Privacy Policy

1. Information We Collect

DelivEasy is designed to manage delivery logs for local merchants. We collect the minimum necessary data to provide our services:

• Account Details: Workspace name, administrator/user username, email address, password hash, and counter lock PINs.
• Delivery Records: Customer name, delivery address, bill/invoice number, amount, payment mode, and assignment details.
• GPS Location Data: Delivery agents share their coordinates (latitude, longitude, accuracy, and timestamp) through their browser/mobile app during active delivery sessions.
• Payment Log: Razorpay subscription reference IDs, payment status, and expirations. We do not store credit card, netbanking, or UPI credentials on our servers.
• Delivery Proof Photos: If Pro plan is active, we temporarily save photo proofs captured by agents.

2. Database Isolation & Tenancy

Every workspace registered on our platform is assigned a dedicated SQLite database file. This database is completely separate from other workspaces, ensuring your records, agent rosters, and client lists remain fully isolated and private.

3. How We Use Your Data

We use the collected information only to power delivery management features:

• Displaying assigned checks on the Agent Task screen.
• Rendering live agent tracking pins on the Admin/Receiver Live Map.
• Reconciling cash and online collections for counter settlements.
• Managing Razorpay recurring subscription checks.

4. WhatsApp Business Messaging

A workspace may connect its own WhatsApp Business Account so that DelivEasy can send order and payment messages on that shop's behalf. Connecting is optional, and a shop that does not connect one is unaffected by anything in this section.

When a shop connects a number, DelivEasy acts on that shop's instructions. The shop owns the WhatsApp Business Account, attaches its own payment method, and is billed by Meta directly. We never take payment for messages and never resell messaging capacity.

What passes through us:

• Customer phone numbers and profile names as supplied by WhatsApp for people who message the shop, or whom the shop messages.
• Message content sent or received on that number, including text, and any media such as a prescription photograph a customer sends.
• Delivery and read receipts, so the shop can see whether a reminder arrived.
• Account identifiers issued by Meta for the connected account and number, and the access credential that authorises us to act for that shop.

If a shop keeps using the WhatsApp Business app on the same number (a Meta feature called coexistence), and only if the shop explicitly approves it during connection, WhatsApp will also share that number's existing contacts and up to the last six months of its chat history with DelivEasy, so past conversations are not lost. Messages the shop later sends from its own phone are mirrored to DelivEasy so the conversation reads correctly in both places. A shop that declines history sharing keeps its past chats private, and only messages from the moment of connection onwards appear in DelivEasy.

This data is used only to show the shop its own conversations and to send the messages that shop has asked for. It is never used for advertising, never sold, and never shared with another workspace. Message content is held in the same isolated per-workspace database as the rest of that shop's records, described in section 2.

Messaging through WhatsApp is also governed by WhatsApp's Business Messaging Policy and Meta's own terms, which apply to Meta as the platform operator.

5. Data Sharing & Third Parties

We do not sell, rent, or trade your data to third parties. We share transaction logs with Razorpay to process payments. GPS maps are rendered locally using Leaflet/OpenStreetMap. Photo uploads are saved directly on isolated Cloudflare R2 object stores.

Where a shop has connected a WhatsApp number, messages are delivered by Meta Platforms, Inc. through the WhatsApp Business Platform. Meta processes that message traffic as the operator of the platform, under its own terms with the shop that owns the account. Payment links may additionally be created through the payment gateway a shop has configured in its own settings.

6. Data Retention & Purging Policies

We enforce strict data retention rules to protect client privacy and optimize storage:

• GPS Location Pins: Agent coordinates are automatically deleted from the database 4 hours after a delivery session concludes.
• Completed Deliveries: Received (Cash/Online) delivery rows older than 30 days are automatically deleted from the database daily. Credit, Unpaid, and Pending items are kept until manually cleared.
• Account Removal: Administrator profiles and workspace files are stored permanently until the workspace is cleared or deleted.
• WhatsApp Messages: Conversations are kept for as long as the shop's workspace is active, so the shop can look back at what a customer asked for. A shop may delete a conversation at any time, and disconnecting the number removes the stored credential immediately.
• Prescription and Order Images: Images received over WhatsApp are held with the order they belong to and are removed when that order's records are cleared.

7. User Controls & Export Rights

Workspace administrators have complete control over their database. From the settings panel, you can:

• Export your entire delivery and customer logs to a CSV file.
• Manually clear delivery data, agent lists, or receiver configurations.

8. Security Safeguards

We implement appropriate physical and electronic measures to secure user databases, including Express rate limits, JWT session authentication, and bcrypt password hashing. However, you are responsible for maintaining the privacy of your account logins and counter PINs.

9. Contact & Data Deletion Requests

A workspace administrator can export and clear their own data at any time from the settings panel, as described in section 7. If you would rather we did it, or if you are a customer of a shop that uses DelivEasy and want your details removed from that shop's records, write to us:

privacy@deliveasy.in

DelivEasy is operated by Robifel Co., which is the business responsible for the data described in this policy and the entity behind the WhatsApp Business integration described in section 4.

Tell us the shop's name and the phone number or customer name to look for. We answer within 30 days. Where the data belongs to a shop's own workspace we will confirm the request with that shop before acting, because their records are theirs and not ours to delete unasked. Disconnecting a WhatsApp number can be done by the shop at any moment from its own settings, and removes our stored credential for that number straight away.

10. Changes to this Policy

We may update our Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date.