Privacy Policy

Overview

LuxDispatch is dispatch-management software for licensed chauffeured ground transport operators. Each operator runs a separate tenant. Operator data is isolated at the database row level via row-level security policies and is never shared with another operator or any third party except the subprocessors listed below.

What we collect

Operator accounts: Name, email address, phone number, organization name, role within the organization. Used for authentication, team management, and transactional communications.

Client records: Names, phone numbers, email addresses, addresses, and booking preferences as entered by the operator. LuxDispatch does not independently collect client data. All client records are created and owned by the operator.

Booking data: Pickup/dropoff locations, times, vehicle types, driver assignments, special instructions, pricing, and invoice records. This is the operator’s business data.

Usage data: Error logs, page views, and performance metrics collected via Sentry for debugging and reliability. No personally identifiable information is sent to Sentry beyond what appears in error stack traces.

Subprocessors

LuxDispatch uses the following third-party services to operate the platform:

• SupabaseDatabase hosting, authentication, file storage · US (AWS us-east-1)
• TwilioSMS dispatch notifications to drivers · US
• ResendTransactional email (confirmations, invoices, team invites) · US
• SentryError monitoring and performance tracking · US
• Anthropic (Claude)AI booking parsing (text-only, no PII stored by Anthropic) · US
• VercelApplication hosting and deployment · US (AWS)

Data retention

Operator data is retained for the duration of the subscription. Upon cancellation, data is retained for 30 days (recovery window), then permanently deleted. Operators may request immediate deletion at any time by contacting hello@luxdispatch.app.

GDPR rights

If you are located in the European Economic Area, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a machine-readable format
• Object to or restrict processing of your data

To exercise any of these rights, contact hello@luxdispatch.app. We will respond within 30 days.

AI data handling

LuxDispatch uses AI (Anthropic Claude) to parse incoming booking text into structured fields. The AI receives only the booking message text. It does not receive client names, phone numbers, or payment information. Anthropic does not store or train on data sent through their API. AI suggestions are never auto-applied. The dispatcher reviews and confirms every parsed booking.

Security

All data is encrypted in transit (TLS 1.3) and at rest (AES-256 via Supabase/AWS). Authentication is handled via Supabase Auth with optional multi-factor authentication. Row-level security policies ensure complete data isolation between operator tenants. Every data mutation is audit-logged with timestamp, actor, and before/after values.

Contact

For privacy inquiries, data requests, or concerns: hello@luxdispatch.app