Effective date: 15 May 2025 · Last updated: 15 May 2025
ShuttleOps ("we", "us", or "our") is operated by Steven Workshop (steven-workshop.net), headquartered in Vancouver, BC, Canada. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you access or use the ShuttleOps platform, including our website, web application, and related services (collectively, the "Service"). By using the Service you agree to the terms of this policy.
Account Information. When you register, we collect your name, work email address, company or property name, and role. If you are a driver invited by an organisation, we also collect the invitation details provided by your coordinator.
Operational Data. As you use the platform, we store trip records, route schedules, driver assignments, vehicle information, airline crew trip details, flight tracking data, and dispatch board activity associated with your organisation.
Contact Submissions. If you submit a contact or demo request form, we collect your name, email, company, role, and the message you provide.
Usage and Technical Data. We automatically collect certain technical information, including browser type, IP address, operating system, pages viewed, and timestamps. This data is used for security, diagnostics, and service improvement.
Cookies. We use session and preference cookies to keep you authenticated and remember display preferences. We do not use advertising or cross-site tracking cookies.
We do not sell, rent, or trade your personal information to third parties.
Service Providers. We share data with a limited set of trusted sub-processors required to operate the platform, including Supabase (database and authentication infrastructure, hosted on AWS). All sub-processors are contractually bound to handle data securely and solely for the purposes we specify.
Within Your Organisation. Coordinators and administrators within your organisation can view trip, driver, and vehicle data associated with that organisation. Each organisation's data is logically isolated from other tenants.
Legal Requirements. We may disclose information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, safety, or property of ShuttleOps, our users, or others.
Business Transfers. In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Service before your data is transferred.
We retain account and operational data for as long as your organisation's subscription is active, plus a period of 12 months after account closure to allow for audit and dispute resolution. Contact and demo request submissions are retained for up to 24 months. You may request earlier deletion by contacting us at the address below.
ShuttleOps employs industry-standard security measures including TLS 1.2+ encryption in transit, AES-256 encryption at rest, row-level security (RLS) on every database table ensuring strict per-organisation data isolation, bcrypt password hashing via Supabase Auth, and role-based access controls. For full details, please review our .
ShuttleOps is operated from Canada. If you access the Service from outside Canada, your data may be processed in Canada or in the United States (where Supabase infrastructure operates on AWS). By using the Service, you consent to this transfer. We take appropriate contractual and technical steps to ensure your data is protected in accordance with this policy.
Depending on your jurisdiction, you may have the right to:
To exercise any of these rights, contact us at join@stevenworkshops.com. We will respond within 30 days.
The Service is intended for business use by adults. We do not knowingly collect personal information from children under the age of 16. If we become aware that we have collected such information, we will delete it promptly.
The Service may contain links to third-party websites (for example, the AviationStack flight data API or the Steven Workshop website). We are not responsible for the privacy practices of those sites and encourage you to review their respective privacy policies.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify active account holders by email. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
© 2026 ShuttleOps. All rights reserved.