Privacy policy

Information we use

Account information includes your name, phone number, email where supplied, login verification and account preferences. Delivery information includes pickup and destination addresses, recipient contact details, parcel descriptions, instructions, shipment history and proof of delivery.

Driver information may include licence, vehicle registration and insurance evidence, verification decisions, bank or payout references, delivery earnings and availability. We also process support messages, ratings, device identifiers needed for notifications, security events and technical diagnostics.

Location and permissions

Customers can allow location access to select an address; manual address entry remains available. Drivers use location while online or carrying out a delivery, including background location where enabled, so we can offer suitable work, track a delivery and assist with an incident. You can change permissions in device settings; disabling permissions can limit the relevant service.

Camera and photo access are used only for features such as profile or document uploads, scanning and proof of delivery. We do not need access to your full contacts list to deliver a parcel. Provide recipient details only when you are authorised to share them, and tell the recipient how their details will be used.

Why we process information

We use information to create and secure accounts, validate service eligibility, calculate a quote, arrange and track deliveries, verify handover, process and reconcile payments, resolve complaints, prevent misuse and meet applicable legal obligations. We do not sell personal information or use delivery information for targeted advertising.

Optional marketing, if introduced, will have a separate choice. Accepting the service terms does not grant permission for unrelated marketing. Withdrawal of an optional permission does not affect processing already lawfully carried out.

Who receives information

Assigned delivery personnel and the customer or recipient receive the information reasonably needed for the delivery. Authorised operations and support personnel may access records needed to resolve an issue. We require service providers to process information for the relevant service and protect it.

Google Maps processes address and mapping requests. Razorpay processes online payments; IORA receives payment references and status and does not store your full card number, CVV or UPI PIN. Google Firebase and Google Cloud provide account authentication, business-data and file storage, delivery tracking, hosting, server processing, push notifications and security checks. Firebase phone authentication processes your phone number to send verification messages and prevent abuse. These providers publish their own privacy notices.

We may disclose relevant records when required by applicable law, a valid legal request, or to protect people and investigate fraud. Any transfer or change of business must preserve applicable privacy obligations.

Storage, retention and security

We use access controls, encrypted transport, private file access and limited operational access. No service can promise absolute security. Report a suspected account or privacy incident promptly to customer care without sending passwords, OTPs, card details or UPI PINs.

We retain account information while needed to operate the account and resolve outstanding deliveries or disputes. Delivery evidence and operational records follow our retention schedule; payment, tax, fraud and dispute records may be kept longer where required. Deletion requests are checked against those obligations. Backups are isolated and expire according to the recovery schedule; deleting a live account does not immediately remove every backup copy.

Our configured services use infrastructure in India and Singapore, and some provider services process information in other locations. Account authentication, abuse prevention and other global services are not confined to India. IORALOG LLP remains responsible for its use of these providers and applicable data-protection obligations; this service does not promise India-only processing.

Your choices and requests

You can update supported profile fields, control device permissions and notification preferences, contact support for access or correction, and request account deletion through customer care or an available in-app deletion option. We verify requests proportionately to protect your account. Some records must be retained for applicable legal obligations or unresolved transactions; we will explain any relevant limitation.

Do not create an account for a child. The booking account holder must be at least 18 and authorised to arrange the delivery. Contact us if you believe a child has supplied information improperly.

Website cookies and third-party services

IORA uses browser storage and essential authentication and security services to keep you signed in, remember preferences, protect requests and preserve an unfinished delivery draft. Maps and payment checkout may use their own storage or cookies when you use them. Optional Google Analytics is disabled until you choose Allow analytics; you can change that choice through Privacy settings. Our analytics events exclude address text, account identity and URL query parameters. Advertising personalization is disabled, and declining optional analytics does not prevent sign-in or delivery booking.

Contact and updates

Contact IORALOG LLP customer care on +91 7568108254 or support@ioralog.com for privacy, correction, deletion or grievance requests. The registered address and designated grievance contact appear below. Material changes will be presented with an updated policy version and additional notice where appropriate.