Privacy policy

Last updated: July 31, 2026

Chauffeur.Restaurant ("we") operates the independent Québec delivery-driver network behind Command.Restaurant deliveries — the chauffeur.restaurant website and the Chauffeur.Restaurant mobile apps (iPhone and Android). This policy describes the personal information we collect from drivers and driver applicants, why, and your rights.

What we collect

• Identity and contact — name, email, phone, city, password (hashed), vehicle details.
• Application documents — photos of your driver’s licence, vehicle registration and proof of insurance, reviewed by our team to approve your account.
• Precise location, including in the background — while you are online or on a shift, the app reports your position (with your system permission) to dispatch runs, power navigation, show network activity and enforce the shift contract. Location history is retained for operations and audit.
• Runs and pay — assigned runs, pickup/delivery timestamps, shifts, accruals and weekly statements.
• Banking coordinates — to pay your weekly earnings by bank transfer (contractor agreement, s. 10) we collect the account holder name, institution number, transit number and account number that you enter yourself. Those three numbers are encrypted in our database (AES-256-GCM) and are never displayed back to you: you only ever see the last four digits of the account. They are used solely to produce the deposit file given to our financial institution, and you can remove them at any time from your profile.
• Door collections — card payments at the door are processed by Stripe (Tap to Pay or payment link). Card data never touches or persists on our servers.
• Notification tokens — to alert you of shift offers (Firebase Cloud Messaging).

What we don’t do

• We never sell or rent your personal information.
• No third-party advertising or ad tracking in the app.

Sharing

Your information is shared only to run the service: partner restaurants and platforms see your first name and position during a run tied to them; our technical processors handle data on our behalf (Railway hosting, Cloudflare network, Stripe payments, Google mapping and notifications — Mapbox/Maps/Firebase, SendGrid email, Twilio SMS where armed). Your banking coordinates are disclosed only to our financial institution, inside the deposit file that executes your transfer.

Automated licence reading: when you upload your driver's licence, the image is sent to Anthropic (Claude API, technical processor) solely to extract the document's details (name, licence number, date of birth, address). The image is sent for that processing only, is not used to train models, and the copy we retain stays in our own database (EXIF location metadata is stripped before storage).

Retention and your rights

We keep your file while your account is active, then as long as the law requires (tax and pay records). You can delete your account yourself, in the app, on the “Profile” page: the erasure takes effect immediately, with no request to us. Deleting here means erasing the person and keeping the ledger — your profile, your documents and the uploaded images, your location history, your devices, your notification tokens and your sign-in credentials go, while the pay and tax records the law obliges us to keep remain, tied to a file number rather than to your name.

Two things can survive the erasure, and neither indefinitely. If you still hold money belonging to us when you delete your account, we keep a narrow file — name, phone, email, licence number, date of birth and address — to exercise our rights, until the amount is settled, then it is erased automatically; the photo of your licence is deleted in every case, and the amount owed remains owed regardless. Your banking coordinates follow their own rule: they are deleted as soon as you remove them, and at the latest once your final payout has been made — the pay record they served remains, but the account number itself no longer has a reason to be kept.

You can request access to your information or its correction by writing to service@chauffeur.restaurant — and its deletion at the same address if you no longer have access to your account. That is also the contact of our privacy officer (Québec Law 25).

Automated decisions: some decisions concerning you — an established infraction, the partial settlement of a shift — may be made exclusively by automated processing of app data. You are informed at the time of the decision, you may submit your observations, and you may ask for it to be reviewed by a natural person, at the same address.