Privacy and data

CartWhizz Delivery collects only what a delivery needs, and shows each person only what their part of the job needs.

What the store sees about a rider

The app shows riders this list on Before you start, before their first delivery:

• their name, phone and the deliveries they take, accept, finish or can't finish;
• the delivery photos they take, as proof of delivery;
• their location only at the moment they change a delivery's status (and when they go on or off duty), never in the background;
• the cash they collect and hand over.

The app never tracks a rider live, and stops completely when they sign out. On Android it does not ask for background location at all. If a rider refuses location, deliveries still work; those status changes simply have no location.

Each delivery's Timeline in the admin lists every status change with its time, who made it, and a location link when one was recorded.

Riders are told they can ask the store to see or delete their data at any time.

What a rider sees about a customer

• Offers show only the area and pincode, the pickup point, the number of items and the cash to collect. No name, address or phone.
• After accepting, the rider sees the customer's name, address, note and phone, while the delivery is in progress. With Who the rider calls set to The store, the phone is never shown; the rider calls your store.
• Once the delivery is finished (delivered, failed, returned or cancelled), the customer's details disappear from the rider's app. History never shows them.
• The delivery code is sent only to the customer. Riders type it; they never receive it.

What a customer sees about a rider

Only the rider's first name and vehicle type, never their phone number, surname or position.

Photos

Proof-of-delivery photos are stored privately for your store, not at public web addresses. Staff with the manage_deliveries permission can open them from the delivery.

When a customer deletes their account

The delivery record is kept with the order for a year, like other order records. After that, the customer's name, phone, address and notes on it are blanked. The customer's data download includes their delivery records.

Removing a rider

Delete on a rider signs them out for good. Their delivery and cash records stay, so your ledger and order history remain complete.