Privacy Policy

Who We Are: Data Controller

BlueScroll, Inc. operating as Vessel, a Delaware corporation headquartered in Texas, USA, is the data controller responsible for personal data processed through the Vessel platform at vessel.delivery. We provide a peer-to-peer package exchange platform powered by smart reusable containers. Throughout this policy, "we," "us," and "our" refer to BlueScroll, Inc.

Information We Collect

We collect the following categories of information when you use the Vessel platform:

• Account information: name, email address, phone number, and profile details you provide during registration.
• Location data: GPS coordinates from your device and from Vessel containers to enable real-time tracking of shipments.
• Payment information: payment method details processed securely through Stripe. We do not store full card numbers on our servers.
• Device information: device type, operating system, browser, IP address, and unique device identifiers.
• Usage and analytics data: pages visited, features used, interactions with the platform, and performance metrics collected through PostHog.
• Vessel interaction data: NFC tap events, BLE proximity data, and container telemetry associated with your shipments.

How We Use Your Information

• Provide, operate, and improve the Vessel platform.
• Process payments, holds, and refunds for deliveries.
• Enable real-time shipment tracking and delivery confirmation.
• Send transactional notifications (dispatch updates, delivery confirmations).
• Enforce platform rules, prevent fraud, and resolve disputes.
• Analyze usage patterns to improve the product experience.
• Comply with legal obligations.

SMS / Text Messaging

When you provide your mobile number and opt in, we send SMS text messages for account verification (one-time passcodes) and delivery/dispatch updates (such as pickup, in-transit, and drop-off notifications). Message frequency varies based on your activity. Message and data rates may apply. Reply STOP at any time to opt out, or HELP for help.

We do not share your mobile information or SMS opt-in consent with any third parties or affiliates for their marketing or promotional purposes. Mobile numbers are used only to deliver the verification and delivery messages described above, and are shared solely with the messaging provider (Twilio) that transmits these texts on our behalf. No mobile opt-in data is sold or shared for marketing.

Cookies and Tracking

We use the following cookies:

• Authentication cookies: session tokens issued by Auth0 to keep you signed in.
• Analytics cookies: PostHog cookies to understand how the platform is used. These can be opted out of.

We do not sell your data or use third-party advertising cookies.

Third-Party Services

We share data with the following service providers who process it on our behalf:

• Stripe: payment processing, including payment holds, captures, and fee collection via Stripe Connect. When operators and hosts onboard to receive payouts, Stripe collects identity-verification (KYC) information, such as legal name, date of birth, government identifiers, and bank account details, directly from them and processes it under Stripe's own privacy policy to meet Stripe's legal obligations.
• Auth0: identity and authentication services, including secure sign-in and session management.
• Vercel: web hosting and content delivery for vessel.delivery, which processes request data such as IP addresses and server logs.
• PostHog: product analytics and feature flag evaluation.
• Expo: push notification delivery to mobile devices.
• Twilio: delivery of SMS verification codes and dispatch/delivery text notifications to the mobile number you provide.

Operators and Joint Controllership

Commercial services on Vessel are run by independent operators. StorageHero, a storage service built on top of Vessel, is the first such operator. When you use an operator's service, the personal data needed to fulfill your shipments, such as your account details, shipment records, and Vessel interaction data, flows into the Vessel platform.

For that shared processing, the operator and BlueScroll, Inc. act as joint controllers under Article 26 of the GDPR. We determine the purposes and means of that processing together with the operator under a joint-controller arrangement, and a summary of its essence is available on request. You can exercise your data rights against either party. Contact us using the details below and we will coordinate with the operator on your behalf.

Data Retention

We retain your account data for as long as your account is active. Shipment records and transaction history are retained for a minimum of seven years to comply with financial reporting requirements. You may request deletion of your account and personal data at any time, subject to legal retention obligations.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to access: request a copy of the personal data we hold about you.
• Right to correction: request that we correct inaccurate or incomplete data.
• Right to deletion: request that we delete your personal data.
• Right to opt out: opt out of analytics tracking and non-essential cookies.
• Right to data portability: receive your data in a structured, machine-readable format.

These rights apply under the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR) where applicable.

To exercise any of these rights, email privacy@bluescroll.com, the shared privacy contact for all BlueScroll, Inc. brands. We will verify your request and respond within the timeframe required by applicable law.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined by the CCPA. Because of this, this site does not carry a "Do Not Sell or Share My Personal Information" link. If our practices change, we will add that link and update this policy first.

Security

We implement industry-standard security measures including encrypted data transmission (TLS), secure authentication protocols, and access controls to protect your personal data. No method of transmission over the internet is 100% secure, but we take reasonable steps to safeguard your information.

Changes to This Policy

We may update this privacy policy from time to time. When we make material changes, we will notify you through the platform or via email. Your continued use of the platform after changes take effect constitutes acceptance of the updated policy.

Contact Us

If you have questions about this privacy policy, contact us at privacy@vessel.delivery. To exercise your data rights across any BlueScroll, Inc. brand, use the shared privacy contact at privacy@bluescroll.com.