Privacy policy

What this site is

MyHumanDriver.com is a tool independent drivers use to build a personal website, plus an optional directory of driver websites. Directory participation is optional: a website can be public without appearing in the directory. We do not take bookings, dispatch rides or process payments for rides or errands. This policy describes what the site actually does today; when the site changes, this page changes with it.

If you only browse

• No account needed. You can browse every directory and driver page without an account. We use no analytics or advertising trackers.
• Cookies. The site sets a session cookie and a security (CSRF) cookie needed for forms to work. Nothing identifies you across other sites.
• Sessions. Each visit gets a server-side session record that stores your IP address and browser identifier (user agent) with the session data, so forms work and abuse can be traced. The web server does not currently keep separate access logs.
• Flag for review. When you report a page we store the reason and the optional note you write. The report record itself holds no IP address; a keyed one-way hash derived from it limits repeat reports and deduplicates identical ones. Your session record, described above, is separate.
• Contacting a driver. Call, text, WhatsApp and video links open your own apps and connect you directly with the driver. We are not part of that conversation and never see it.

If you are a driver with an account

• Private to your account: your name, login email, password (stored only as a hash), email verification status, login sessions, and, for site reviewers, two-factor authentication secrets. Your login email is never shown on your page or in the directory.
• Public by design, once you publish: your display name, the phone number you choose for Call, Text and Save to Contacts, a WhatsApp number or video-chat link if you add them, services, service areas, languages, vehicle description, optional bio and advertised rate, payment buttons that link to your own Venmo, Cash App, PayPal.Me, Square or Stripe pages, and your photos as processed display copies. Anyone can view, save and share this, search engines may index it, and the Free Media Kit reproduces it on material you print yourself. Whether your website also appears in the directory is a separate choice recorded with your account (the choice, when you made it and a history of changes); it does not change what is public on your website.
• Drafts stay private until you publish. Previews are visible only to you, with one exception: when a publication is held for review, authorized site reviewers can inspect the held text and photos for moderation while that case is open.
• Photos. Uploaded originals are converted into resized display copies and the original file is removed after processing. Camera metadata is not carried into the display copies. Replaced or removed photos and superseded page versions are cleaned up by a scheduled process once nothing refers to them any more. Content that belongs to a pending publication, a held review case, or evidence kept for a moderation or security decision stays until that need ends, and backups keep their own copies until they are rotated.

Who else processes data, and why

• Automated screening before publication. Before a page or a change goes live, its public text (display name, vehicle description, coverage note, and bio when shown) and its displayed photos are sent to an automated screening service, currently OpenAI's moderation endpoint, to check for prohibited content. Structured contact details, payment links and video links are not sent. According to the provider's published data policy for that endpoint, submissions are not used to train its models. Flagged pages are held for the site owner's review instead of going live.
• Transactional email. Email verification and password reset messages are delivered through Postmark. We send no marketing email.
• Hosting and backups. The site runs on a dedicated server with daily server backups from the hosting provider, and encrypted recovery backups are kept with a separate storage provider so the site can be restored after a failure.

Moderation and records

• The site owner reviews flagged pages and public reports, and can hold, suspend or remove a page. Suspended pages are no longer public.
• Review decisions, pauses and account access changes are recorded in audit logs tied to the account that made them.

Your choices

• Unpublish any time from your account. Your page leaves public view immediately and your draft is kept.
• Edit or remove any part of your page; the next publication replaces the public version.
• Close your account by contacting support (see below). Account closure is handled by the site owner; there is no self-service deletion yet.

Security

All pages are served over HTTPS. Passwords are stored as hashes. Private photos and drafts are stored outside the public web root and are served only to their owner, to authorized site reviewers while a publication is held for moderation, or, after publication, as the displayed copies on your page.

Contact, reports and abuse

• Report a page. Every published driver page has a “Flag for review” link at the bottom. Reports go to the site owner for review; you do not need an account.
• Support and privacy requests. Contact ricky@mynashvilledriver.com. Use it for account questions, removal or correction requests, and anything you cannot report through a page.

Changes

We update this page when the site's behaviour changes. The date at the top shows the current version. See also the terms of service.