Privacy Notice
[COMPANY LEGAL NAME] ("we") runs a delivery platform: partner companies send us orders, and drivers on our platform pick them up and deliver them. This notice explains what personal data we process, why, how long we keep it and the rights you have under the Digital Personal Data Protection Act, 2023 (India).
If you are a driver
| What we collect | Name, phone number, vehicle type, your login token, your location while you are on shift (every few seconds), delivery status updates, proof-of-delivery photos you take, cash you collect, earnings and payouts, and the record of your consent. |
|---|---|
| Why | To offer you deliveries near you, plan your route, show customers where their parcel is, settle cash on delivery, pay you, and resolve disputes ("the driver never arrived"). |
| Location tracking | Only while you are online (on shift). We ask for your consent before you can go online. You can withdraw it at any time in the app; you then go offline and cannot receive work until you consent again. |
| Who sees it | The company whose order you carry sees your first name, a masked phone number and your live location only while you hold their order, and the route you took for that order if they raise a dispute. They never see your other orders. |
| How long | Location history: 30 days. Delivery photos: 90 days. Earnings and payout records: as long as tax and accounting law requires [period to be confirmed by counsel]. When you leave, you can ask us to erase your profile and location history. |
If you receive deliveries
| What we receive | From the company you ordered from: your name, phone number, delivery address and instructions. At delivery: the one-time code you give the driver, and possibly a photo or signature as proof of delivery. |
|---|---|
| Why | To deliver your parcel and prove that it was delivered. |
| Calls | [If enabled:] Drivers call you through a masked number; they do not see your real phone number. |
| Who is responsible | The company you ordered from decides how your data is used; we process it on their behalf. Requests about your data are best sent to them, and they can ask us to export or erase it. |
| How long | Your name, phone and address are removed from completed orders after 180 days; delivery photos after 90 days. |
Service providers
We use providers to run the service, under contracts that limit their use of the data: cloud hosting [provider, region], maps and address lookup [OpenStreetMap / Google], phone call masking [Exotel / Twilio], and browser push notification services (Google, Apple, Mozilla, Microsoft) for drivers who turn notifications on.
Your rights
- Access a summary of your data (drivers: "My data" in the app).
- Correction and erasure of data that is wrong or no longer needed.
- Withdraw consent to location tracking at any time (drivers).
- Nominate a person to exercise your rights in case of death or incapacity.
- Grievance redressal: contact our Grievance Officer below; if you are not satisfied you may complain to the Data Protection Board of India.
Security
Data is encrypted in transit (HTTPS). Access tokens are stored only as one-way hashes. Proof photos are served only through links that expire after 15 minutes. Access to personal data inside our team is limited to people who need it.
Contact
Grievance Officer: [NAME], [EMAIL], [PHONE], [POSTAL ADDRESS]. We respond within [timeline to be confirmed by counsel].