Cold Harbor Labs

Privacy Policy

Effective: July 17, 2026 · Last updated: October 1, 2026

ClearRoute RV is intended for adults age 18 and older. We do not sell personal information, use it for targeted advertising, or include third-party advertising SDKs.

This policy explains how Cold Harbor Labs ("we," "us," or "our") handles information when you use ClearRoute RV on the web, Android, iOS, or a supported vehicle display. It also covers the ClearRoute websites and account services.

Information we handle

Account and profile information

If you create an account, we collect your email address, display name, email-verification status, account plan, and a securely derived password hash. We do not store your password in readable form. We also store session and single-use verification or password-reset token hashes.

Safety acknowledgments

When you accept the ClearRoute safety agreement, we record the agreement version, acceptance time, IP address, user-agent information, and the acknowledgments you accepted. This provides an auditable record of the safety terms shown to you.

Location, routes, and RV information

With your permission, ClearRoute may access precise device location to set your current position, plan a route, provide turn-by-turn navigation, reroute, and show nearby fuel, rest areas, campgrounds, or other relevant places. Start points, destinations, stops, route geometry, RV dimensions and weight, clearance buffer, propane preference, and related route settings may be transmitted to our services to provide these features.

We do not build an advertising location profile. When you are signed in, saved trips, favorites, and your RV profile are synchronized to your account so they can be retrieved on your devices. Planning and navigation require an existing account with access. Device caches and unsynchronized changes may remain local until synchronization or storage clearing. Route, location, and RV profile details may also persist when you create a public share link. Public share links contain the shared trip and your display name, not your email address.

Voice destination search

Voice destination search is optional. In CarPlay, microphone audio is processed by Apple's on-device speech recognizer; if on-device recognition is unavailable, voice search is unavailable. In Android Auto, ClearRoute provides microphone audio to the device's selected speech-recognition service, which may send it to its provider for transcription under that provider's terms. ClearRoute does not store audio recordings. Recognized destination text and search location may be sent to our routing and place-search providers to find the requested destination.

Community contributions

If you submit a place review or photo, we store its text, rating, photo, place location, author association, and submission time. Approved contributions are visible to other users with your display name and a public author identifier. We also store community-policy acceptance, reports, blocked authors, and moderation decisions to enforce our community rules. Do not put private information in a public contribution.

Support and optional AI assistance

Support tickets and feature requests include your account association, email address, submitted text, replies, and any road details, precise coordinates, or photos you choose to provide. Staff use these to investigate and respond. These submissions are not public community posts.

Each submission offers an optional, initially unchecked choice to allow OpenAI to process its text and included location or road details to help staff categorize the request and draft a response. We send this information to OpenAI only when you make that choice for that submission. Photos are not sent to OpenAI. Basic email and phone redaction is applied to message text, but this does not guarantee anonymity. We record the consent version and time. Declining does not prevent support or feature submission, and AI output does not automatically change road-safety data.

Usage and campaign attribution

We record account-linked activity times and feature-use events for service operations and usage reporting. On the web, a creator campaign visit can produce a random referral token that links a later registration or purchase to that campaign for commission accounting. This is separate from advertising SDK tracking.

Subscription and transaction information

We store account entitlement status and identifiers needed to connect an account to a subscription or billing customer. Payment card details are handled by the relevant payment provider, such as Stripe, Google Play, or Apple; ClearRoute does not receive or store full payment-card numbers.

Device and service information

Our hosting, security, and delivery systems may process IP addresses, request times, requested URLs, device or browser type, app version, operating system, response status, and diagnostic or security events. We use this information to operate the service, prevent abuse, investigate failures, and protect users.

Data stored on your device

ClearRoute may cache your RV profile, preferences, saved routes, favorites, map resources, and pending synchronization operations in browser or app storage for offline use and reliable synchronization. Browser sessions use secure HTTP-only cookies, and native app sessions use operating-system protected credential storage. Removing the app or clearing its storage removes local copies, but does not delete information synchronized to your ClearRoute account.

How we use information

• Provide clearance-aware route planning, navigation, rerouting, map, fuel, campground, and safety-warning features.
• Create and secure accounts, synchronize saved data, verify email addresses, and reset passwords.
• Operate subscriptions, trials, gift access, and customer support.
• Maintain service reliability, investigate errors, prevent fraud or abuse, and enforce applicable terms.
• Comply with legal, accounting, tax, safety, and regulatory obligations.

When information is shared

We disclose information only as needed to operate ClearRoute, comply with law, protect the service, or carry out a request you make. Service providers may include:

• Cloud hosting, content-delivery, security, and infrastructure providers, including DigitalOcean and Cloudflare.
• Payment and subscription providers, including Stripe, Google Play, and Apple.
• OpenAI for the optional support and feature-request assistance described above, only with per-submission consent.
• Email-delivery providers used for verification, password reset, receipts, or support.
• Mapping, geocoding, traffic, and road-data services used to answer a route or place request. ClearRoute primarily uses OpenStreetMap-derived data and self-hosted routing services.

Providers process information under their own terms and privacy obligations. We may also disclose information when required by law, to respond to valid legal process, or to protect users, the public, or our rights. If you intentionally create a public route link, anyone with that link can view the shared route until it or the associated account is deleted.

Retention

• Account and synchronized content: retained while your account is active. Successful self-service deletion removes account-linked content from the active account database immediately; requests requiring manual verification are handled within 30 days after verification. Restricted backups and separate provider cleanup have the retention described below.
• Location and route requests: processed to provide the requested service. We do not retain a continuous location history. Location may remain in saved routes, favorites, shared trips, operational logs, or backups as described here.
• Security and operational logs: kept only as long as reasonably necessary for security, debugging, abuse prevention, and legal obligations.
• Backups: deleted account data may remain in restricted, rotating backups for up to 90 days before being overwritten. Backup data is not restored to active use except for disaster recovery or security needs.
• Billing, tax, fraud, and legal records: limited records may be retained for up to seven years when reasonably necessary to meet accounting, payment-dispute, tax, fraud-prevention, or legal requirements.
• Billing cleanup after deletion: the Stripe customer reference, request time, and retry metadata remain in a restricted cleanup queue until provider deletion succeeds. This queue does not retain support messages or saved trips.

Your choices and rights

You can deny or revoke location permission in your device settings, use ClearRoute without saving routes to an account, delete individual saved routes or favorites, cancel a subscription through the provider that sold it, or request access, correction, export, or deletion of account data.

For account and data deletion instructions, visit the ClearRoute Account and Data Deletion page. Depending on where you live, privacy law may provide additional rights. We may need to verify your identity before acting on a request.

Security

We use HTTPS in transit, salted password hashing, hashed session and flow tokens, secure HTTP-only browser cookies, operating-system protected native credential storage, access controls, request-origin checks, and rate limits for authentication endpoints. No storage or transmission system can be guaranteed completely secure.

Children

ClearRoute RV is intended for adults age 18 and older and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information, contact us so we can investigate and delete it.

Changes to this policy

We may update this policy as ClearRoute changes. We will post the revised version here and update the effective or last-updated date. Material changes may also be communicated in the app or by email when appropriate.

Contact

Cold Harbor Labs operates ClearRoute RV. Questions or privacy requests can be sent to [email protected].