Privacy Policy
Last updated: June 24, 2026
This policy describes what information Carapax Labs collects, how we use it, and the choices you have, across Carapax Labs and the products we operate, including the Spider Portal platform.
1. Who We Are
Carapax Labs LLC ("Carapax Labs," "we," "us," or "our") is an independent software studio based in New Jersey, United States. This Privacy Policy covers carapaxlabs.com and the products and services we build and operate, including the Spider Portal field-distribution platform (collectively, the "Services"). By using the Services, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the Services.
2. Information We Collect
We collect the following categories of information:
- Account information. When an operator creates an account, we collect a nickname, role, and authentication credentials. We do not store passwords in plain text.
- Customer information. To enable deliveries, we collect customer names, mobile phone numbers, delivery addresses, and order history.
- Order and transaction information. Details of orders placed, items, prices, payment methods recorded at delivery, and delivery status.
- Communications. Messages sent through the Services, including dispatch-to-driver chat and notes attached to orders or deliveries.
- Device and usage information. Standard technical data such as IP address, browser type, and timestamps, used to operate and secure the Services.
- Photos. Optional images uploaded by operators (product photos) or drivers (proof-of-delivery photos).
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Services, including processing and delivering orders.
- Authenticate users, including sending one-time passcodes (OTP) by text message to verify a phone number at sign-in.
- Send transactional messages about orders, such as status and delivery updates.
- Maintain the security and integrity of the Services and prevent fraud or abuse.
- Comply with legal obligations and enforce our Terms of Service.
4. SMS / Text Messaging
Our products, including Spider Portal, use text messaging (SMS) to send one-time passcodes for sign-in verification and transactional updates related to your orders. By providing your mobile phone number, you consent to receive these messages at the number provided.
Message frequency varies based on your activity. Message and data rates may apply. We send messages only for account verification and order-related purposes; we do not send marketing or promotional text messages.
You can opt out of non-essential text messages at any time by replying STOP to any message. Note that one-time passcodes are required to sign in; if you opt out of verification messages, you may be unable to access the Services. For help, reply HELP or contact us at contact@carapaxlabs.com.
We do not share, sell, or otherwise provide your mobile phone number or messaging consent information to any third parties or affiliates for marketing or promotional purposes. Mobile phone numbers are shared only with the messaging service providers (such as Twilio) that we use solely to deliver the messages you have consented to receive, and only for that purpose.
5. How We Share Information
We do not sell your personal information. We share information only in these limited circumstances:
- Service providers. We use trusted third parties to operate the Services, such as our SMS provider (Twilio) for delivering text messages and our hosting infrastructure. These providers may access information only as needed to perform services for us and are bound to protect it.
- Within your delivery operation. Order and delivery information is shared among the operator, dispatchers, and the assigned driver as needed to fulfill an order.
- Legal and safety. We may disclose information if required by law, subpoena, or other legal process, or to protect the rights, property, or safety of Carapax Labs, our users, or others.
- Business transfers. If we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Privacy Policy.
Notwithstanding the above, your mobile phone number and SMS or messaging consent information are never shared, sold, or transferred to any third parties or affiliates for marketing or promotional purposes. They are used only to deliver the messages you have requested and are shared only with our messaging service provider (Twilio) for that delivery.
6. Data Retention
We retain personal information for as long as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we take reasonable steps to delete or de-identify it.
7. Data Security
We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption of credentials and access controls. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
8. Your Privacy Rights
Depending on your jurisdiction, including under the New Jersey Data Privacy Act, you may have the right to:
- Confirm whether we process your personal data and access that data.
- Correct inaccuracies in your personal data.
- Request deletion of your personal data.
- Obtain a portable copy of your personal data.
- Opt out of the sale of personal data or targeted advertising. We do not sell personal data or use it for targeted advertising.
To exercise any of these rights, contact us at contact@carapaxlabs.com. We will respond within the time required by applicable law.
9. Cookies and Tracking
Our websites and Services use only the cookies and local storage necessary to operate, such as keeping you signed in and remembering your cart. We do not use third-party advertising or cross-site tracking cookies.
10. Children's Privacy
The Services are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us at contact@carapaxlabs.com and we will take steps to delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Your continued use of the Services after an update constitutes acceptance of the revised policy.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us by email at contact@carapaxlabs.com.
13. Governing Law
This Privacy Policy is governed by the laws of the State of New Jersey and applicable United States federal law, without regard to conflict-of-law principles.