Privacy Policy

This Privacy Policy explains how FirewooDirect ("FirewooDirect", "we", "us") collects, uses, and shares information when you use the FirewooDirect website and mobile app (the "Platform"). It should be read together with our Terms of Service.

• Account information: your name, email address, password (stored only in hashed form by our authentication provider), and optionally a phone number.
• Vendor business information: business name, description, service areas, inventory, pricing, and photos of your firewood.
• Delivery information: delivery addresses, map locations, access notes, and the details of the requests you post.
• Messages: the content of messages you exchange with other users about an order.
• Reviews, issue reports, and appeals you submit.
• Driver information: if a Vendor adds you to their crew, the information the Vendor provides and the deliveries you are assigned.

• Delivery photos and their metadata: when a Vendor or driver uploads a fulfillment photo, we store the image along with the location and time embedded in the photo file (EXIF data), the device's location at the time of upload, and a fingerprint of the image. We use this to verify that a delivery happened where and when it was claimed.
• Device location: the mobile app asks for location permission only to record where a delivery photo was taken. You can decline, but photo verification may then fail.
• Approximate location from your IP address: our hosting provider tells us your approximate region so maps open near you. We store this in a cookie on your device for up to 30 days and do not use it for anything else.
• Order and activity records: order status changes, delivery progress, cancellations, and the history of actions taken on an order.
• Cookies: we use cookies to keep you signed in and to remember your approximate map location. We do not use advertising or third-party tracking cookies.

Vendors can record orders taken by phone, in person, or in cash, and may enter that customer's name, phone number, email address, and delivery address. If you were added this way, the Vendor provided your information to us. We use it only to process and record that order, including sending a payment link if the Vendor requested one.

• To operate the marketplace: matching requests to Vendors who serve the area, showing offers, and managing orders.
• To process payments, hold funds in escrow, issue refunds, and pay Vendors.
• To verify deliveries and to investigate and resolve disputes, cancellations, and appeals.
• To compute Vendor trust tiers, strikes, and other measures of reliability.
• To send you in-app notifications about your requests, offers, and orders.
• To prevent fraud, enforce our Terms, and keep the Platform secure.
• To run the referral program and apply credits you have earned.

We do not sell your personal information, and we do not use it for advertising.

With other users. Sharing is necessary for the marketplace to work:

• Vendors whose service area covers your request can see the request details, its ZIP code, and an approximate location within about 200 meters (1/8 mile) of the delivery point, so they can decide whether to make an offer. Your exact address, delivery instructions, and drop-spot photo are shared only with the Vendor whose offer you accept, and any driver they assign, along with your name and the contact details needed to deliver.
• Buyers can see a Vendor's business profile, inventory, trust tier, and reviews.
• The other party to an order can see your messages, delivery photos, and reviews for that order.

With service providers that process information on our behalf:

• Stripe processes all payments. Card details go directly to Stripe and are never stored by us. Vendors provide identity and bank information directly to Stripe to receive payouts, under Stripe's Privacy Policy.
• Supabase hosts our database, authentication, and file storage.
• Vercel hosts the website and provides approximate IP-based location.
• OpenStreetMap (Nominatim) receives the addresses and map coordinates you enter so we can convert between the two, and serves the map images you see.

Town names for ZIP codes are from GeoNames, licensed under CC BY 4.0.

For legal reasons. We may disclose information if required by law, to respond to legal process, or to protect the rights, safety, or property of FirewooDirect, our users, or others.

In a business transfer. If FirewooDirect is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

Authorized FirewooDirect staff can view account, order, message, and photo information to resolve disputes, review Vendor accounts, and provide support. To diagnose a problem, an authorized staff member may sign in to a Vendor account and view it as the Vendor sees it. Each such access is recorded in an audit log.

We keep account information for as long as your account is active. We keep order, payment, and delivery records, including photos and messages, for as long as needed to resolve disputes, meet tax and accounting obligations, and enforce our Terms, even after an account is closed.

• You can turn off notification types in your notification preferences.
• You can withdraw location, camera, and photo permissions in your device settings.
• You can ask us to access, correct, or delete your personal information by emailing support@firewoodirect.com. Some records may be kept as described in Section 8.

Depending on where you live, you may have additional rights under local law, such as the right to know what personal information we hold about you. We will not treat you differently for exercising these rights.

We use access controls that limit each user to their own data, encrypted connections, and a payment processor that handles card data so we never see it. No system is perfectly secure, and we cannot guarantee the security of information you send us.

The Platform is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, for material changes, notify you in the app or by email before they take effect.

If you have questions about this Privacy Policy, please contact us at support@firewoodirect.com.