Privacy Policy

Last updated: September 2026

1. Information We Collect

We collect the following information:

  • Account Information: Name, email address, phone number, and full street address
  • Package Reports: Carrier, delivery dates, tracking numbers, photos, descriptions, and ZIP codes
  • Communication Data: Messages sent through our platform chat system
  • Usage Data: How you interact with the platform, pages visited, and features used
  • Device & Technical Data: Browser type, IP address, device identifiers, and cookies
  • Payment Data: Billing information processed and stored securely by Stripe; we do not store full card numbers

2. How We Use Your Information

Your information is used to:

  • Match missing packages with found packages in your area
  • Enable communication between users about packages
  • Display anonymized information (street name and ZIP only) in public reports
  • Improve our matching algorithms and services
  • Send email and SMS notifications about matches, platform updates, and subscription activity
  • Process subscription payments and manage billing
  • Detect, prevent, and investigate fraud, abuse, or violations of our Terms of Service

3. SMS Communications & TCPA Compliance

Consent: You opt in by checking the SMS consent box during registration or in Edit Profile. By providing your phone number and opting in, you expressly consent to receive recurring automated transactional text messages from Parcel Rescue, including package match alerts, recovery notifications, and account activity updates. Consent is not a condition of purchase or use of the platform.

Message Frequency: Message frequency varies based on platform activity. You may receive up to several messages per week during active package recovery.

Rates: Message and data rates may apply depending on your mobile carrier and plan.

Opt-Out (STOP): You may opt out of SMS messages at any time by:

  • Replying STOP (or STOPALL, UNSUBSCRIBE, CANCEL, END, or QUIT) to any text message from us. We will send a one-time confirmation and immediately cease all further SMS messages to that number. To re-enroll after opting out, reply START or UNSTOP, or re-check the SMS consent box in Edit Profile.
  • Unchecking the SMS consent box in your profile settings (Edit Profile → SMS Alerts).
  • Contacting us at support@parcelrescue.com to request removal.

Help: Reply HELP or INFO to any message for assistance, or contact us at support@parcelrescue.com.

SMS Privacy: Mobile information and SMS opt-in data and consent will not be sold, rented, or shared with third parties or affiliates for marketing or promotional purposes. We may disclose this information only to service providers, such as Twilio, solely as necessary to operate and deliver the Parcel Rescue SMS program, and not for those providers' own marketing or promotional purposes.

We use Twilio to deliver SMS messages. We will never send SMS messages to users who have opted out. Opt-out requests are honored immediately and permanently unless you re-consent. This program complies with the Telephone Consumer Protection Act (TCPA).

4. Information Sharing & Privacy Protection

Your full address — including your house or apartment number — is NEVER shared publicly and is never visible to other users. Only your street name (without house number) and ZIP code are visible to other users in reports. Your house number is stripped automatically when your address is stored. Your email and phone number remain private at all times. We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share data with service providers (Stripe, Twilio, infrastructure providers) solely as necessary to operate the platform, under confidentiality obligations.

Community Statistics: We aggregate and anonymize carrier and ZIP code data from all user reports to create community-wide statistics visible to logged-in users (e.g., "Misdelivery Rate by Carrier," "Carrier Distribution by ZIP Code"). This aggregated data contains no personally identifiable information and helps the community understand delivery patterns in their area. Individual users cannot be identified from these statistics.

5. Cookies & Tracking

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze platform usage. You may disable cookies in your browser settings, though doing so may affect platform functionality. We do not use cookies for third-party advertising.

6. Data Security & Breach Notification

We implement industry-standard security measures including encryption of sensitive data in transit and at rest, secure data storage, and access controls. However, no system is 100% secure. You use the platform at your own risk and are responsible for keeping your account credentials confidential.

In the event of a data breach affecting your personal information, Parcel Rescue will notify affected users in accordance with the Florida Information Protection Act (§ 501.171, Florida Statutes). This law requires us to provide notice of a breach within 30 days of determining that unauthorized access to unencrypted personal information has occurred. Notification will be provided via email to the address associated with your account. If the breach affects more than 500 Florida residents, we will also notify the Florida Department of Legal Affairs.

7. Automated Fraud Detection & Risk Scoring

To protect the integrity of our community, Parcel Rescue uses automated systems — including AI-based behavioral analysis — to assess the risk of fraudulent or abusive activity on user accounts. These systems analyze patterns such as report frequency, match outcomes, and neighbor-filed complaints to generate an internal risk score. This score is used solely by Parcel Rescue administrators for platform safety purposes and is never shared with other users. If your account is suspended as a result of automated risk assessment, you have the right to appeal by contacting our support team. You may also request to know whether an automated decision has been applied to your account under applicable law (including GDPR Article 22 and CCPA).

8. Data Retention

We retain your data only as long as necessary for the purposes described in this policy:

  • Package reports (missing & found), matches, and messages: Automatically and permanently deleted 90 days after creation. This purge runs automatically every night — no action is required from you.
  • Chat messages: Also subject to the 90-day purge. Premium users' messages follow the same schedule.
  • Notifications: Automatically deleted after 90 days.
  • Account data: Retained until you request deletion via the "Delete Account" option in your profile settings, or until we close your account. Upon deletion, your personal data is permanently anonymized and removed.
  • Payment records: Retained as required by applicable financial regulations (typically 7 years), stored and managed by Stripe.

We may retain certain data beyond these periods if required by law, to resolve disputes, or for legitimate fraud prevention purposes. You may request early deletion of your data at any time by using the "Delete Account" feature or contacting us at support@parcelrescue.com.

9. Photos, Uploads & Blur-Until-Matched Policy

Users may optionally upload photos to assist with package identification, including:

  • Label photos (uploaded by finders): Photographs of a misdelivered package's shipping label, which may contain the recipient's name, street address, and other personally identifiable information (PII).
  • Delivery photos (uploaded by reporters): Carrier-provided proof-of-delivery images, which may show a doorstep or drop location.

Blur-Until-Matched Protection: Because label and delivery photos may contain PII, Parcel Rescue applies a blur-until-matched policy to all uploaded package photos. This means:

  • Photos are stored securely and are never visible to the general public or other users browsing community reports.
  • Within a potential match, photos are displayed in a blurred/obscured state until both parties have accepted the match.
  • Once a match is mutually accepted, the full photos are revealed exclusively to the two matched users to assist with package identification and coordinated pickup.
  • Photos are never shared outside of the specific, consented match context.

Automated Content Moderation: Every photo you upload is immediately reviewed by our AI-based moderation system, which checks whether the image is a legitimate package or shipping label photo. Images containing prohibited content (e.g., explicit material, weapons, or content unrelated to a package) are flagged. A first violation results in an internal flag and admin review; a second high-confidence violation triggers automatic account suspension and an email notification. Admins are alerted in real time for all flagged uploads.

Photo Deletion: Uploaded photo files are permanently deleted from our servers — not just unlinked — when their associated package report is purged. This purge runs automatically every day. Package reports (and their photos) are deleted 90 days after creation, as described in Section 8 (Data Retention).

Your Responsibilities: Please upload only photos that are reasonably necessary to identify the package. Do not upload images containing sensitive financial information, government-issued ID numbers, or content unrelated to the package.

10. Third-Party Services

We use the following third-party services, each governed by their own privacy policies: Stripe (payment processing), Twilio (SMS delivery), and our hosting infrastructure provider. We are not responsible for the data practices of these third parties.

11. California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us through the platform support system.

12. International Users (GDPR)

Parcel Rescue is intended for use within the United States. If you access the platform from the European Economic Area (EEA) or other regions with data protection laws, you acknowledge that your data will be processed in the United States. We will honor data subject rights requests to the extent required by applicable law.

13. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Request deletion of your account and associated data
  • Opt out of SMS alerts via your profile settings (Edit Profile → SMS Alerts) or by replying STOP to any text message. Opt out of marketing emails via the unsubscribe link included in every marketing email.
  • Export your package reports and match history in CSV format directly from your Dashboard

14. Children's Privacy (COPPA Compliance)

Parcel Rescue is intended solely for users who are 18 years of age or older. We do not permit anyone under the age of 18 to create an account or use this platform. Users between the ages of 13 and 17 are explicitly prohibited from registering, and users under 13 are absolutely prohibited under any circumstances.

In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect, solicit, or retain any personal information from children under the age of 13. If you are under 13, do not use or attempt to use this platform, and do not provide any personal information about yourself.

  • If we discover or have reason to believe that a user is under 13, we will immediately delete their account and all associated data without notice
  • If we discover a user is between 13 and 17, we will suspend the account pending parental verification, and may terminate it at our sole discretion
  • Parents or guardians who believe their child under 13 has provided personal information to Parcel Rescue may contact us at support@parcelrescue.com to request immediate deletion

By creating an account, you represent and warrant that you are at least 18 years of age. If you are a parent or guardian and become aware that your child has registered without your consent, please contact us immediately at support@parcelrescue.com and we will take prompt action to remove their information.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or platform notification at least 7 days before taking effect. Continued use of the platform after changes constitutes acceptance of the updated policy.

16. Contact Us

For privacy-related questions, data requests, or to exercise your rights, please use our contact form or email us directly at support@parcelrescue.com.