SUAREZ TRANSPORTATION LLC · PRIVACY POLICY
Privacy and company data
Last updated: October 6, 2026. This public policy applies to the Suarez Transportation LLC platform at payroll.suareztransportation.org and its Delivery Operations iPhone app. The application processes account, company, driver, payroll, document, communication, and operational information needed to provide the service. Each company workspace is separated by company identifiers and access controls.
Account and business information
We process names, business email addresses, authentication details, phone numbers, company settings, and records submitted by authorized users. Company Owners control the information uploaded by their administrators and drivers. Payment card information is collected and processed by Stripe and is not stored directly in this application.
Driver and delivery records
Depending on a user's role and company configuration, the service may process driver license and vehicle-insurance details, route manifests, tracking numbers, package and delivery addresses, payroll and loan information, delivery photos, documents, dispute evidence, and customer communications uploaded by authorized users. These records are used to manage delivery operations, driver access, payments, and dispute review within the company workspace.
iPhone permissions, location, and diagnostics
With permission, the iPhone app uses the camera and photo library to scan packages and attach manifests, documents, and delivery evidence. Precise location may be collected for an accepted rescue or pickup trip, including while the app is in the background during that active trip, and when a driver submits location-based delivery proof. Location and delivery-address information may be processed by mapping or geocoding providers to support routing and evidence review. Location is not used for advertising.
To send operational push notifications, the app stores its Apple push-notification token with the associated company and user account. For reliability and security, the service may also record app errors, page paths, device or browser information, and connection details associated with a signed-in account. Push tokens and diagnostics are not used for advertising.
Service providers and company announcements
We use Supabase for account authentication, database records, and file storage; Vercel for application hosting; Stripe for subscription payments; Twilio for opted-in messages; Resend for email delivery; Google services for optional Gmail connections, maps, and geocoding; and Cloudflare Turnstile to protect forms from abuse. These providers receive only the information needed for the features they support, subject to their own privacy and security terms. We do not sell personal information.
Authorized company administrators may send announcements by email or push notification to users in their workspace. Those announcements are separate from the optional operational SMS and WhatsApp programs described below. Contact the company administrator or us to ask about your communication preferences.
SMS privacy and consent
Suarez Transportation LLC sends recurring operational SMS messages only to people who expressly opt in. Drivers may receive delivery-dispute alerts. Saved manager contacts may receive a short receipt after their driver close-out or missing-package report is successfully emailed. Messages are never used for marketing or promotional purposes. Message frequency varies by operational event. Message and data rates may apply. Consent is not a condition of purchase.
We collect the mobile number, SMS opt-in status, opt-in date and time, and the selected operational alert categories solely to deliver and document these messages. A manager's SMS permission is separate from email and WhatsApp preferences. We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes. We use service providers only to operate and secure the messaging service on our behalf, and never for their own marketing or promotional use.
Recipients may reply STOP to any message to opt out. They may reply HELP for help or contact raymondg0908@gmail.com. See our SMS Terms and public SMS consent information for complete program details.
WhatsApp privacy and consent
Only a saved manager contact may receive operational WhatsApp messages. An authorized company administrator must record that manager's express WhatsApp consent before enrolling the number. The consent record includes the date and time, how consent was obtained, and the administrator who recorded it. WhatsApp consent is separate from SMS consent, permission to receive report emails, and any earlier or legacy WhatsApp notification toggle. It is optional and may be withdrawn at any time.
WhatsApp messages are operational and nonmarketing only. They are limited to a receipt after a selected Driver Close-out or Missing-package report email is accepted. A receipt does not include tracking numbers, delivery addresses, attachments, or a secure report link. Message frequency varies by operational event. WhatsApp and data charges may apply. Consent is not a condition of employment or purchase.
We do not share, sell, or provide mobile numbers or WhatsApp consent information to third parties or affiliates for marketing or promotional purposes. Twilio acts as our service provider and processor solely to deliver and support WhatsApp messages on our behalf; it does not receive permission to use this information for its own marketing or promotional purposes.
A recipient may reply STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, or QUIT to opt out, or ask an authorized company administrator to remove the WhatsApp consent in the company's notification settings. For complete program details, read the public WhatsApp consent information and our Terms of Service.
Google and Gmail data
A Company Owner or authorized administrator may optionally connect a Gmail mailbox. The integration requests the Google Account email address and read-only Gmail access. When enabled, it may process message identifiers, sender and recipient metadata, subject lines, dates, message bodies, and supported image attachments from messages that match the company's approved sender rules.
We use this Gmail data only to identify and organize delivery disputes, extract operational details, match records to drivers, preserve authorized evidence, and notify authorized company users. The integration cannot send, edit, or delete email. Gmail data is not used for advertising, sold, or transferred to third parties except service providers acting on our instructions to operate and secure the service, or when required by law.
Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.
Security, retention, and deletion
Google refresh credentials are encrypted at rest. Short-lived Google access tokens are used in server memory and are not stored. Access to imported Gmail records is restricted to the company workspace and authorized platform operations. Imported messages, extracted operational records, and authorized evidence are retained under the company's configured retention settings and applicable legal requirements.
An authorized administrator can disconnect Gmail inside Gmail automation. Disconnecting stops new processing, destroys the saved credential, and requests immediate revocation from Google. Existing operational records are not silently deleted because they may support active disputes; a Company Owner may request export, correction, or deletion of eligible records.
Signed-in users can request deletion of their full account in the app. The request is reviewed manually. We remove the sign-in account and associated personal data that we are not legally required to keep. Payroll, tax, payment, and unresolved delivery or dispute records may be retained where required by law or an existing obligation. We confirm completion at the account email and explain retained categories.
Your choices and contact
Google access is optional and is initiated by an authorized company administrator. Google permissions can also be removed from the connected Google Account's third-party connections page. For privacy questions, access requests, correction, or export, contact raymondg0908@gmail.com. To delete your account, use the in-app deletion page; no support email is required.