Privacy Policy

Version 1 · Effective 2026-04-25

1. What We Collect

• Account information — your name, email, phone number, and mailing address in Hawaii (or Alaska / Puerto Rico).
• Payment information — processed and stored by Stripe; we receive a tokenized reference, not your full card number.
• Shipping information — tracking numbers, weights, declared values, and addresses, shared with EasyPost and the carriers we use to ship.
• Communication records — SMS sent via Twilio, email sent via Resend, and any support messages you send us.
• Optional AI assistance — if you use features powered by OpenAI, the content you submit to those features is processed by OpenAI.

2. Why We Collect It

We use the information above to operate the service, fulfill your shipments, send you status updates about your packages, respond to support requests, bill you, prevent fraud, and comply with applicable law.

3. Who We Share It With

We share only what each processor needs to do its job: Stripe (payments), EasyPost (carrier labels and tracking), Twilio (SMS), Resend (email), OpenAI (AI features when you opt into them), and Supabase (database hosting). We do not sell your personal information. We do not share your information with advertisers.

4. Your Rights (CCPA and Similar)

If you are a California resident, you have the right to access a copy of the personal information we hold about you, request that we delete it, request a portable copy, and opt out of any sale of your information (we don’t sell it). To exercise these rights, email support@glideover.co. We will verify your identity before acting on the request.

5. Retention

We retain account information for as long as your account is active. Financial and shipping records are retained for seven years after the transaction to meet tax and audit requirements. You can request deletion of non-financial records at any time.

6. Children

Glideover is not directed at children under 18 and we do not knowingly collect information from anyone under 18. If you believe we have collected information from a minor, contact us and we will delete it.

7. Cookies

We use session cookies for authentication only. We do not use third-party advertising or tracking cookies.

8. Security

Data is transmitted over TLS and encrypted at rest by our database provider. Access to production data is limited to a small number of authorized employees and is logged. We will notify you promptly if we learn of a breach that affects your data.

9. Updates

When we update this Privacy Policy we bump the version number. The next time you sign in after a version bump, we’ll ask you to review and re-accept the updated document before continuing to use the service.

10. Contact

Questions about this policy? Email support@glideover.co.