Privacy policy
This policy describes what personal and operational data flows through Iyerxpress, why it flows, how long it is kept, and the choices available to the people it belongs to.
Who this policy is for
Iyerxpress is a dispatch platform for same-day and express delivery operations. This policy covers three groups whose data reaches the platform:
- Operations users - fleet managers, dispatchers, and client administrators who log in to run the operation.
- Riders - delivery riders whose position, shift, and performance data is processed to route and reallocate deliveries.
- Recipients - the customers of our customers, whose contact and address details are needed to complete a delivery.
What we collect and why
Operations users
Name, work email, role, employer (the operating company), and audit logs of actions taken on the platform. Collected so an operations user can sign in, be assigned a role, and have their actions attributed for auditing.
Riders
Rider identity supplied by the operating company, live location during active shifts, shift start and end, deliveries attempted and completed, and any incident notes flagged by dispatchers. Collected so routing, reallocation, and fleet analytics can function.
Recipients
Name, phone number, delivery address, and delivery instructions supplied by the operating company or its client at the time of order. Collected to complete the delivery, send tracking and status notifications, and record the outcome of the delivery.
Marketing and website
If you contact us through the website, we hold the details you provided on the form so we can reply. If you sign up, we hold the details you provided so we can create your account and send you login credentials.
How long we keep it
- Delivery data - retained for 24 months at operational resolution, then aggregated to corridor-level statistics.
- Rider data - retained for the length of the working relationship plus 12 months for statutory records, then removed.
- Recipient data - retained for 90 days at contact resolution, then reduced to postal-area analytics.
- Contact-form messages - retained for 24 months to service the enquiry and any follow-up.
Who we share it with
We do not sell or trade personal data. It is shared only with subprocessors that operate parts of the platform on our behalf - infrastructure hosting, email and SMS delivery, and monitoring - and only to the extent those services require. Every subprocessor is bound by the same access and retention model described here.
Where it is stored
Data is stored in infrastructure primarily located in India, with encrypted backups in a secondary region for disaster recovery. Any transfer of personal data outside India uses contractual safeguards and encryption in transit and at rest.
Security
TLS 1.2 or higher for all traffic, AES-256 at rest, role-based access, least-privilege internal access, and audit logging on every reassignment and access-elevation event. A more detailed view is on the security page.
Your choices
You have the right to ask what personal data we hold about you, to correct it if it is wrong, to have it removed once it is no longer needed for a legitimate operational or statutory purpose, and to withdraw consent for optional processing.
How to exercise those rights
For operations users and riders, requests are handled through the operating company - your employer or the courier company you ride for. For recipients, requests can be sent through the operating company you placed the order with, or directly through our contact page. We acknowledge within one business day.
Automated decisions
Route optimisation, window prediction, and rider reallocation are automated decisions. They affect operational routing and delivery windows, and they log a reason line for every reassignment they make. Dispatchers can override any automated decision on the live board.
Cookies and website tracking
The marketing website uses cookies only for essential functions. We do not run third-party advertising trackers on the marketing site, and we do not build behavioural profiles of visitors.
Changes to this policy
When we materially change how data is handled, we update this page and note the change on the sign-in surface for operations users. Continued use of the platform after a material change is subject to the updated policy.
How to reach us
Privacy questions and rights requests reach us through the contact page. Mark the message as privacy-related and it is routed to the named owner.