Privacy Policy
Effective date: May 27, 2026
This Privacy Policy describes how Stova ("Stova," "we," "us," or "our") collects, uses, and discloses information when you use our bin-based storage service, our website, and our mobile messaging service (collectively, the "Service"). By using the Service, you agree to the practices described here.
1. Information We Collect
Information you provide
- Account information: name, email address, password (stored hashed), and mobile phone number.
- Addresses: pickup and delivery addresses you save to your account.
- Payment information: processed by our payment provider, Stripe. We do not store your full credit or debit card number; we receive only a tokenized reference and the last four digits.
- Service request data: bin contents you describe, photos you upload, and notes you provide.
- Communications: messages you send to our support team or via our SMS conversational menu.
Information collected automatically
- Usage data: pages visited, features used, and basic device information (browser, operating system).
- Log data: IP address, timestamps, and request metadata for security and debugging.
- Service operations data: bin movement history, warehouse location, route progress, and delivery confirmations created during normal service operations.
2. How We Use Your Information
- To create and manage your account.
- To deliver, schedule, and complete bin pickups, deliveries, and storage.
- To process payments and manage your subscription.
- To send you transactional SMS messages and email about your account and service requests (see Section 5).
- To respond to your support requests.
- To detect, investigate, and prevent fraud, abuse, and security incidents.
- To comply with legal obligations.
3. How We Share Your Information
We share your information only as described below. We do not sell your personal information.
- Service providers (processors): we use third-party providers to operate the Service, including Twilio for SMS delivery, Stripe for payment processing, Supabase for authentication and database hosting, and Vercel for web hosting. These providers process your information only on our instructions and under their own privacy and security commitments.
- Legal compliance: we may disclose information in response to lawful requests by public authorities or to comply with legal obligations.
- Business transfers: in connection with a merger, acquisition, or sale of assets, your information may be transferred subject to standard confidentiality protections.
We do not sell or share mobile phone numbers or SMS opt-in data with third parties or affiliates for marketing or promotional purposes. Phone numbers are used solely for account authentication, service delivery, and customer support. SMS messaging is provided through Twilio under their data processing terms.
4. Data Security
We use industry-standard security measures to protect your information, including encryption in transit (HTTPS/TLS), encrypted storage of sensitive data, role-based access controls, and audit logging for all changes to your account data. No system is perfectly secure, however, and we cannot guarantee the absolute security of your information.
5. Mobile Messaging
Stova uses SMS messaging to:
- Deliver six-digit verification codes during phone number setup ("2FA").
- Send transactional service updates (e.g., service request scheduled, driver en route, driver arrived, pickup completed, delivery completed, bin stored safely, exception notices).
- Support a two-way conversational menu where you can schedule pickups, request bins, manage addresses, request a callback from support, and receive secure payment links.
Opt-in: you provide your phone number during account signup and confirm it by entering a verification code we send to that number. This confirms ownership of the phone and constitutes your opt-in to receive transactional SMS messages from Stova. We retain a timestamped record of your consent linked to your account.
Message frequency: message frequency varies based on your account activity and service requests. You may receive multiple messages around the time of an active pickup or delivery.
Carrier costs: message and data rates may apply. Stova does not charge you for SMS messages, but your carrier may.
Opt-out: you can opt out at any time by replying STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, or QUIT to any message. We will send one confirmation message and then stop sending you SMS messages. Replying HELP or INFO returns support contact information.
Opt back in: if you have opted out, reply START to resume SMS messages.
Supported carriers: AT&T, T-Mobile, Verizon, Sprint, U.S. Cellular, Boost Mobile, MetroPCS, and most other U.S. mobile carriers. Service is available in the United States only.
Liability: carriers are not liable for delayed or undelivered messages. We are not responsible for SMS delivery failures attributable to your carrier or device.
6. Data Retention
We retain your account information for as long as your account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce our agreements. SMS message records, including delivery status and inbound messages, are retained for operational and compliance purposes consistent with applicable law. You may request deletion of your account at any time by contacting us at privacy@stovastorage.com.
7. Your Rights
Depending on your location, you may have rights under applicable privacy laws, including the right to access, correct, delete, or restrict the use of your personal information, and the right to data portability. To exercise any of these rights, contact us at privacy@stovastorage.com. We will respond within the time required by applicable law.
8. Children's Privacy
Stova is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us at privacy@stovastorage.com and we will delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page and, if the changes are material, provide notice through the Service or via email or SMS. Your continued use of the Service after changes take effect constitutes your acceptance of the updated policy.
10. Contact Us
Questions about this Privacy Policy or our privacy practices? Contact us:
- Email: privacy@stovastorage.com
- Mail: Stova, 360 County Road EEA, Gwinn, MI 49841, USA