Privacy policy

Dispacha ("Dispacha", "we") is the controller of the personal data described here. We handle it in line with the Nigeria Data Protection Act 2023 and, where it applies to you, the data protection laws of the other countries we operate in.

1. What we collect

• Account: your phone number, name, email if you give one, and your role (sender, dispatcher, carrier, company).
• Deliveries and loads: pickup and drop-off addresses, parcel or cargo descriptions, recipient name and phone number, prices, status history and ratings.
• Location: for riders and carriers, the phone's position during a job and at each status tap. Senders and recipients are not tracked.
• Identity and vehicle documents: for dispatchers and carriers, ID, selfie, vehicle papers, insurance and road-worthiness documents.
• Photos: proof-of-delivery and failed-delivery photos taken by riders and carriers.
• Payments: payment references and amounts. Card and bank details are handled by Paystack. We never see or store your full card number.
• Technical: device type, app version and error logs, used to keep the service working and secure.

2. Why we use it, and our legal basis

• To run the service you asked for (contract): matching jobs, taking payment, tracking, proof of delivery, refunds, invoices and support.
• To keep people safe and prevent fraud (legitimate interest and legal duty): verifying dispatchers and carriers, resolving disputes and complaints.
• To send you messages about your deliveries (contract): sign-in codes, status alerts, delivery codes. We use WhatsApp where you are reachable on it and SMS otherwise. Codes always go by SMS.
• To meet legal obligations: tax, accounting and requests from authorities.
• With your consent: for precise location from your phone, which you can switch off in your device settings (the job steps will still work without it).

We do not sell your personal data. We do not use it for advertising.

3. The recipient's data

When a sender books a delivery, they give us the recipient's name and phone number. We use these only to complete that delivery: to text the recipient a tracking link and the 4-digit handover code. If you received a message and do not want it, contact us and we will stop it.

4. Who we share it with

• The other side of a job: a rider sees the pickup and drop-off addresses, the parcel note and the recipient's name and phone for that job. A sender sees the rider's name, vehicle, rating and live position during the job. Shippers and carriers see each other's job details in the same way.
• Service providers who process data for us: Paystack (payments), Termii (SMS), Meta WhatsApp (messages), Cloudinary (photo storage), Google (maps and address search), and our hosting and database providers (Railway, Vercel, Supabase, Upstash). They may only use it to provide their service to us.
• Authorities, when the law requires it or to prevent a crime.

Some of these providers are outside Nigeria. When your data leaves the country we rely on contract terms and safeguards that give it a comparable level of protection.

5. How long we keep it

• Delivery, payment and invoice records: 6 years, for tax and accounting.
• Live location pings: removed within hours of the job; status check-ins stay with the job record.
• Identity documents: while the account is active and for a reasonable period after, in case of a later dispute or investigation.
• Account details: until you ask us to close the account, except what we must keep by law.

6. Your rights

You can ask us to give you a copy of your data, correct it, delete it, limit or object to how we use it, or move it to another provider. You may withdraw consent at any time. We will answer within one month. Some data cannot be deleted while we need it for a legal duty or an open dispute. To use these rights, email us. You may also complain to the Nigeria Data Protection Commission.

7. Security

Connections are encrypted. Access to personal data is limited to the people and systems that need it. Street addresses and phone numbers are shown only to the people involved in the job and to our support staff. No system is perfectly secure. If a breach affects your rights, we will tell you and the regulator as the law requires.

8. Children

Dispacha is for people aged 18 and over. We do not knowingly collect data from children.

9. Changes

We will update this policy when our practices change and show the date at the top. For important changes we will tell you in the app.