Privacy policy

Who is responsible

Distribution companies (“companies”) use BeeRoutes to run their deliveries. Each company decides which customers, orders, drivers and products it enters, and is responsible for that information; we process it on the company's behalf and only to provide the service. For the accounts companies open with us directly (sign-up, plan and billing contact), we are responsible.

Information we process

• Account details: name, email address, phone number, role, language and an encrypted (hashed) password.
• Business records entered by a company: customers and their addresses and opening hours, products and stock, orders, invoices and delivery time slots.
• Driver location: only for drivers, only after they agree in the app, and only while they are on shift or navigating. In the Android app this continues with the screen off or the app in the background, always shown by an ongoing notification. We store the latest position and a trail of the route. Location is never collected when a driver is off shift.
• Proof of delivery: the receiver's name, a signature and/or a photo, when the company asks for them.
• Messages between the office and drivers inside BeeRoutes.
• Technical data: a sign-in cookie, a language cookie, the time and IP address of sign-ins (for security and to block password guessing) and, if you allow notifications, a device token to deliver them.

How we use it

To provide BeeRoutes: plan and optimise routes, calculate arrival times and delivery windows, show the office where its trucks are, guide drivers with navigation, keep orders, invoices and stock, send the notifications, emails and SMS the company has turned on, keep accounts secure and fix problems. We do not sell personal information, show advertising or use it to profile you.

Who can see it

Information is visible only inside the company it belongs to, according to each person's role. A driver's live position is visible to their company's office only; customers never see where a driver is — they only see an estimated one-hour delivery window. Companies cannot see each other's data.

Service providers

We use a small number of providers to run BeeRoutes, each only for its task:

• Hetzner Online GmbH (Germany) — servers and backups; all data is stored in the European Union.
• Mapbox — maps, travel times and navigation; it receives the coordinates needed to draw maps and calculate routes.
• An email delivery provider — invoices and account emails such as password resets.
• An SMS provider (Twilio or Infobip) — only if a company turns on SMS updates for its customers.
• Google (Android) — delivering app notifications to your device when you allow them.

How long we keep it

Driver location trails are deleted after 90 days. Other records are kept while the company uses BeeRoutes, or until the company or the account holder deletes them; invoices may need to be kept longer by the company for legal reasons. Backups are kept for 14 days.

Security

All traffic is encrypted (HTTPS). Passwords are stored only as hashes, sign-in attempts are rate-limited, and every request is checked so each company can reach only its own data.

Your choices and rights

You can see and correct your details in BeeRoutes, turn off location sharing by ending your shift or in your phone's settings, and turn notifications off at any time. You can delete your account — see the account deletion page. You may also ask us, or the company you work with, for a copy of your information, to correct it or delete it, and you may complain to your data-protection authority.

Children

BeeRoutes is a business tool and is not meant for anyone under 16.

Changes

If we change this policy we will update the date above, and tell companies about important changes.