Legal

Privacy Policy

We take your privacy seriously. This policy explains what data we collect, why we collect it, and how we protect it across our platform — for merchants, warehouse hosts, drivers, and customers.

Last updated: March 21, 2026

Overview

Wormhologic, Inc. ("Wormhologic," "we," "us," or "our") operates a social logistics platform that connects merchants, warehouse hosts, drivers, and customers. This Privacy Policy applies to all users of our website (wormhologic.com), mobile applications, APIs, and related services (collectively, the "Platform").

By accessing or using the Platform, you agree to the collection and use of information described in this policy. If you do not agree, please do not use our services.


Information We Collect

We collect information in three ways: directly from you, automatically through your use of the Platform, and from third parties.

Information you provide

Depending on how you use the Platform, we may collect:

  • Account information: name, email address, phone number, and password when you register.
  • Identity verification: government-issued ID, selfie photos, and background check data for warehouse hosts and drivers, as required by law and for safety.
  • Business information (merchants): company name, billing address, tax identification number, bank account or payment details for payouts.
  • Space information (warehouse hosts): address, photos, dimensions, and availability of your storage space.
  • Vehicle information (drivers): vehicle make, model, registration, and insurance documentation.
  • Inventory data (merchants): product descriptions, SKUs, quantities, and shipment details.
  • Communications: messages you send through our support channels or in-app messaging.
  • Contact form submissions: name, email, company, and message content submitted via our website.

Information collected automatically

  • Location data: real-time GPS location from driver and host apps to coordinate pickups and deliveries. Customers may optionally share location for delivery tracking.
  • Device information: IP address, browser type, operating system, device identifiers, and app version.
  • Usage data: pages visited, features used, clicks, session duration, and referral sources.
  • Cookies and tracking technologies: see the Cookies section below.
  • Transaction data: order IDs, delivery timestamps, route data, payment amounts, and fulfillment records.

Information from third parties

  • Identity verification partners (e.g., background check providers).
  • Payment processors (e.g., Stripe) — we receive payment confirmation but do not store full card numbers.
  • Mapping and routing services (e.g., Google Maps) for delivery coordination.
  • Analytics providers for aggregate platform analytics.

How We Use It

We use the information we collect to:

  • Operate the Platform: match merchants with nearby warehouse hosts, assign drivers to orders, process payments, and facilitate deliveries.
  • Verify identity and eligibility: conduct background checks on drivers and hosts to maintain a safe and trusted network.
  • Process transactions: charge merchants for storage and delivery fees, and issue payouts to hosts and drivers.
  • Provide customer support: respond to inquiries, resolve disputes, and communicate platform updates.
  • Improve the Platform: analyze usage patterns, diagnose technical issues, and develop new features.
  • Send communications: transactional emails (order confirmations, payout receipts), operational notices, and — with your consent — marketing communications.
  • Ensure safety and security: detect fraud, investigate abuse, enforce our Terms of Service, and comply with legal obligations.
  • Generate analytics: provide merchants with insights about their logistics performance, customer distribution, and cost trends.

We process your data based on one or more of the following legal grounds: performance of a contract with you, your consent, our legitimate business interests, or compliance with a legal obligation.


Sharing & Disclosure

We do not sell your personal information. We share it only in the following circumstances:

Within the platform network

To coordinate logistics, certain information is shared between platform participants. For example, a driver receives a pickup address from a host, and a customer receives a driver's first name and vehicle details for tracking purposes. We share only what is necessary to complete each transaction.

Service providers

We work with trusted third-party vendors who process data on our behalf — including cloud infrastructure, payment processors, background check providers, mapping services, and email delivery providers. These vendors are contractually bound to use your data only for the purposes we specify.

Legal requirements

We may disclose your information if required by law, regulation, legal process, or a valid government request, or if we believe disclosure is necessary to protect the rights, property, or safety of Wormhologic, our users, or the public.

Business transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our Platform before your data is transferred and becomes subject to a different privacy policy.

With your consent

We may share your information with third parties when you have explicitly consented to such sharing.


Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Specifically:

  • Account data: retained for the lifetime of your account plus 3 years after closure, to comply with tax and legal obligations.
  • Transaction records: retained for 7 years to comply with financial regulations.
  • Driver and host identity documents: retained for the duration of your participation in the network and 2 years thereafter.
  • Location data: precise GPS traces are retained for 90 days, then aggregated and anonymized.
  • Support communications: retained for 3 years.

You may request earlier deletion of your data where legally permissible. See Your Rights below.


Security

We implement industry-standard technical and organizational measures to protect your information against unauthorized access, disclosure, alteration, or destruction. These include:

  • Encryption of data in transit (TLS) and at rest (AES-256).
  • Role-based access controls limiting employee access to personal data on a need-to-know basis.
  • Regular security audits and vulnerability assessments.
  • Multi-factor authentication for internal systems.

No system is 100% secure. If you believe your account has been compromised, contact us immediately at hello@wormhologic.com.


Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: request a copy of the personal data we hold about you.
  • Correction: request correction of inaccurate or incomplete data.
  • Deletion: request deletion of your personal data, subject to legal retention obligations.
  • Portability: receive your data in a structured, machine-readable format.
  • Objection: object to processing based on legitimate interests.
  • Withdraw consent: where processing is based on consent, withdraw it at any time without affecting prior processing.
  • Opt out of marketing: unsubscribe from marketing emails at any time via the link in any email we send.

To exercise any of these rights, email us at hello@wormhologic.com. We will respond within 30 days. We may need to verify your identity before processing your request.


Cookies

We use cookies and similar tracking technologies on our website. Specifically:

  • Strictly necessary cookies: required for the Platform to function (e.g., authentication sessions). These cannot be disabled.
  • Analytics cookies: help us understand how visitors use the site (e.g., which pages are most visited). We use anonymized analytics and do not build individual profiles.
  • Preference cookies: remember your settings such as language and region.

You can control non-essential cookies through your browser settings. Note that disabling cookies may affect some Platform functionality.


Children's Privacy

The Wormhologic Platform is not directed to children under 18. We do not knowingly collect personal information from minors. If we learn that we have collected data from a child under 18 without parental consent, we will delete it promptly. If you believe a minor has provided us with personal information, contact us at hello@wormhologic.com.


Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (to the address on your account) and/or by posting a prominent notice on the Platform at least 14 days before the changes take effect. Continued use of the Platform after the effective date constitutes acceptance of the updated policy.

The date at the top of this page indicates when this policy was last revised.


Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with your local data protection authority if you believe we have not addressed your concerns adequately.