Privacy Policy

1. Data We Collect

We collect the following categories of personal information:

• Account information: name, email address, phone number, and profile photo
• Identity verification: government-issued ID documents (for KYC purposes)
• Transaction data: parcel details, delivery routes, payment history, and wallet activity
• Location data: approximate location for matching senders with nearby travellers
• Device information: IP address, browser type, device identifiers, and operating system
• Communications: messages sent through our in-app chat system

2. How We Use Your Data

We use your personal information to:

• Create and manage your account
• Match senders with compatible travellers
• Process payments and manage your wallet
• Verify your identity through KYC procedures
• Send transaction confirmations, notifications, and service updates
• Detect and prevent fraud and unauthorized use
• Improve and personalize our platform experience
• Comply with legal and regulatory obligations

3. Data Sharing

We do not sell your personal data. We share information only:

• With travellers or senders matched for a delivery — limited to the information needed to complete the transaction
• With payment processing partners for secure transaction handling
• With identity verification services for KYC compliance
• With law enforcement or regulators when required by applicable law

4. Security Measures

We implement industry-standard security practices to protect your data, including:

• TLS/SSL encryption for all data transmitted between your device and our servers
• Encrypted storage for sensitive personal and financial data
• Role-based access controls limiting employee access to personal data
• Regular security audits and vulnerability assessments
• Two-factor authentication support for user accounts

While we take reasonable precautions, no system is completely secure. We encourage you to use a strong, unique password and to log out of shared devices after each session.

5. Your Rights

Under applicable privacy laws, you have the right to:

• Access a copy of the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data, subject to legal obligations
• Withdraw consent for marketing communications at any time
• Request data portability in a machine-readable format
• Lodge a complaint with the relevant data protection authority

To exercise any of these rights, contact us at privacy@carrymitra.com .

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Transaction records may be retained for up to 7 years to comply with financial regulations. You may request account deletion at any time; however, some data may be retained for legal compliance.

7. Cookies

We use cookies and similar technologies to maintain session state, remember your preferences, and analyze usage patterns. You can control cookies through your browser settings. Disabling cookies may affect some platform functionality.