Driver Privacy Policy
Effective Date: September 11, 2026
Last Updated: September 20, 2026
1. Introduction
AddYea Technologies Inc. (“AddYea,” “we,” “us,” or “our”) respects the privacy of individuals who use or interact with our services.
This Driver Privacy Policy describes how AddYea collects, uses, discloses, stores, protects, and otherwise handles personal information in connection with the AddYea driver application, driver onboarding, delivery assignments, pickup and delivery operations, payouts, account, safety, and support services (the “Driver Services”).
This Privacy Policy applies to drivers and, where relevant, individuals who interact with AddYea in connection with the driver services.
AddYea currently operates from Ontario, Canada and handles personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”) where applicable.
Questions, requests, or complaints relating to privacy may be directed to:
Privacy Officer
AddYea Technologies Inc.
Ontario, Canada
Email: admin@addyea.com
This Driver Privacy Policy should be read together with the AddYea Driver Terms & Conditions where those Terms apply.
2. Accountability
AddYea is responsible for personal information under its control.
AddYea has designated a Privacy Officer responsible for privacy compliance and maintains policies, procedures, technical safeguards, and access controls intended to protect personal information.
Privacy inquiries, access or correction requests, account-deletion or closure requests, consent-related requests, and privacy complaints may be submitted to admin@addyea.com.
3. Driver Information We Collect
Identity and Contact Information
• legal name;
• residential or mailing address;
• phone number;
• email address;
• account and login information;
• profile photograph;
• driver’s licence information and documentation;
• driver’s licence expiry information;
• identity-verification information; and
• driving-record information or screening results where AddYea requires such verification;
• eligibility, safety, fraud-prevention, or onboarding screening information where applicable;
• OTP or account-security information.
Website Driver Interest Forms
When an individual submits a Driver interest form through the AddYea website, AddYea may collect the individual’s full name, phone number, and email address. AddYea uses this information only to respond to the inquiry, assess potential driver onboarding, and communicate about a potential Driver opportunity. Submitting an interest form does not create employment, an independent-contractor relationship, driver approval, or a guarantee of delivery work.
Vehicle and Insurance Information
• vehicle make, model, and year;
• licence plate information;
• vehicle registration information;
• proof of insurance;
• insurance policy information;
• insurance expiry information;
and
• other information reasonably required to verify eligibility to perform deliveries.
Delivery and Operational Information
• assigned deliveries;
• accepted or rejected delivery opportunities;
• pickup information;
• delivery information;
• delivery history;
• pickup and delivery timestamps;
• assignment reservation, start, end, cutoff, and related status timestamps;
• delivery status;
• proof-of-delivery information;
• proof-of-delivery photographs where applicable;
• delivery-related communications;
• incidents or complaints associated with a delivery;
• accident, collision, property-damage, police, insurance, safety, or investigation information where relevant;
• operational performance information; and
• information reasonably necessary to manage AddYea delivery operations.
Banking, Payout, Tax and Regulatory Information
• bank or financial institution information required to make payments;
• account-holder or payee information;
• driver earnings;
• tips;
• premiums, additional-pay amounts, minimum-pay adjustments or top-ups, and other compensation records where applicable;
• payout amounts and dates;
• adjustments and payment history;
• tax residency where required;
• Tax Identification Number where required;
• Social Insurance Number (“SIN”) where legally required;
• date of birth where legally required;
• information concerning reportable payments; and
• other information reasonably required by applicable law or governmental authorities.
AddYea will not collect sensitive tax information where it is not reasonably required for a legitimate legal, tax, accounting, or regulatory purpose.
4. Driver Location Information
Where location functionality is enabled and subject to applicable device permissions and consent, AddYea may use driver location information where reasonably necessary for a reserved or active delivery assignment, including to:
• verify assignment-related location or movement where location functionality is enabled;
• support pickup and assignment coordination;
• coordinate pickups and arrival;
• support routing and delivery operations;
• verify delivery-related activity, safety events, or assignment timing;
• investigate delivery issues;
and
• improve dispatch and delivery operations.
AddYea does not use driver device location for ongoing tracking when the driver is offline and has no reserved or active assignment. Approaching delivery time by itself does not authorize location tracking where the driver has not reserved an assignment. AddYea may still send general assignment-availability notifications without using the driver’s location.
5. Automatically Collected and Technical Information
When individuals use AddYea websites or applications, AddYea or its service providers may automatically collect information such as:
• IP address;
• device type;
• operating system;
• browser type;
• app version;
• device identifiers where applicable;
• session information;
• login timestamps;
• activity timestamps;
• app or website interactions;
• pages or screens viewed;
• crash reports;
• error logs;
• diagnostic information;
• security logs;
• notification tokens;
• approximate location information where applicable;
• referral or source information;
• cookies; and
• similar technical information.
This information may be used to operate, maintain, analyze, secure, troubleshoot, and improve the Services.
6. Camera, Photograph, and File Permissions
Certain AddYea features may require access to a device camera, photographs, or uploaded files.
Examples may include:
• driver profile photographs;
• driver’s licence or insurance documents;
• vehicle or verification documents;
• proof-of-delivery photographs;
• incident or damage photographs;
and
• other operational features requiring images or documents.
AddYea will request applicable device permission where required. Access is used only in connection with features for which such permission has been provided.
7. How AddYea Uses Driver Personal Information
AddYea may use driver personal information for purposes including:
• creating and maintaining driver accounts;
• verifying identity, licence, vehicle, insurance, and eligibility information;
• authenticating logins and providing OTP/security verification;
• offering, assigning, coordinating, and managing delivery work;
• coordinating pickups and deliveries;
• verifying delivery completion;
• supporting assignment-time and pay records;
• administering driver earnings and payouts;
• calculating earnings, premiums, adjustments, or other applicable amounts;
• providing driver support;
• communicating about assignments, deliveries, payouts, account matters, and safety issues;
• investigating complaints, incidents, disputes, or suspected fraud;
• maintaining platform and account security;
• complying with tax, accounting, regulatory, and legal obligations;
• maintaining required business and platform-worker records;
• improving dispatch, delivery operations, and technical performance;
• protecting the rights, property, safety, and security of AddYea and users; and
• complying with applicable legal requirements.
AddYea will not use personal information for a materially different purpose without appropriate notice and consent where required by law.
8. Analytics and Operational Insights
AddYea may use driver and operational data to analyze delivery demand, assignment activity, pickup and delivery performance, store wait times, delivery completion, incidents, technical performance, app interactions, and operational efficiency.
Where appropriate, AddYea may use aggregated or de-identified information for business, analytical, operational, or statistical purposes. AddYea does not use driver personal information for third-party targeted advertising under this Privacy Policy.
9. Customer Information Provided to Drivers
When a driver is assigned to an order, AddYea may provide information reasonably necessary to complete that delivery, including the customer or recipient name, delivery address, delivery instructions, customer or recipient telephone number, store and pickup information, and other delivery-related information reasonably necessary to complete the assigned delivery.
Drivers receive customer or recipient information only for the purpose of performing the applicable AddYea delivery and may not use, retain, disclose, or contact the customer or recipient for unrelated purposes.
10. Driver Information Shared With Stores
Participating stores do not have general access to driver profiles or driver personal information.
When a driver is assigned to collect an order, AddYea may provide a store with limited driver information reasonably necessary to identify the assigned driver and complete the order handoff.
Stores do not receive access to sensitive driver information such as banking information, tax information, SIN, driver’s licence documentation, insurance documents, residential address, or unrelated personal information.
11. SMS Communications
AddYea may verify an account or contact information using an email OTP, an SMS OTP when available, or another reasonable security method.
SMS/text messaging, when available, is used only for one-time passwords, security verification codes, and related account-verification purposes. It is not used for advertising, promotions, marketing campaigns, promotional offers, or unrelated commercial messaging.
Where an SMS consent mechanism is presented, AddYea will obtain consent in accordance with applicable requirements. Phone numbers may be provided to an SMS service provider only as necessary to deliver requested or authorized OTP/security-verification messages and administer the SMS service.
Message and data rates may apply depending on the individual’s wireless service provider. Where applicable, users may follow available STOP or HELP instructions associated with the SMS service. SMS consent is not treated as consent to receive promotional or marketing messages.
12. Email Communications
AddYea may use email for transactional, authentication, security, legal, support, and service-related purposes, including:
• account registration and login;
• email OTP or verification codes;
• account recovery and security notices;
• driver account communications;
• important service announcements;
• Privacy Policy updates;
• Terms or agreement updates; and
• legally required notices.
Where relevant to the service, email may also be used for assignment, delivery, payout, support, safety, incident, or other operational communications.
AddYea does not send promotional or marketing emails under this Privacy Policy.
Telephone and WhatsApp Support
Where AddYea offers telephone or WhatsApp support, AddYea may use the driver phone number and process the content of support or operational communications as reasonably necessary to provide assistance, coordinate the Services, document decisions, resolve disputes, address safety concerns, or maintain business records.
Telephone and WhatsApp communications are separate from SMS. AddYea does not use these support channels for promotional or marketing messaging under this Privacy Policy unless a separate lawful consent process is introduced.
AddYea does not ordinarily record telephone calls. If call recording is introduced in the future, AddYea will provide appropriate notice and obtain consent where required by applicable law.
Where a third-party messaging service such as WhatsApp is used, that service may process information under its own terms and privacy practices.
13. Push and In-App Notifications
AddYea may send transactional, operational, security, and service-related push notifications or in-app notifications to drivers.
These may include notifications relating to account activity, security, delivery opportunities, assignments, pickup or delivery status, payouts, safety, and other operational matters applicable to the account.
Push notifications are separate from SMS communications. Users may generally control push-notification permissions through their device settings. Disabling notifications may result in missed or delayed operational updates.
AddYea does not treat permission for push notifications as consent to receive promotional SMS.
14. Service Providers and Other Third Parties
AddYea may use third-party companies and service providers to assist in operating the Services. Such providers may perform functions including:
• cloud hosting;
• database management;
• authentication;
• app infrastructure;
• analytics;
• diagnostics;
• security;
• fraud prevention;
• payment processing;
• banking or payment transmission;
• OTP and security-verification delivery;
• email delivery;
• push notifications;
• POS integrations;
• inventory integrations;
• mapping and location services;
• accounting;
• tax reporting;
• legal services;
• insurance-related services; and
• other technical or operational functions.
AddYea seeks to limit the information provided to service providers to information reasonably necessary for them to perform their functions. Service providers are expected to process information only for authorized purposes and subject to appropriate contractual, technical, organizational, or other safeguards.
For website Driver interest forms, AddYea may use Wix to host the website and process form submissions, Google Workspace and Google Sheets to receive, store, and manage submissions and follow-up records, and an email service provider to send a confirmation email or follow-up communication. AddYea provides these service providers only the information reasonably necessary for these purposes and expects them to apply appropriate safeguards.
15. Professional Advisers and Authorities
AddYea may disclose information where reasonably necessary to accountants, auditors, lawyers, tax advisers, insurers, financial institutions, governmental authorities, regulators, courts, or law-enforcement authorities.
Such disclosure may occur where reasonably necessary to comply with applicable law, satisfy tax or regulatory reporting obligations, respond to lawful legal process, protect legal rights, investigate fraud, address safety concerns, enforce agreements, or establish, exercise, or defend legal claims.
16. Sale of Personal Information
AddYea does not sell or rent personal information to third parties for their independent marketing purposes.
Aggregated or effectively de-identified information may be used or shared for legitimate business, analytical, operational, or statistical purposes where such information is not intended to identify an individual.
17. Corporate Transactions
Personal information may be disclosed or transferred as part of a proposed or completed investment, financing, merger, acquisition, restructuring, reorganization, sale of assets, sale of business, or similar corporate transaction.
Where appropriate, AddYea will take reasonable steps to require that personal information remain subject to appropriate confidentiality and privacy safeguards.
18. Cross-Border Processing
AddYea and its service providers may store or process personal information in Canada or in other jurisdictions.
Where personal information is transferred outside Canada, it may be subject to the laws of the jurisdiction in which it is processed and may be accessible to courts, law-enforcement agencies, regulatory authorities, or governmental authorities in accordance with applicable law.
AddYea remains responsible for personal information under its control and seeks to use reasonable contractual, organizational, and technical safeguards when information is processed by third-party service providers.
19. Access Controls and Confidentiality
Access to personal information is restricted based on legitimate operational requirements. Sensitive information is restricted to authorized AddYea personnel on a need-to-know basis.
Sensitive information such as banking information, tax information, identity documentation, driver’s licence documentation, insurance documentation, and other highly sensitive records is intended to be accessible only to appropriately authorized administrative, finance, compliance, or other personnel where required for their responsibilities.
20. Security Safeguards
AddYea uses reasonable administrative, technical, and organizational safeguards appropriate to the sensitivity of personal information.
These safeguards may include:
• access controls;
• authentication controls;
• password protection;
• OTP verification;
• role-based access restrictions;
• secure communications;
• encryption in transit;
• encryption at rest where supported and appropriate;
• secure cloud infrastructure;
• restricted access to sensitive documents;
• monitoring and security logging;
• backups;
• fraud-prevention measures;
• system updates;
• vulnerability remediation; and
• procedures for responding to security incidents.
No electronic system, network, or method of storage or transmission can be guaranteed to be completely secure. Accordingly, AddYea cannot guarantee absolute security.
21. Retention of Driver Personal Information
AddYea retains driver personal information only for as long as reasonably necessary to operate the Driver Services, administer payouts, comply with legal obligations, resolve disputes, prevent fraud, enforce agreements, address safety or insurance matters, and satisfy tax, accounting, platform-worker, and regulatory requirements.
Driver earnings, payout records, tax information, and related financial records may be retained for periods required by applicable tax, accounting, digital-platform-worker, and regulatory requirements.
Where Ontario digital-platform-worker legislation applies, required platform-worker records, including assignment and pay records, will be retained for at least the legally required period, including at least three years after the driver’s platform access is terminated where required by law.
Driver’s licence, insurance, vehicle, identity, and similar verification documents may be retained while required for the driver relationship and afterward where reasonably necessary for legal, dispute, regulatory, insurance, or record-keeping purposes.
Support communications and incident/complaint records may be retained while an issue is active and for a reasonable period afterward for operational, dispute-resolution, legal, safety, security, or record-keeping purposes.
Website Driver interest submissions that do not result in driver onboarding will be retained only for as long as reasonably necessary to respond to the inquiry, assess the potential opportunity, maintain reasonable business records, or meet legal obligations. When the information is no longer reasonably required, AddYea will delete, destroy, or appropriately de-identify it.
22. Driver Delivery-Location Retention
AddYea seeks to minimize retention of driver location information.
Delivery-related driver location records may generally be retained for up to seven (7) days after completion of a delivery.
Relevant information may be retained beyond seven days where reasonably necessary in connection with an active customer complaint, delivery dispute, safety incident, suspected fraud, insurance matter, legal proceeding, regulatory request, or another legitimate legal or operational requirement.
AddYea does not retain continuous driver movement history indefinitely. Where records are no longer reasonably required, AddYea may delete, destroy, or appropriately de-identify them.
23. Account Closure and Deletion Requests
Drivers may request account closure or deletion by contacting admin@addyea.com.
An account-deletion or closure request does not necessarily result in immediate deletion of every record associated with the account.
AddYea may retain information where reasonably necessary or required for tax obligations, accounting, payment records, digital-platform-worker recordkeeping, regulatory reporting, fraud prevention, security, dispute resolution, insurance matters, enforcing agreements, legal claims, or other requirements imposed by applicable law.
Where information is no longer required, AddYea will take reasonable steps to delete, destroy, or de-identify it in accordance with applicable requirements.
24. Access and Correction Rights
Subject to applicable law, individuals may request confirmation of whether AddYea holds personal information about them, access to their personal information, information about how their information has been used or disclosed, correction of inaccurate or incomplete information, or updates to account information.
Requests may be submitted to admin@addyea.com. AddYea may need to verify the requester’s identity before providing access to or changing personal information. Certain information may not be provided where access is restricted or prohibited by applicable law.
25. Withdrawal of Consent
Where AddYea relies on consent for a particular collection, use, or disclosure of personal information, an individual may withdraw that consent subject to reasonable notice and any legal or contractual restrictions.
Withdrawal of consent may affect AddYea’s ability to provide certain Services or features. Consent may not always be withdrawn where AddYea must retain or process information to comply with applicable laws, maintain required records, complete a transaction, prevent fraud, resolve an active dispute, or exercise legal rights.
Requests may be directed to admin@addyea.com.
26. Third-Party Links and Services
The AddYea Services may contain links to or integrations with third-party websites, platforms, POS systems, payment services, or other external services.
Third-party services operate under their own privacy policies and terms. Except where required by applicable law, AddYea is not responsible for the independent privacy practices of third-party services that are not under AddYea’s control.
27. Accuracy of Information
AddYea relies on drivers to provide accurate and current information. Information relevant to the Services should be updated when it changes. Correction requests may be submitted to admin@addyea.com.
28. Age Requirements
Driver accounts are intended for individuals who are at least 18 years of age. If AddYea becomes aware that personal information has been collected from an individual who does not meet applicable eligibility requirements, AddYea may take reasonable steps to restrict the account and delete or otherwise appropriately handle the information.
29. Privacy and Security Incidents
AddYea maintains procedures intended to identify, investigate, contain, document, and respond to suspected privacy or security incidents.
Where a breach of security safeguards occurs, AddYea will take steps appropriate to the circumstances. Where required by applicable law, AddYea will notify affected individuals and applicable privacy or regulatory authorities.
30. Privacy Complaints
Individuals who have questions or concerns regarding AddYea’s privacy practices are encouraged to contact admin@addyea.com.
AddYea will review privacy complaints and take reasonable steps to investigate and respond. Individuals may also have the right to raise unresolved privacy concerns with the Office of the Privacy Commissioner of Canada or another applicable privacy regulator.
31. Changes to this Privacy Policy
AddYea may update this Privacy Policy from time to time to reflect changes to the Services, new functionality, technological developments, operational changes, changes to service providers, changes to legal or regulatory requirements, or changes to AddYea’s information-handling practices.
The updated Privacy Policy will be made available through the applicable AddYea application, website, or another appropriate location and will identify the date of the most recent revision.
Where a change materially affects how AddYea collects, uses, or discloses personal information, AddYea will provide appropriate notice and, where required by applicable law, obtain additional consent before the new practice takes effect.
32. Future Features
This Privacy Policy applies to AddYea’s currently offered Services for this user group. Where AddYea introduces materially different services or features in the future that involve new types of personal information or materially different uses or disclosures of information, AddYea may update this Privacy Policy and provide any notice or obtain any consent required by applicable law before implementing those practices.
33. Contact AddYea
Questions, requests, account-deletion or closure requests, correction requests, consent-related requests, or complaints regarding this Privacy Policy or AddYea’s handling of personal information may be submitted to:
Privacy Officer
AddYea Technologies Inc.
Ontario, Canada
Email: admin@addyea.com