Effective August 17, 2026 · Updated October 3, 2026 · Version zeft-terms-privacy-2026-08-17

Privacy Policy

Controller: ZEFT INC., New York DOS ID 7987053
Serving Manhattan, Brooklyn, Queens, the Bronx & Staten Island
[email protected]

This Policy explains what Zeft collects through zeft.ai and the Zeft mobile apps, why we use it, the categories of recipients, and your choices. We do not sell personal information and do not give customer photos or details to another company for that company’s own advertising.

Account deletion is available in My Profile. If you cannot sign in, use our public account-deletion instructions.

1. Information we collect

2. Sources

We receive information from you; other authorized job participants; your device permissions; Stripe; Checkr, Sumsub and other identity, screening and compliance providers; maps/geocoding providers; operational facilities and receipts; referral links; and security, communications and analytics providers. We do not upload a user’s address book or build a marketing contact database from device contacts.

3. Why we use information

4. Photos, storage, automated analysis and AI providers

Photos and documents you upload are stored with Cloudflare (Cloudflare R2 storage and Cloudflare Images) and served to the people and systems that need them for the job. Photos may be processed by Zeft systems and contracted image-analysis or AI providers to identify items, estimate volume/weight, check image quality and support disputes. Results can be inaccurate; users can review and correct recognized items. We limit the submitted data to what is needed for the task and require providers to process it for Zeft’s service. Documents a Hauler uploads, including ID documents, insurance certificates and bank statements, may also be read by a contracted AI provider to fill in fields the Hauler then checks and corrects; a person at Zeft reviews the document itself. Zeft does not authorize a provider to use private job photos or documents for that provider’s own advertising or general-purpose model training. Photos you choose to post on a public Stoop listing are visible to anyone who views that listing.

5. Hauler background checks and identity verification

Background checks by Checkr. When Zeft enables Checkr screening for a new Hauler, Checkr, Inc., a consumer reporting agency, performs the background check. Zeft uses Sumsub for identity verification and can require both providers for new Haulers (see below). A Checkr check can be started only once Zeft has connected its Checkr account and chosen a screening package; until then no Checkr background check is started. If Checkr is required for a Hauler, that Hauler cannot accept jobs until both required reviews pass. Zeft does not treat a Sumsub identity result as a Checkr screening result. When a Hauler has finished the Zeft part of setup and starts the check, Zeft sends Checkr the applicant’s name, email address and, when available, phone number and ZIP code, the screening package Zeft orders, the city and state of that Hauler’s mapped operating base, and a Zeft account reference. Checkr then emails the applicant a secure link. On Checkr’s own page the applicant reviews the disclosure, gives the authorization required by the Fair Credit Reporting Act (FCRA), and provides their Social Security number, date of birth and driver’s license details. What the applicant enters on Checkr’s page goes to Checkr directly; Zeft does not receive it.

The report covers the screenings in the package Zeft orders, which Checkr describes to the applicant before they authorize it. Zeft does not copy the report into its own systems. From the Checkr check, Zeft keeps these records: the Checkr candidate, invitation and report references; the invitation link and when it expires; the invitation and report status; the overall result Checkr gives (clear or consider); the adverse-action stage Checkr reports; whether any screening was canceled; the package and work city/state ordered; when Checkr ordered and last updated the report; a log of Checkr’s status updates that holds references and statuses only; a note when a report changes after approval (for example, a dispute); Zeft’s own decision with its reason category, the administrator who made it and when; the Hauler’s verification status, consent version and review date, and, for a decline that is not based on the report, a short general reason the Hauler can see; and an internal audit record of each decision with the decision and the result Checkr gave, plus, for an approval, the report reference, whether the result was consider and, when it was, the administrator’s written note, and, for a decline, the reason category and any note the administrator wrote. An administrator who approves a Hauler whose result is consider must write a note explaining why, and an administrator who declines a Hauler may add one; the note holds up to 500 characters and can describe what the administrator read in the report. Only authorized Zeft staff can see the audit record. An authorized Zeft administrator reads the report in Checkr’s system and decides; Zeft will not approve or decline a Hauler automatically on a Checkr report, and a Hauler cannot accept jobs until an administrator approves them.

Your FCRA rights. If Zeft orders a Checkr report about you, you may ask Checkr for a copy of your report, dispute inaccurate or incomplete information directly with Checkr, and receive a summary of your rights under the FCRA. If Zeft considers declining or removing a Hauler based in whole or in part on a Checkr report, Zeft starts the adverse action process in Checkr’s system: Checkr first sends a pre-adverse action notice with a copy of the report and the summary of rights, Zeft then waits so you can respond or dispute, and only then is a final adverse action notice sent. That notice names Checkr, explains that Checkr did not make the decision, and describes your right to a free copy of the report within 60 days and to dispute it. Zeft sends no message of its own that cites the report. Checkr handles your information under the Checkr Privacy Policy, and you can reach Checkr through its candidate portal at candidate.checkr.com.

Identity verification with Sumsub. Zeft verifies Hauler identity with Sumsub, and a Hauler whom Sumsub approved stays approved. When dual mode is enabled for a new Hauler, Sumsub identity approval and a separate Checkr background screening are both required before work. On Sumsub’s own page the Hauler photographs a government ID document and takes a live selfie. When the verification level Zeft uses includes a screening step, Sumsub also checks the person against screening sources such as sanctions lists, criminal records and adverse media. Zeft stores the verification status, review dates and decision, the type of ID document verified and its expiry date, the live-selfie result, and whether a screening ran, its result and the categories of any match Sumsub reports. Authorized Zeft administrators can see what the Hauler gave Sumsub, including the ID images, selfie, name, date of birth and address, in Zeft’s admin tools; Zeft reads those details from Sumsub when they are needed and does not copy them into its own database. A Hauler cannot accept jobs until the identity check is approved, and a screening that reports a match stops that Hauler from accepting jobs until a person at Zeft resolves it. Sumsub handles this information under its own privacy notice, and Zeft keeps the Sumsub results of Haulers who verified that way.

6. Location while a Hauler is on the way

When a Hauler accepts a job, Zeft automatically shares the Hauler’s live location with that job’s customer so the customer can see when to expect the truck. The Hauler can pause sharing at any time; a pause is shown on both screens and removes the stored position. Sharing ends by itself when the job is completed or canceled, and a stored live position expires within six hours. Zeft sends location points to Google Maps Platform to calculate the route, the arrival time and the path drawn on the map. A customer sees a Hauler’s position only for their own active job. The Zeft mobile apps ask for location only while the app is in use; they do not track location in the background.

7. Optional marketing permission

At registration you may separately allow Zeft to use eligible, privacy-reviewed completed-job photos or limited job details to explain or market Zeft. This is optional and does not affect service. The permission persists so we do not ask after every job, but you can withdraw it in My Profile. Uploading a photo is not marketing permission.

Before publication, Zeft creates a separate derivative, strips embedded metadata, generalizes location, and rejects or redacts faces, plates, house numbers, documents, screens and other identifying details. Withdrawal stops future use and queues removal of Zeft-controlled marketing copies. Required transaction, safety and dispute evidence may remain private for the applicable retention period.

8. How we disclose information

When you provide personal data for payment services, Stripe receives and processes it according to Stripe’s Privacy Policy. Customer payments are taken on Stripe’s secure pages and forms. Zeft pays Haulers by bank transfer to the account the Hauler gives Zeft (see section 1). When Zeft approves a Hauler, it may also open a Stripe account for that Hauler using their email address.

9. Cookies, analytics and advertising measurement

Essential storage keeps sessions, security and booking state. To improve the service, we measure usage of zeft.ai with Google Analytics 4 (through Google Firebase): which pages are visited and whether a visit leads to a price, an account or a booked pickup. The events Zeft defines add only their name and, where it applies, an amount in US dollars, the sign-in method, the account type (customer or Hauler) and an opaque job number. Like any Google Analytics measurement, each visit also carries what Google collects automatically: the page address and title, the page you came from, a cookie that recognizes this browser, an approximate location Google derives from your IP address, and browser and device details. We do not send your name, email, phone number, address or photos to Google Analytics, and we remove sign-in links and personal details from the page address before it is recorded. Google signals and ad personalization are turned off, and we do not use Google Analytics to build an advertising profile of you. Zeft does not show ads on its website and does not sell personal information.

Google Ads conversion measurement. If Zeft advertises on Google, the same measurement may tell Google Ads that a visit its ad brought led to a priced estimate or a confirmed booking, so Zeft can see which campaigns work. Google may use its own cookies and the ad-click identifier to do this. It shows nothing on zeft.ai, does not add you to a remarketing list, and follows your choice below.

To opt out, switch Analytics off above. That stops Google Analytics and Google Ads conversion measurement from this browser. If your browser sends a Global Privacy Control (GPC) signal, we treat it as an opt-out automatically: measurement stays off and the switch shows it. Zeft uses no cookie banner or pop-up. Your choice is saved in this browser only, so set it in each browser you use. You can also ask us at [email protected]. Transactional messages about accounts, safety, jobs, payment and legal notices are not marketing. Promotional email/SMS/push requires opt-in where applicable and includes an opt-out method.

10. Retention and deletion

We retain information only as long as reasonably needed for the purposes above, then delete, anonymize or securely isolate it. Retention varies: account and preference data while active; job, payment, tax, receipt and dispute evidence for legal/accounting/fraud periods; live location only while the job is active (a stored live position expires within six hours) plus limited safety and audit records; photos from a price check that never becomes a booking only until they are no longer needed for that price; identity-verification and screening results, Checkr background-check status and Zeft’s decisions while the Hauler account is active and afterwards for the period needed for legal claims and, for Checkr reports, FCRA obligations (Sumsub and Checkr keep their own records under their own policies); Hauler bank account details and bank proof documents while the Hauler account is active, plus payout records for legal and accounting periods; security logs for a bounded investigation period; and marketing derivatives until consent is withdrawn or the material is retired.

Account deletion is available in My Profile. Zeft disables the account and removes or anonymizes personal data, subject to active jobs and records that must be retained for payments, tax, fraud, safety, disputes or law. Requests are completed within the period required by applicable law.

11. Security and incidents

We use encryption in transit, access controls, password hashing, rate limiting, audit records, provider restrictions and data minimization. No system is perfectly secure. We investigate incidents and provide legally required notices. Users should protect credentials and report suspected misuse to [email protected].

12. Your choices and rights

Depending on applicable law, you may request access, correction, deletion or a copy of personal information; withdraw marketing-media permission; opt out of promotional communications or analytics (see Your privacy choices); and appeal a denied privacy request. Haulers whose background check Checkr prepares also have the FCRA rights described in section 5. We may verify identity and may retain data where legally permitted. We will not discriminate for exercising a privacy right.

Submit requests in My Profile or email [email protected]. Authorized agents must provide proof of authority.

13. Children, transfers and changes

Zeft is not directed to children under 18 and does not knowingly create accounts for them. Providers may process information in the United States and other locations with contractual and legal safeguards. Material policy changes will be notified and, where required, will request renewed consent rather than silently repurpose existing data.

14. Messaging Zeft on WhatsApp

You can message Zeft on WhatsApp to ask a question, get a price from photos and book a pickup. This section explains what happens to your information when you do; the rest of this Policy also applies.

15. Contact

ZEFT INC. · DOS ID 7987053
Serving Manhattan, Brooklyn, Queens, the Bronx & Staten Island
[email protected]

This operational policy should be reviewed by licensed counsel as Zeft enters additional states, adds advertising partners, or changes data providers.