Your privacy is important to us. This policy explains what data we collect, why we collect it, and how you can control it. We do not sell your personal data โ ever.
1. Overview
This Privacy Policy describes how Teamseven Private Limited ("Delivra," "we," "us") collects, uses, discloses, and protects information about you when you use the Delivra platform, website, and related services (collectively, "Services").
By using our Services, you consent to the data practices described in this policy. If you do not agree, please discontinue use of the Services.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, company name, password, and business profile
- Billing Information: Payment method details (processed and stored by our payment providers; we store only the last 4 digits and billing address)
- Communications: Messages, support tickets, and feedback you submit to us
- Profile Customizations: Logo, brand colors, domain settings, and other white-label configurations
2.2 Information Collected Automatically
- Usage Data: Pages viewed, features used, click events, session duration, and workflow interactions
- Device & Technical Data: IP address, browser type, operating system, and device identifiers
- Log Data: Error logs, API requests, and performance metrics
- Location Data: Approximate location derived from IP address for analytics and fraud prevention
2.3 Customer Platform Data
When you operate a delivery platform using Delivra, your end-users' data (orders, delivery addresses, payment references) is processed by Delivra on your behalf as a data processor. You remain the data controller for your end-users' data.
3. How We Use Your Information
We use collected information to:
- Provide, operate, and improve the Services
- Process payments and manage your subscription
- Send transactional emails (order confirmations, invoices, password resets)
- Send product updates and feature announcements (you may opt out at any time)
- Detect, investigate, and prevent fraudulent or unauthorized activity
- Comply with legal obligations and respond to legal requests
- Conduct analytics to understand usage patterns and improve our platform
- Provide customer support and respond to your inquiries
4. Sharing Your Information
We do not sell your personal information. We may share information with:
- Service Providers: Trusted third-party vendors who help us deliver the Services (cloud hosting, payment processing, email delivery, analytics). They are contractually bound to protect your data.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.
- Legal Requirements: If required by law, court order, or government authority, we may disclose your information.
- Protection of Rights: To protect the rights, property, or safety of Delivra, our customers, or others.
5. Cookies & Tracking Technologies
We use cookies and similar technologies to:
- Essential cookies: Required for authentication, session management, and core platform functionality
- Analytics cookies: Help us understand how users interact with the platform (e.g., page views, feature usage)
- Preference cookies: Remember your settings such as language and theme preference
You can control cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.
6. Data Retention
We retain your account data for as long as your account is active. After account termination:
- Active data is retained for 30 days to allow for account recovery or data export
- After 30 days, customer data is permanently deleted from production systems within 90 days
- Aggregated, anonymized analytics data may be retained indefinitely
- Legal, billing, and compliance records may be retained for up to 7 years as required by law
7. Security
We implement industry-standard security measures including:
- AES-256 encryption for data at rest; TLS 1.3 for data in transit
- Regular penetration testing and security audits
- Role-based access controls with least-privilege principles
- Multi-factor authentication available for all accounts
- SOC 2 Type II compliance (in progress)
While we implement strong security measures, no system is completely secure. Please notify us immediately at security@delivra.app if you discover any security vulnerability.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your personal data ("right to be forgotten")
- Portability: Request your data in a structured, machine-readable format
- Objection: Object to processing of your personal data for marketing purposes
- Restriction: Request that we restrict processing in certain circumstances
To exercise any of these rights, contact us at privacy@delivra.app. We will respond within 30 days.
9. Children's Privacy
The Services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information promptly.
10. International Data Transfers
Delivra operates globally. Your information may be transferred to, stored, and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws, including through Standard Contractual Clauses where required.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or prominent notice on our website at least 14 days before the changes take effect. The "Last updated" date at the top of this policy indicates when it was last revised.
For privacy-related inquiries, please contact our Data Protection team: