1. Overview & Policy Scope
This Privacy Policy describes the practices of Tam One regarding collecting, processing, securing, and handling personal and operational data across web dashboards and mobile applications for merchants, dispatch teams, and couriers.
This policy applies to all registered accounts and visitors, forming an integral part of Tam One's Terms and Conditions.
2. Categories of Data Collected
We collect only necessary information required to operate order synchronization and delivery dispatch effectively:
- Merchant & Account Data: Name, commercial identity, phone numbers, emails, store branches, and inventory addresses.
- Courier (Captain) Data: Full name, national identity, driver license, vehicle details, verification photo, and settlement wallet coordinates.
- Order & Fulfillment Data: Items, parcel weights, delivery coordinates, customer contact details, and audit timestamps.
- Device & Telemetry Data: IP address, device model, operating system, and application crash reports for diagnostic stability.
3. Location Tracking & GPS Policy
Precise spatial coordinates are critical for route optimization. We collect courier location only while the captain is in 'Ready for Orders' mode and actively fulfilling an assigned order. Location tracking terminates immediately when marked offline or outside active tasks. We never sell location data to third parties.
4. Purpose & Legal Basis of Processing
Data is processed strictly to dispatch tasks efficiently, estimate arrival times (ETA), calculate wallet settlements, prevent fraudulent mock locations, and improve algorithmic route dispatching.
5. Data Sharing with Stakeholders
Information is shared strictly within required operational boundaries: between merchant, assigned courier, and recipient customer; with vetted cloud infrastructure providers; or when mandated by applicable law.
6. Security & Encryption Standards
We enforce end-to-end TLS 1.3 encryption in transit, AES-256 database encryption at rest, strict Role-Based Access Control (RBAC), and distributed backups.
7. Data Retention & Account Deletion
Data is retained during active subscription lifecycles. Users may request account deletion at any time, subject to statutory accounting retention laws.
8. User & Data Subject Rights
Users maintain rights of access, rectification, restricted processing, and account data deletion.
9. Cookies & Tracking Technologies
We use essential cookies to maintain secure sessions and interface localization preferences.
10. Policy Updates & DPO Contact
We may periodically update this policy. Inquiries can be directed to our Data Protection Officer at: privacy@tamone.app.