Privacy Policy

Delivre Ltd ("Delivre", "we", "us") runs a delivery management platform. When you use our website, apps, or dispatch dashboard, we pick up some information about you. This page explains what we collect, why, and what we do with it.

We're not in the business of selling your data. We collect what we need to make deliveries work and to keep improving the product. If anything here is unclear, reach out at hello@delivre.co and we'll give you a straight answer.

The information we gather depends on how you interact with us. Here's the breakdown:

Account information

When you sign up — whether as a business, a partner shop, or a rider — we ask for basics like your name, email address, phone number, and company name. If you're a delivery rider, we also collect identification documents, vehicle details, and a profile photo so customers and dispatchers can verify who's handling their package.

Delivery data

Every delivery involves pickup and drop-off addresses, package descriptions, recipient contact info, and delivery instructions. Our rider app also records GPS location during active deliveries — this is how live tracking works for senders and recipients. We don't track rider location when they're off-duty or between jobs.

Usage and device data

When you visit our website or open the app, we automatically pick up things like your browser type, operating system, screen size, the pages you visit, and how long you stick around. We use Brevo for our live chat widget, and they may set cookies on your device to keep conversations flowing between visits. We also use Mixpanel for analytics — the level of data collected depends on your cookie consent choice (see section 4).

Payment information

We don't store your credit card numbers or M-Pesa PINs ourselves. Payments are handled by third-party processors (more on that below). What we do keep is a record of transactions — amounts, dates, and which delivery they're tied to — for invoicing and dispute resolution.

Information you volunteer

If you fill out our sales form, email us, or chat with support, we keep what you share so we can follow up or solve your problem. Pretty standard stuff.

No one likes collecting data for the sake of it. Here's what each type actually powers:

• Running deliveries. Addresses, GPS, and contact details are the backbone of dispatching and tracking. Without them, there's no service.
• Your account. Login credentials, profile info, and role-based access keep the right people seeing the right things in the dashboard.
• Billing. Transaction records let us generate invoices, process refunds, and sort out any payment hiccups.
• Improving the product. Analytics tell us which features get used, where people drop off, and what's confusing. That feeds directly into what we build next.
• Support. Chat logs and emails help our team pick up where a conversation left off instead of making you repeat yourself.
• Safety and trust. Rider verification documents and delivery records help us handle disputes and keep the platform safe for everyone involved.

We share information only when there's a real operational reason. Here are the third parties that may receive some of your data:

• Payment processors — Stripe, M-Pesa, and similar services handle actual payment transactions. They have their own privacy policies and are subject to PCI-DSS and local financial regulations.
• Brevo — Powers our live chat and transactional emails. They receive your name and email when you start a conversation or we send you a notification.
• Cloud infrastructure — Our servers and databases run on hosted infrastructure. Your data sits on these servers but the hosting providers don't access it for their own purposes.
• Analytics providers — We use Mixpanel to understand traffic patterns and user behaviour. Depending on your consent choice, Mixpanel receives either anonymous page-view data or detailed behavioural data including clicks, scroll depth, session replays, and device info. See our Cookie Policy for the full breakdown.

Beyond that, we'd only hand over data if required by law — say, a valid court order or regulatory request. And if that ever happens, we'll tell you unless we're legally barred from doing so.

When you first visit our site, a small banner lets you choose between Accept All and Essential Only. Your choice is saved in local storage and controls what data is collected.

• Essential cookies (always active) Keep you logged in, remember your consent preference, and power the Brevo live chat widget. Mixpanel also loads in a minimal mode that records only anonymous page-view counts and referrer data — no clicks, no session replays, no IP-based geolocation.
• Analytics cookies (opt-in) If you choose Accept All, Mixpanel collects full behavioural data: clicks, scroll depth, form interactions, session replays, heatmaps, UTM attribution, and IP-based geolocation. This helps us understand how people use the site and what to improve.

We also use the exchange-rate API (open.er-api.com) to show prices in your local currency. That request goes out from your browser but doesn't send any personal data — just a generic rate lookup.

For the full list of cookies and exactly what each one does, see our Cookie Policy. You can reset your preference at any time by clearing local storage for this site, which will show the banner again.

Your data is stored on cloud servers. We pick providers that offer encryption at rest and in transit, but we'll be honest: no system is bulletproof. We take reasonable technical and organizational measures to protect your information, and we keep tightening things as we grow.

We hold on to your data for as long as your account is active and for a reasonable period afterward (typically 12 months) in case you come back or there's an unresolved billing matter. Delivery records may be kept longer where local regulations require it — for example, tax and financial reporting rules. If you ask us to delete your data, we will, subject to those legal obligations.

We use HTTPS across all our services, encrypt sensitive data at rest, and restrict internal access on a need-to-know basis. Passwords are hashed — we can't read them even if we wanted to. Payment credentials never touch our servers; they go straight to the payment processor.

That said, the internet is the internet. We can't guarantee absolute security, and neither can anyone else who's being upfront with you. If we ever discover a breach that affects your personal data, we'll notify you and the relevant authorities as quickly as possible.

Regardless of where you're located, we believe you should be able to:

• Access the personal data we hold about you.
• Correct anything that's inaccurate or outdated.
• Delete your data, unless we need to keep it for legal or billing reasons.
• Export your data in a common format if you want to take it elsewhere.
• Opt out of marketing emails at any time (there's always an unsubscribe link).

To exercise any of these, email us at hello@delivre.co. We'll get back to you within 14 days, usually sooner.

If you deliver through our platform, here's what's specific to you:

• We collect ID documents and vehicle information during onboarding for verification purposes. These are stored securely and not shared with customers.
• The rider app uses GPS while you're on an active delivery. This powers real-time tracking for the sender and recipient. Location tracking stops when the delivery is marked complete and you're not on another active job.
• Delivery performance data (completion rates, time, ratings) may be used to maintain service quality. If any action is taken based on this data, you'll be notified and given a chance to respond.

Delivre isn't designed for anyone under 18. We don't knowingly collect data from minors. If you suspect a child has signed up, let us know and we'll remove their information promptly.

We'll update this page as Delivre evolves — new features, new integrations, new regulations. When we make meaningful changes, we'll bump the "last updated" date at the top and, if the changes are significant, send a heads-up via email or an in-app notice. We won't quietly rewrite things and hope nobody notices.

This privacy policy is governed by and construed in accordance with the laws of Kenya, and you irrevocably submit to the exclusive jurisdiction of the courts of Kenya.

If anything in this policy bugs you, confuses you, or if you just want to know what we have on file for you, get in touch: