Privacy Policy

Quintivel (“Quintivel,” “we,” “us”) is a multi-tenant SaaS platform that limousine, chauffeur, and ground-transportation operators (“Operators”) use to run their businesses — quotes, reservations, dispatch, payments, customer communication, and analytics. This policy describes how Quintivel collects and uses data from people who interact with our platform.

This policy describes data practices for two groups:

• Operators who sign up for Quintivel and run their business through it. We are the data controller for Operator account data.
• Customers of Operatorswho request quotes, book trips, or pay through an Operator's Quintivel-hosted widget or portal. We are a data processor for that data; the Operator is the data controller. Operators should publish their own privacy policy for their customers in addition to this one.

From Operators: name, email, phone, business name, billing address, payment method (via Stripe — Quintivel never stores card numbers directly), and the content you enter into Quintivel (vehicles, drivers, quotes, trips, customers, settings).

From Operators' Customers:the information they submit through a Quintivel-hosted widget or customer portal — name, email, phone, pickup & drop-off locations, dates, passenger count, special requests, and payment information.

Automatic: log data (IP, user agent, timestamps), cookies / local storage (session, preferences), and basic analytics on platform usage.

• Provide, operate, and improve the Quintivel platform.
• Send Operator-facing email (welcome, billing, maintenance) via Resend.
• Process subscription payments to Quintivel via Stripe.
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Comply with legal obligations.

We do notsell personal information. We do not use Operator data or their Customers' data to train AI models without explicit consent.

We share data only with service providers required to run the platform, each under a data-processing agreement:

• Stripe — subscription billing and customer-payment processing.
• Resend / SendGrid / Mailgun — outbound email delivery. Operators may bring their own provider.
• Supabase — database hosting (postgres), authentication, file storage.
• Vercel — application hosting + CDN.
• Cloudflare — DNS + edge caching.
• Twilio — SMS delivery for Operators who enable it.
• Google Maps / Places / Distance Matrix — geocoding and route distance.

Quintivel is operated in the United States. By using the service, you consent to your information being processed in the U.S. Standard Contractual Clauses apply where required.

Operator account data is retained as long as the account is active and for 90 days after deletion (for backup + recovery). Customer transactional data (quotes, trips, payments) is retained per the Operator's own retention policy; Operators control deletion within their own workspace.

Depending on where you live, you may have the right to access, correct, delete, or export your personal data; object to processing; or withdraw consent. Operators can exercise these rights directly within their account (Settings → Profile → Delete account). Customers should contact the Operator they booked with first; if needed, email us at privacy@quintivel.com.

We use industry-standard practices: TLS in transit, encryption at rest for secrets and tokens (AES-256-GCM), short-lived sessions, multi-factor authentication available for Operators, audit logs for sensitive actions, and regular backups. No system is perfectly secure; report concerns to security@quintivel.com.

Quintivel is not directed at children under 13 and we do not knowingly collect their personal information.

We update this policy as the service evolves. The “Effective” date at the top tells you the most recent revision. Material changes will be announced to Operators by email at least 14 days before they take effect.

Questions or requests: privacy@quintivel.com