Privacy Policy

Last updated: June 28, 2026

Routeiq ("Routeiq", "we", "us", or "our") operates the Routeiq platform, a last-mile delivery management tool for D2C Shopify merchants in India. This Privacy Policy explains how we collect, use, and protect your information.

1. Information We Collect

We collect information you provide directly to us:

• Merchant information: Business name, email address, Shopify store domain, and payment gateway preferences.
• Driver information: Name and phone number for OTP-based login.
• Customer delivery data: Customer name, phone number, delivery address, and GPS coordinates, synced from your Shopify orders.
• Payment data: COD amounts and UPI transaction references. We do not store full payment card details.

2. How We Use Your Information

• To operate the delivery management platform and provide route planning, dispatch, and proof-of-delivery features.
• To send OTP verification SMS to drivers and customers via MSG91.
• To sync fulfillment status back to your Shopify store.
• To process COD and UPI payments through your configured payment gateway.
• To improve our service and fix bugs.

3. Data Sharing

We share data only with the third-party services required to operate Routeiq:

• Google Maps Platform — for geocoding addresses and route optimization.
• MSG91 — for OTP and delivery notification SMS (DLT-compliant sender ID).
• Shopify — to sync order and fulfillment data with your store.
• Payment gateways (Razorpay, Cashfree, PayU, PhonePe, or Paytm) — as configured by you.
• Railway — our cloud hosting provider.
• Sentry — for error monitoring (anonymised stack traces only).

We do not sell your data or your customers' data to any third party.

4. Data Storage & Security

All data is stored in India on Railway's infrastructure. We use JWT tokens (12-hour expiry) for authentication and never store plain-text passwords. All connections are encrypted via HTTPS.

5. DPDP Act Compliance

We are committed to compliance with India's Digital Personal Data Protection Act, 2023 (DPDP Act). Customer phone numbers and delivery addresses are used solely for the purpose of completing deliveries requested through your Shopify store. We will publish our full DPDP compliance notice before our production launch.

6. Data Retention

Order and delivery data is retained for 24 months to support reconciliation and audit needs. Driver session tokens expire after 12 hours. You may request deletion of your merchant account and associated data at any time.

7. Your Rights

You may request access to, correction of, or deletion of your personal data by emailing us at akashwalke3588@gmail.com. We will respond within 30 days.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or via an in-app notice.

9. Contact

For privacy-related questions, contact us at akashwalke3588@gmail.com.