Privacy Policy

Last updated: March 4, 2026

1. Information We Collect

When you create an account on CarryLink, we collect the following personal information:

  • Full name and email address
  • Phone number (optional)
  • Country of residence (optional)
  • Profile photo (optional)
  • Trip and package listing details

We also automatically collect certain technical data including your IP address, browser type, device information, and usage analytics to improve our service and ensure security.

2. How We Use Your Information

We use the information we collect to:

  • Create and manage your account
  • Match packages with compatible travelers
  • Facilitate communication between senders and travelers
  • Send important notifications about your trips and packages
  • Detect and prevent fraudulent activity
  • Improve and personalize your experience
  • Comply with legal obligations

3. Data Security

We implement industry-standard security measures to protect your data, including:

  • SSL/TLS encryption for all data in transit
  • Bcrypt hashing for password storage (we never store plain-text passwords)
  • HTTP-only, secure cookies for authentication tokens
  • Rate limiting on sensitive endpoints to prevent brute-force attacks
  • Content Security Policy (CSP) headers to prevent cross-site scripting
  • Regular security audits and monitoring

4. Cookies

CarryLink uses essential cookies to maintain your session and authentication state. These cookies are strictly necessary for the platform to function and cannot be disabled. We do not use tracking cookies or third-party advertising cookies.

5. Data Sharing

We do not sell your personal information to third parties. We may share limited information with other users only as necessary to facilitate deliveries (e.g., sharing your first name and city with a matched traveler or sender). We may also share data with law enforcement if required by law.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time by contacting our support team. Certain data may be retained for legal, security, or fraud-prevention purposes.

7. Your Rights

You have the right to:

  • Access and review the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Withdraw consent for optional data processing

8. Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact us at privacy@carrylink.com.