performance outside of an active dispute, NOT shared with advertisers, and NOT sold to any third party.
Customers can see the driver's location only on the active order's tracking page; access ends with the order.
This section explains what happens to driver applications based on the outcome of the Stripe Identity verification and the Triton background check described in Section 2.
**Stripe Identity outcomes.** Drivers cannot accept their first order until Stripe Identity returns a verified status. If Stripe Identity returns a requires-input status, the driver is prompted to retry with better-quality photos. If Stripe Identity returns a canceled or failed status, the driver's onboarding pauses until they retry; persistent failure may result in the application being closed.
**Triton background check outcomes.** Drivers cannot enable threshold or full-service deliveries until the Triton check returns a cleared status. A review-required status pauses the application while our operations team reviews the underlying record; we may contact the driver for additional context. A rejected status results in the driver being unable to deliver at threshold or full-service tiers; the driver may still operate at the curbside tier if otherwise eligible.
**Right to dispute.** Drivers who believe a Stripe Identity or Triton result is incorrect may contact privacy@shudle.ca to request reconsideration. We will explain our reasoning, the data used, and any path to re-check. Drivers may also contact Triton or Stripe directly to access or correct data those vendors hold about them.
**Effect on earnings.** A driver whose status changes mid-cycle to a state that disqualifies them from continued service will be paid for orders already completed in accordance with the Driver Independent Contractor Agreement. Outstanding orders accepted before the status change will be reassigned and the driver will not be penalized for the reassignment.
**Record retention.** Shudle retains the verification session identifier, status, and timestamp for the same seven-year window as other identity and insurance records (see Section 9). The underlying biometric and background-check data is retained by Stripe Identity and Triton under their own policies.
Shudle uses OpenAI's GPT-4o vision model to power two optional features: **receipt scanning** (extract items, quantities, and prices from a photographed receipt) and **item size estimation** (estimate dimensions and weight from photos of an item). When you use these features, the photographs you provide are sent to OpenAI for processing and the extracted text is returned to your device.
Per OpenAI's published API policy, photographs and prompts you submit through their API are not retained beyond what is needed to deliver the response and are not used to train OpenAI's models. Shudle does not store the photographs after the AI response is returned.
We retain different categories of data for different periods, based on legal, tax, dispute-resolution, and operational obligations:
**Account data** is retained while your account is active and for 30 days after a deletion request, after which we anonymize non-required fields.
**Order records and payment receipts** are retained for seven (7) years to comply with Canadian and U.S. tax-record-keeping rules and to support insurance or dispute claims.
**Identity and insurance documents (drivers)** are retained for seven (7) years for insurance and regulatory continuity. This includes the Stripe Identity session identifier and verification status and the Triton background-check request identifier and outcome. The underlying biometric data is retained by Stripe Identity and the underlying criminal-record report is retained by Triton under each vendor's own policy.
**Delivery proof photos** are retained for seven (7) years for dispute and insurance claims.
**Driver real-time location** is retained in the append-only driver_locations table for 24 hours, after which rows are automatically purged. Aggregate routing summaries with no per-second points may be retained for trip-quality auditing for up to 90 days.
**Email verification codes** are stored as salted hashes and are automatically marked consumed once successfully used or after the 10-minute expiry. The hashed row is retained only as long as needed to support security audits of the verification flow.
**Loyalty points ledger and credit balance ledger** are retained for seven (7) years with the corresponding order records.
**Analytics events** are retained in aggregate. Specific event records are pruned on a rolling basis after they cease to be useful for product analysis.
You can review and update your name, phone number, address book, and email preferences at any time from inside the Shudle app or website.
You can request deletion of your Shudle account by emailing privacy@shudle.ca or by following the instructions in the in-app Privacy menu ("Delete my account"). We honor deletion requests within 30 days. Order records, payment receipts, identity documents, delivery proof photos, and verification-outcome records linked to that account may be retained as described in Section 10 even after deletion, because we are required to keep them for tax, insurance, and dispute-resolution purposes.
You can request a copy of the personal information we hold about you by emailing privacy@shudle.ca with the subject line "Data export request." We will respond within 30 days.
**California residents (CCPA and CPRA).** We do not sell or share your personal information for cross-context behavioral advertising, and we do not knowingly sell the personal information of users under the age of 16. If you are a California resident you have the right to know what personal information we have collected about you, to request deletion of personal information subject to retention exceptions described in Section 10, to correct inaccurate personal information, and to be free from retaliation for exercising any of these rights. To exercise any of these rights, contact privacy@shudle.ca. We will respond within 45 days, with one possible 45-day extension.
**Canadian residents (PIPEDA and Quebec Law 25).** You have the right to access and correct your personal information, to withdraw consent for collection or use that is not strictly necessary to operate the service, and to file a complaint with the Office of the Privacy Commissioner of Canada or with the Commission d'accès à l'information du Québec. The Shudle officer responsible for privacy compliance can be reached at privacy@shudle.ca.
**Residents of the United Kingdom and the European Economic Area.** You have the rights granted to you by the UK GDPR or the GDPR, including the rights of access, rectification, erasure, restriction, portability, and objection. You can lodge a complaint with your supervisory authority. Contact privacy@shudle.ca to exercise these rights.
**Withdrawing consent for optional services.** Some Shudle features require additional vendor data sharing beyond the core marketplace. You can opt out of Mapbox in-app navigation by using an external navigation app instead; you can opt out of the AI item-size and receipt scanning features by entering item details manually; you can opt out of marketing email categories from the Email Preferences screen. Transactional emails (security alerts, password reset, order confirmation, payment receipt, verification code) cannot be turned off because they are required to operate the service.
You can disable push notifications from your device's Settings.
We protect your information using industry-standard security practices. Connections to Shudle are encrypted in transit (TLS 1.2+). Passwords are stored as one-way bcrypt hashes; we cannot recover the original. Access to production systems is restricted to a small number of authorised personnel and is logged.
No system is perfect, and we cannot guarantee that a determined attacker will never compromise our defences. If a breach affecting your personal information occurs, we will notify you and the appropriate regulator as required by applicable law.
Shudle is intended for users 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn we have inadvertently collected information from a child, we will delete it. Parents or guardians who believe a child has provided information to Shudle should contact privacy@shudle.ca.
We may update this Privacy Policy from time to time. When changes are material, we will notify you by email and by a notification in the app before the changes take effect. The "Last updated" date at the top of this document always reflects the most recent revision.
Questions about this Privacy Policy, or about how we handle your personal information, can be sent to privacy@shudle.ca. You can also reach our team at:
Shudle Technologies INC
18 Easton Road, Brantford, Ontario, Canada, N3P 1J5
privacy@shudle.ca · +1 (888) 795-6863
Shudle Technologies INC · 18 Easton Road, Brantford, Ontario, Canada, N3P 1J5