Draft for review. This page is a placeholder written for RoadTwin during development. It is not legal advice and must be reviewed and completed by the business owner before the site takes real payments.
Privacy policy
Last updated [DATE]
This policy explains what RoadTwin ([LEGAL ENTITY NAME]) collects and why. [CONFIRM GDPR / CCPA OBLIGATIONS FOR YOUR CUSTOMERS.]
What we collect
- Account: your email, an optional name, and a securely hashed password.
- Orders: the start and finish you enter, the route, price and build status. Addresses you enter may be personal data (for example your home); we use them only to build your track.
- Payments: handled by Stripe. We receive the payment status and amount, never your card number.
- Visits: first-party page counts with no cookies. We store the page, the referring site, the device type, and a visitor code made from your IP address and browser with a key that changes every day, so we can count visitors without recognising you across days. Your IP address itself is not stored. We honour Do Not Track and Global Privacy Control signals by not counting those visits.
- Security logs: an audit log of sign-ins and account actions, with the IP address, kept for [PERIOD].
Who processes it
- Stripe (payments)
- Photon (address suggestions while you type the start and finish; sent from our server, without your IP address)
- Our build server (route and track generation), which sends your route to public map services (geocoding, routing, elevation, imagery) to build it
- [EMAIL PROVIDER] (transactional email)
- [HOSTING PROVIDER] (website hosting)
Cookies
One essential cookie keeps you signed in. No advertising or analytics cookies.
Your rights
You can ask for a copy of your data or for your account to be deleted by writing to support@roadtwins.com. [ADD RETENTION PERIODS AND REGULATOR CONTACT.]