Privacy Policy

1. About this policy

DrivePilot provides road-test availability alerts and driving-school pages. This policy explains what personal information we collect, why we use it, when we disclose it and the choices available to you.

2. Information we collect

When you subscribe for alerts, we collect:

• your email address and email-verification information;
• the IP address associated with verification, consent and security checks;
• your road-test type, selected centres and selected exam dates;
• subscription, alert, pause, resume and unsubscribe activity; and
• if you separately opt in to promotional emails, the consent time, wording version, wording shown, network address and promotional-email unsubscribe activity; and
• payment amount, status and Stripe checkout identifiers for paid services.

Stripe processes card payments. DrivePilot does not receive or store your complete card number or card security code.

When you visit a public page, our privacy-focused analytics provider may process the page path without its query string or hash, the referring site, campaign labels, general browser and device information, approximate location, and anonymous interaction or conversion events. We do not send email addresses, verification codes, licence information, payment identifiers or selected exam dates to analytics. Our analytics tracker does not use cookies and respects your browser’s Do Not Track setting.

When you create a driving-school account, we collect:

• the account email address, password hash and account-security records;
• the school name, description, page address and alert pricing; and
• logos, photographs and other page content you choose to upload; and
• promotion-code creation and redemption records, referral attribution, trial and commission status; and
• the connected Stripe account identifier and verification, payments and payouts status.

Public school-page information and uploaded images are visible to anyone who visits that page. Account passwords and account email addresses are not displayed publicly.

3. How we use information

We use personal information to:

• verify email addresses and provide requested road-test alerts;
• process payments, confirm purchases and handle support or refund requests;
• operate driving-school pages and their subscription dashboards;
• apply alert limits and honour pause, resume and unsubscribe requests;
• send occasional promotional emails only when you separately opt in, and honour the independent unsubscribe choice included in every promotional email;
• protect accounts, prevent abuse and troubleshoot the service; and
• meet applicable legal, accounting and record-keeping obligations.

We do not sell full email addresses. Declining promotional email does not affect your ability to receive requested road-test alerts.

4. Information visible to a driving school

If you subscribe through a driving-school page, that school can see a masked version of your email address, when you subscribed, your road-test type and the centres you selected. It does not receive your full email address, payment-card details or selected exam dates through the school dashboard.

If you make a paid purchase through a school that has connected Stripe, the Checkout and charge are processed in that school’s Stripe account. Stripe may therefore show the school your purchase email, amount, payment status and related transaction information. The school does not receive your complete card number or card security code from DrivePilot.

When a school-issued promotion code is used, the issuing school can see that a promotion was used and the subscriber’s masked email address. If a driving-school account registers through another school’s referral link, the referring school can see the new account’s public name, registration time and commission status, but not its login email or payment-card details.

5. Service providers and disclosure

We use service providers to operate DrivePilot, including Stripe for payment processing, an email-delivery provider for verification and alerts, Umami for cookieless website analytics, and hosting or backup providers. They may process information to provide, secure and support those services, subject to their applicable terms and privacy practices. Information may be processed in Canada, the United States or another jurisdiction where a provider operates.

We may also disclose information when required by law, to protect the security or rights of users and DrivePilot, or as part of a business reorganization where appropriate safeguards apply.

Public school-page text is checked using rules that run on DrivePilot’s own server. DrivePilot does not send page text or images to an external large-language-model service for moderation. Visitors may submit a page report; we retain the selected reason, report details, a one-way hash derived from the network address, and the submission time for abuse prevention and review.

6. Retention

We retain personal information only for as long as reasonably needed to provide the service, honour unsubscribe requests, handle support, prevent fraud, resolve disputes and meet legal or accounting obligations. Payment attempts that are not completed may be retained for payment reconciliation and support. Backup copies may remain until they are replaced through the normal backup cycle.

7. Security

We use administrative and technical safeguards designed to protect personal information, such as hashed passwords and session tokens, access controls and encrypted connections. No online service can guarantee absolute security.

8. Cookies

DrivePilot uses essential cookies for driving-school login sessions and security. These cookies are required for the requested account features. Public-page analytics is configured without cookies. We do not currently use advertising cookies or sell information for targeted advertising.

DrivePilot may introduce advertising, sponsored content or featured listings in the future. Contextual advertising may be selected from the content of the page being viewed without building a profile about an individual. Before introducing third-party advertising cookies, cross-site tracking or behaviourally targeted advertising, we will update this policy, identify the relevant providers and information practices, and provide any notice, consent or opt-out choice required by applicable law. Reserving the ability to offer advertising does not by itself authorize a new use or disclosure of personal information.

9. Your choices and privacy rights

You can unsubscribe from alert emails using the alert-unsubscribe link included in those emails. Promotional emails contain a separate unsubscribe link that stops only promotional messages and does not stop requested road-test alerts. You may also ask to access, correct or delete personal information we hold about you, or withdraw consent where applicable. Some information may need to be retained when required by law or for legitimate payment, security or dispute records. Withdrawing information needed to deliver alerts will end that service.

10. Changes and contact

We may update this policy when our service or privacy practices change. The current version and effective date will remain available on this page.

Privacy questions or requests can be sent to stephen.su66@gmail.com.