Last updated: April 10, 2025
Effective date: April 10, 2025
Tailored for your region: 🇨🇦 Canada
Applicable law: PIPEDA / Quebec Law 25
Summary: TravHero ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your legal rights. By using TravHero, you consent to the practices described herein.
TravHero is a peer-to-peer travel-delivery marketplace operated by TravHero Inc. ("Company", "we", "us", "our"), headquartered in Toronto, Ontario, Canada. We can be contacted at inquiries@travhero.com for any privacy-related inquiries.
Directly from you: - Full name, email, phone number, and date of birth - Profile photo and biographical information - Government-issued identity documents (for KYC verification) - Package descriptions, declared values, and delivery details - Payment information (processed by PCI-DSS compliant providers) - Messages sent through our in-app messaging system Automatically: - Device identifiers, IP address, browser type, and OS - Log data: access times, pages viewed, referral URLs - Location data (only with your explicit permission) to suggest nearby trips - App usage patterns (aggregated and anonymized) From third parties: - If you sign in via Google OAuth, we receive only your name, email, and profile picture as explicitly authorized by you. We do not access any other Google service data.
We use your personal data exclusively to: - Create, maintain, and secure your account - Match senders with travelers and facilitate deliveries - Process payments and manage escrow transactions - Verify your identity and comply with AML/KYC regulations - Send transactional notifications (confirmations, status updates) - Detect and prevent fraud, abuse, and prohibited activity - Meet legal obligations and respond to lawful authority requests - Improve the Platform through anonymized, aggregated analytics We will never use your data for purposes beyond those listed without your explicit prior consent.
If you authenticate via Google Sign-In, TravHero receives only what you authorize during the OAuth consent screen (name, email, profile picture). This data is used solely to create and identify your TravHero account. We do not access Gmail, Google Drive, Google Calendar, or any other Google service. We do not use Google user data for advertising. Our practices comply with the Google API Services User Data Policy including Limited Use requirements.
We do not sell, rent, or trade your personal data. We share it only with: - Other Users: Your display name, photo, rating, and trip/package details are shared as needed to facilitate a booking - Payment Processors: Stripe and similar PCI-DSS compliant providers handle payment data under their own policies - KYC Providers: Identity documents shared with verification partners solely for identity validation - Legal Authorities: When required by law, court order, or to protect user safety - Business Transfers: In merger or acquisition scenarios, with advance notice to you All third-party partners are contractually bound to confidentiality.
Account data: retained for account duration plus 2 years after deletion. Transaction records: 7 years for CRA compliance. KYC documents: 5 years under FINTRAC AML requirements.
Data may be transferred to the United States or other countries. We rely on contractual protections and adequacy measures compliant with PIPEDA.
We implement industry-standard security measures including: - TLS encryption for all data in transit - AES-256 encryption for sensitive data at rest - Role-based access controls - Regular security assessments and penetration testing - Breach notification procedures in accordance with PIPEDA / Quebec Law 25
We use strictly necessary cookies to maintain session and platform functionality. Analytics cookies are used only with your consent. You may withdraw cookie consent at any time through your device settings. We do not use cookies for third-party advertising.
To exercise any right, contact us at inquiries@travhero.com. We will respond within 30 days (or as required by PIPEDA / Quebec Law 25). We will never discriminate against you for exercising your rights.
If you believe we have not handled your data lawfully, you may lodge a complaint with: Office of the Privacy Commissioner of Canada (priv.gc.ca) We encourage you to contact us first at inquiries@travhero.com so we can resolve the concern directly.
TravHero is not directed at individuals under 18. We do not knowingly collect personal data from minors. If a minor has registered, contact us at inquiries@travhero.com and we will delete their data promptly.
We may update this Privacy Policy to reflect changes in law or our practices. We will notify you of material changes via in-app notification and/or email at least 30 days before they take effect.
Privacy Officer, TravHero Inc., Toronto, Ontario, Canada — inquiries@travhero.com