Beta privacy notice · Effective August 26, 2026

Privacy

WorthStop is operated by BZ Labs. This notice explains the information used by the Bay Area beta. Questions and privacy requests can be sent to team@bzdocs.com.

When you plan a route

The WorthStop backend receives the origin, destination, vehicle and search options needed to calculate a recommendation. Searches do not call Google Maps at request time and are not added to account history by default. We may retain limited operational logs and aggregate outcome events to protect and improve the service. Those events can include a recommendation ID, station ID, event type, rank and interface surface, but not the route addresses.

Accounts and saved visits

Supabase provides authentication and stores the account profile, email, vehicles, preferences, favorites and saved routes. The browser Supabase client persists the authentication session in browser storage using PKCE. When visit history is enabled, opening navigation can save the selected station, route labels, request settings and a station snapshot so you can later rate the stop or report a price. You can turn visit history off in Account.

Contributions

A rating or price report stores the station, factual submission, observation time and moderation status. Price reports do not immediately replace a shared price. WorthStop uses matching reports and review rules to reduce abuse.

Service providers and external links

WorthStop uses Supabase for authentication and account data, Vercel for the web application and proxy, Fly.io for the backend, Gmail for account messages and OpenStreetMap tiles when you open the route map. Choosing Navigate opens Google Maps, which then handles the destination and route under Google's own privacy policy. These providers may process technical identifiers such as IP address, browser information and request time as part of operating their services.

Retention and your controls

Account content is retained while the account is active. You can edit preferences, turn off visit history, delete individual saved items and delete the account from Account. Account deletion removes the active profile and associated product records. Limited security logs, backups, fraud-prevention records and de-identified aggregate events may remain for a limited period where needed to operate, secure or comply with law.

To request access, correction, export or deletion, email team@bzdocs.com. WorthStop does not sell personal information or use it for cross-context behavioral advertising. Applicable privacy rights vary by location, and WorthStop will not discriminate for making a privacy request.

Security, children and changes

WorthStop uses encrypted HTTPS connections, restricted database access and row-level authorization. No system is guaranteed to be completely secure. The service is not directed to children under 13. Material changes to this notice will be posted here with a new effective date.