Privacy Policy

Dispatchr is delivery-dispatch software operated by [Your legal entity, address] (“we”). For the personal data of your own account and staff, we are the controller. For the delivery data you enter about your customers and recipients, you are the controller and we act as your processor under a data-processing agreement. Contact: [privacy@yourdomain].

• Account & staff: name, email, hashed password, role.
• Drivers: name, email, phone, licence categories & expiry, emergency contact, photo.
• Delivery / recipients: addresses, stop coordinates, recipient names, signatures and photos captured as proof of delivery.
• Driver location: GPS breadcrumbs and timing while a shift is active (worker monitoring).
• Technical: a strictly-necessary session cookie; standard server logs.

• Provide the service (routing, dispatch, tracking, POD) — performance of a contract.
• Driver location & monitoring — legitimate interests (operating the delivery service), balanced against driver rights; drivers are informed at onboarding.
• Security & fraud prevention — legitimate interests.
• Account administration & billing — contract / legal obligation.

We do not use your data for advertising, and we do not sell it.

We use a small number of providers to run the service:

• DigitalOcean — hosting & database (EU/UK region).
• Cloudflare — DNS, TLS and network protection.
• Geocoding / routing — addresses and coordinates are sent to a mapping provider to plan routes. [Name your provider; use one with a data-processing agreement rather than a public demo server.]

• Proof-of-delivery media & recipient names: automatically erased after [90] days.
• Driver location breadcrumbs: automatically erased after [90] days.
• Account, driver and delivery records: kept for the life of your account, then erased on request or closure.

You (and the individuals whose data you hold) can request access, correction, erasure, restriction, portability, and can object to processing. Dispatchr provides tools for controllers to export and erase driver and delivery data, and to erase an individual delivery’s proof of delivery. To exercise a right, contact [privacy@yourdomain]. You may also complain to the UK ICO.

Data is encrypted in transit (HTTPS). Access is authenticated and tenant-isolated so one company can never see another’s data. Passwords are hashed; proof-of-delivery media is access-controlled. See our security measures for details. [State your encryption-at-rest and backup measures.]

We use one strictly-necessary cookie to keep you signed in. We do not use advertising or analytics cookies, so no consent banner is required. If that changes, we will ask first.

We’ll post any changes here and update the date above.