Privacy Policy

About this policy

This policy explains how DirectDeliver collects, uses, stores, and shares information when a business or its team uses our website and delivery-management service. DirectDeliver is designed for business use and is not directed to children.

Information we collect

• Account and workspace information: names, email addresses, password-authentication records, workspace name, roles, invitations, and settings.
• Delivery information: recipient and company names, job references, addresses, phone numbers, dates, delivery instructions, notification email addresses, driver assignments, completion notes, failure reasons, timestamps, and optional proof photos.
• Billing information: subscription status, plan, and Stripe customer identifiers. Stripe processes card and payment details; we do not store complete card numbers.
• Technical information: session information and limited request, device, browser, and diagnostic data produced when the service is used.
• Support communications: information included when someone contacts us for help.

How we use information

We use information to provide accounts and workspaces, display and manage deliveries, authorize team access, open addresses in mapping services, store proof of delivery, send invitations and completion emails, process subscriptions, provide support, maintain security, diagnose problems, and improve the service. We do not sell personal information.

Service providers

We use service providers that process information on our behalf or provide features you request:

• Convex for authentication, application data, realtime functions, and proof-photo storage.
• Stripe for subscription checkout, payment processing, invoices, and the billing portal.
• Postmark for account, invitation, and delivery-completion emails. Those messages may include recipient details, delivery notes, notification addresses, and an optional proof photo.
• Google Places for address suggestions and place details when a user searches for a delivery address.
• PostHog for page views, interaction analytics, performance measurements, and session replay to understand usage, provide support, and diagnose problems. Signed-in activity is associated with internal user and workspace identifiers. Recordings include visible page content, customer details, images including proof photos, and ordinary form values. Password fields are masked; setup/reset codes and invitation credentials are excluded. Console logs and network headers and bodies are excluded.

These providers process information under their own terms and privacy policies. Information may also be disclosed when required by law, to protect the service and its users, or as part of a business reorganization where lawful safeguards apply.

Business responsibilities

A workspace owner controls the delivery information their team enters. Businesses using DirectDeliver are responsible for having an appropriate reason to provide recipient contact details, addresses, notification email addresses, delivery notes, and proof photos, and for telling their staff and recipients how that information will be used.

Retention and deletion

Delivery records and proof photos are retained with the workspace so the business can use its searchable history. Account, workspace, and delivery information may be retained while the workspace is active and for a reasonable period afterward for security, support, dispute resolution, backup recovery, and legal or billing obligations. Stripe may retain payment records under its own requirements.

Workspace owners can request account or workspace deletion by emailing dylan@directdeliver.ca. Some information may remain in backups or where retention is required by law. People whose details were entered by one of our business customers should normally contact that business first.

Security and international processing

We use reasonable technical and organizational safeguards, including authenticated workspaces and role-based access. No online service can guarantee absolute security. Our providers may process information outside the user's province, state, or country, where different data-protection laws may apply.

Changes and contact

We may update this policy as the product or legal requirements change. The current version and its update date will remain on this page. Questions, requests, or complaints can be sent to dylan@directdeliver.ca.