See what we hold
Ask, and we will send you the personal data on your account.
Privacy policy
What we collect, and what we do not.
The short version, in plain words. Everything below it is the same thing said precisely.
We collect what a delivery needs
Your phone number to sign you in, the addresses a parcel travels between, and — for drivers — the documents the law requires before someone may carry goods.
We do not sell it, ever
Five named companies process parts of it on our behalf, listed further down with exactly what each one receives. Nobody else gets it, and no one pays us for it.
You can take it back
Delete your account from the app and the personal data goes. There is a 30-day window first, because a mistaken tap should be recoverable and erasure is not.
Everything we collect, and who it applies to.
Most of this list is not about you. Documents and bank details are what the law asks of someone carrying goods for hire — we never ask them of a customer.
WhatSendingDrivingBusiness
Identity
Phone numberIt is how you sign in. There is no password by default and no username — the number is the account.
Sending: collectedDriving: collectedBusiness: collectedNameSo a driver knows who they are collecting from, and so an invoice has someone on it.
Sending: collectedDriving: collectedBusiness: collectedEmail addressOptional. Used for invoices and receipts if you give it. Nothing breaks if you do not.
Sending: collectedDriving: collectedBusiness: collectedDelivery
Pickup and drop addressesA delivery cannot happen without them. They stay attached to that booking as its record.
Sending: collectedDriving: not collectedBusiness: collectedWhat you are sendingThe goods description and weight decide which vehicle can carry it and what it costs.
Sending: collectedDriving: not collectedBusiness: collectedThe route actually takenSo you can watch the trip live, and so we can settle a dispute about where a vehicle went.
Sending: collectedDriving: collectedBusiness: collectedDriver
Driving licence, vehicle RC, insurance, PAN, photographsNobody may carry goods for hire without them. We check them before a driver may accept work.
Sending: not collectedDriving: collectedBusiness: not collectedBank account detailsTo pay you. The account number is encrypted; screens show only the last four digits.
Sending: not collectedDriving: collectedBusiness: not collectedLocation, while you are onlineTo offer you nearby work and to show a customer where their delivery is. Read while you are online; at rest we keep one last-known point.
Sending: not collectedDriving: collectedBusiness: not collectedMoney
Payment identifiersEnough to match a payment to a booking and issue a receipt. We never see or store your card or UPI credentials.
Sending: collectedDriving: collectedBusiness: collectedGSTIN and billing addressA tax invoice is not valid without them. Business accounts only.
Sending: not collectedDriving: not collectedBusiness: collectedAccount
Sign-in codesThe six digits we text you. Deleted automatically ten minutes after they are issued.
Sending: collectedDriving: collectedBusiness: collectedWhen you last signed in, and how oftenTo spot an account being used by someone who should not have it.
Sending: collectedDriving: collectedBusiness: collectedSupport messages and ratingsSo a conversation you started has a history, and so a rating means something.
Sending: collectedDriving: collectedBusiness: collectedWe do not collect anything not on this list. If you find something we hold that is not here, it is an error — tell us and we will fix both the data and this page.
Where your phone number actually goes.
One piece of data, followed end to end. Every other field takes a shorter path than this one.
- Your phone
You type the number into the app.
Nothing has left the device yet.
- Our server
Stored against your account, and a six-digit code is generated.
The code is stored as a hash, never in the clear.
- MSG91leaves us
Receives your number and the code, so it can send you the SMS.
They see the number because they are the ones sending the text. Nothing else goes with it.
- Back to us
You enter the code; we compare it and sign you in.
The code is deleted automatically ten minutes after it was issued.
If you delete your account
The number is replaced with a placeholder and cannot be read back. We keep a one-way SHA-256 hash of it so that a deleted number can never be used to open a new account — which lets us answer “is this that number?” forever, and “what was the number?” never.
How long we keep it.
Two of these are deleted by a job on a clock. The rest are kept while your account is open — and we would rather say so than name a deadline nothing enforces.
- Sign-in codesDeleted automatically
A database TTL index, plus an hourly sweep. Not a policy — a mechanism.
- Trip verification codesDeleted automatically
Expire with the trip they belong to.
- A closed account, before erasureDeleted automatically
A daily job erases accounts past this mark. The window exists so a mistaken deletion can be undone by support — and not after.
- Bookings and trip recordsNo automatic deletion
Nothing deletes these on a schedule. They are your delivery history, and they go when the account is erased.
- Driver documentsNo automatic deletion
We are required to be able to show that a driver carrying goods was verified.
- Payments and invoicesNo automatic deletion
A tax invoice is not ours to delete. Indian law sets how long these are kept, and that outlives an account.
The axis is logarithmic — ten minutes and thirty days cannot share a straight line without one of them disappearing. Bars that run off the right have no end date because no job ends them; that data goes when your account is erased.
Who else touches it. All five.
We do not sell your data and nobody pays us for it. These five companies process a part of it because a delivery cannot happen otherwise — each gets only its own slice, and none of them talk to each other.
- RazorpayPayments and driver payouts
Payment identifiers, amount, and the contact details a payment needs.
Your card and UPI credentials are entered on their side. They never reach us.
- MSG91Sign-in text messages
Your phone number and the six-digit code.
Only at the moment a code is sent.
- Amazon Web ServicesDocument storage
Driver KYC documents and photographs.
Storage only. Nothing is read from them except by us.
- Google MapsAddresses, routing and the live map
Pickup and drop coordinates, and a driver's position while a trip is live.
Required for the map you watch a delivery on.
- FirebasePush notifications
A device token, if your app registers one.
⚠️ Not currently in use. The integration exists and has never been switched on — no push notification has been sent to anyone.
When location is on, and when it is not.
This applies to drivers. A customer's location is never continuously read — only the addresses on a booking.
On a trip
Read continuously, and shown to the customer whose delivery it is.
- OffOfflineNothing is read. The app is not tracking you.
- OnOnline, waitingYour position is read so nearby work can be offered to you.
- OnOn a tripRead continuously, and shown to the customer whose delivery it is.
- OffTrip deliveredContinuous reading stops. One last-known point remains until you go online again.
- OffOffline againNothing is read.
What you can ask us to do.
These are not favours. Three of the five you can do yourself, right now, without contacting anybody.
Correct it
Name, email and business billing details are editable in the app. Ask us for anything that is not.
Delete your account
In the app: Settings → Delete account. It closes immediately; the data is erased 30 days later.
Turn off notifications
In the app, per channel. It never affects a delivery you have already booked.
Complain
To us first — we would rather fix it. If that fails, to the authority in your jurisdiction.
What “delete” actually does.
Three stages, and the middle one is deliberate. We would rather be able to undo a mistake than be fast about it.
The moment you tap it
The account closes. You are signed out everywhere, the number stops working as a login, and nobody can book with it.
For the next 30 days
The data still exists, and support can restore the account if the tap was a mistake. Nothing new happens on it.
After that
A job erases the personal data. The phone number is replaced with a placeholder that is not a phone number, and only a one-way hash of the original remains — enough to stop that number opening a new account, and not enough to ever read it back.
You can stop this at any point in the first 30 days by contacting support. After that there is nothing to restore — which is the point of erasing something.
If something here is wrong, tell us.
Privacy questionsinfo@pakkalogistics.com
Anything about your data — what we hold, correcting it, deleting it.
Grievance officerinfo@pakkalogistics.com
⚠️ A named officer has not yet been appointed. Until one is, this address reaches the company directly.