Legal

Privacy Policy

Last updated: April 30, 2026

The short version: Traksend collects only what it needs to power delivery tracking. We never sell your personal data. Riders' GPS is active only during active deliveries and only with their consent.

1. Who We Are

Traksend ("we", "us", "our") operates a white-label delivery tracking platform for Nigerian courier businesses. This Privacy Policy explains how we collect, use, store, and protect personal data when you use our Service — whether you are a courier business (Operator), a delivery rider, or a package recipient (Recipient).

We operate in compliance with the Nigeria Data Protection Act (NDPA) 2023 and its implementing regulations.

2. Data We Collect

2.1 Operators (Courier Businesses)

When you create an account, we collect:

  • Business name and operator code
  • Email address and password (hashed, never stored in plain text)
  • Phone number (WhatsApp contact)
  • Business address (optional)
  • Billing information for paid plans (processed via our payment partners)

2.2 Riders

Riders added to the platform provide:

  • Name and phone number
  • Real-time GPS location — only while on an active, assigned delivery

GPS tracking stops automatically when a delivery is marked complete, cancelled, or the rider's session ends. Riders are shown a clear disclosure before location sharing begins.

2.3 Recipients (Package Recipients)

Recipients do not create accounts. We process:

  • Delivery address and contact phone number (provided by the Operator)
  • Delivery status and tracking page view events (anonymised)

2.4 Usage Data

We automatically collect standard server logs including IP address, browser type, pages visited, and timestamps. This data is used solely for security monitoring and service improvement.

3. How We Use Your Data

We use collected data to:

  • Provide the Service: Authenticate accounts, display delivery tracking, route GPS coordinates to tracking pages
  • Send notifications: WhatsApp/SMS delivery status updates to Recipients (sent on the Operator's behalf)
  • Billing and payments: Process subscription fees and send receipts
  • Support: Respond to queries and troubleshoot issues
  • Security: Detect and prevent fraud, abuse, and unauthorized access
  • Product improvement: Analyse aggregated, anonymised usage patterns to improve features

We do not use your data for advertising, profiling, or sale to third parties.

4. Legal Basis for Processing

Under the NDPA 2023, we process personal data on the following legal bases:

  • Contract performance: Processing Operator account data to provide the subscribed Service
  • Legitimate interests: Security monitoring, fraud prevention, service improvement
  • Consent: Rider GPS location tracking (consent obtained in-app before tracking begins)
  • Legal obligation: Retaining transaction records as required by Nigerian tax and financial regulations

5. Data Sharing

We share personal data only with:

  • Supabase: Database and authentication infrastructure (data stored in EU-West region with encryption at rest)
  • Google Maps Platform: Geocoding and map rendering for tracking pages
  • Payment processors: For processing subscription payments (we do not store full card numbers)
  • WhatsApp Business API providers: To deliver status notifications on your behalf

All sub-processors are bound by data processing agreements. We do not sell, rent, or trade personal data with any third party for their own purposes.

We may disclose data if required by law, court order, or to protect the rights, property, or safety of Traksend, our users, or the public.

6. Data Retention

  • Active accounts: Data retained for the duration of the account
  • Closed accounts: Deleted within 30 days of account closure, except where retention is required by law
  • GPS location history: Retained for 90 days for delivery dispute resolution, then permanently deleted
  • Delivery records: Retained for 12 months by default (configurable by Operator)
  • Server logs: Retained for 90 days

7. Your Rights

Under the NDPA 2023, you have the right to:

  • Access: Request a copy of personal data we hold about you
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your personal data (subject to legal retention requirements)
  • Portability: Receive your data in a machine-readable format
  • Withdraw consent: Withdraw consent for GPS tracking (Riders) or other consent-based processing at any time
  • Object: Object to processing based on legitimate interests

To exercise any of these rights, email privacy@traksend.com. We will respond within 30 days.

8. Security

We implement industry-standard technical and organisational measures to protect your data including:

  • TLS encryption for all data in transit
  • AES-256 encryption for data at rest
  • Bcrypt hashing for passwords (never stored in plain text)
  • Role-based access controls limiting internal data access
  • Regular security reviews

Despite these measures, no system is completely secure. In the event of a data breach that poses a risk to your rights, we will notify you and the Nigeria Data Protection Commission (NDPC) within 72 hours as required by law.

9. Cookies

We use only strictly necessary cookies to maintain your login session. We do not use advertising cookies or third-party tracking cookies. No cookie consent banner is needed for strictly necessary cookies, but you can disable cookies in your browser — doing so will prevent you from staying logged in.

10. Children's Privacy

The Service is intended for businesses and is not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, contact us and we will delete it promptly.

11. Cross-Border Data Transfers

Some of our sub-processors (including Supabase and Google) store or process data outside Nigeria. When this occurs, we ensure appropriate safeguards are in place, including standard contractual clauses, in compliance with NDPA 2023 requirements for international data transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the Service at least 14 days before changes take effect. The "Last updated" date at the top of this page will always reflect the current version.

13. Contact and Complaints

For privacy questions or to exercise your rights:

If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.