Privacy Policy

Information you provide to us

• Account information: name, email address, phone number, company name, and a hashed password (we never store your password in plain text).
• Shipper booking information: pickup and drop-off locations, cargo type and weight, pickup dates, and any notes you add to a booking.
• Transporter and fleet information: truck type, capacity, registration/plate number, routes and pricing you set, and availability.
• Verification (KYC) documents: at present we record which verification documents you have submitted for a truck (for example logbook, insurance, driving licence, national ID, or transit licence) and who submitted them and when. We do not currently store the underlying document files; this will change once a dedicated document-storage provider is enabled, and we will update this policy before that happens.
• Payment-related information: transaction records, escrow ledger entries, and the M-Pesa or card payment details needed to process a booking. Card and mobile-money credentials themselves are handled directly by our licensed payment partners (such as Flutterwave and Safaricom M-Pesa) and are not stored on our own servers.
• Communications: messages you send us for support, dispute resolution, or general enquiries.

Information we collect automatically

• Usage data such as pages visited, actions taken on the platform, and timestamps, used to keep the Service secure and to improve it.
• Device and log information such as IP address, browser type, and general location inferred from your IP address, used for security, fraud prevention, and rate-limiting login attempts.

Information from third parties

• If you choose to sign in with Google, we receive your name, email address, and profile picture from Google as part of that sign-in flow. We do not receive your Google password.
• Our payment partners (for example Flutterwave and M-Pesa) may share transaction status information with us (such as whether a payment succeeded) so we can update your booking and escrow records.

• To create and manage your account, and to distinguish shipper, truck-owner, and administrator roles.
• To operate the marketplace: matching shipment requests to available trucks and routes, calculating and displaying pricing, and processing bookings from request through delivery.
• To hold, release, and record funds through our escrow process, including calculating the platform commission described in our Terms of Service.
• To verify truck owners and their vehicles before a listing is marked verified, and to review submitted documents.
• To communicate with you about your account, bookings, and platform updates, including transactional emails such as email verification and password-reset links.
• To detect, investigate, and prevent fraud, abuse, and security incidents, including rate-limiting repeated login attempts.
• To resolve disputes between shippers and truck owners, and to maintain an audit log of administrative actions taken on the platform.
• To comply with applicable law and respond to lawful requests from public authorities.

We do not sell your personal information. We share information only in the following circumstances:

• Between shippers and truck owners as needed to complete a booking — for example, a truck owner sees the pickup and drop-off details of a booking made against their truck, and a shipper sees the relevant details of the truck and owner fulfilling their shipment.
• With payment processors (such as Flutterwave and Safaricom M-Pesa) to the extent necessary to process a payment or payout.
• With hosting and infrastructure providers who store and process data on our behalf under appropriate confidentiality and security terms (for example our application hosting and database providers).
• With email-delivery providers, solely to send account and transactional emails such as verification and password-reset links.
• Where required by law, regulation, legal process, or a valid request from a public or government authority.
• In connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.

We keep account and booking information for as long as your account is active and for a reasonable period afterward to meet legal, accounting, tax, dispute-resolution, and audit requirements. Ledger and transaction records are retained for the period required by applicable financial regulations. You may request deletion of your account as described in Section 6 below, subject to these legal retention obligations.

We use reasonable technical and organisational measures to protect your information, including hashed password storage, hashed verification and password-reset tokens, encrypted connections between your browser and our servers, baseline security headers, and rate-limiting on authentication endpoints. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify you and any applicable regulator as required by law.

If you are located in Kenya, the Data Protection Act, 2019 gives you rights over your personal data, including the right to be informed of how your data is used, to access the personal data we hold about you, to request correction of inaccurate data, to request deletion of your data (subject to legal retention requirements), to object to certain processing, and to lodge a complaint with the Office of the Data Protection Commissioner. If you are located elsewhere, you may have similar rights under your local data-protection law. To exercise any of these rights, contact us at privacy@truckonnect.co.ke. We will respond within a reasonable time and in line with applicable law.

The Service is intended for business use by adults (18 years and older) operating or shipping through commercial trucking. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to remove it.

Our application and database infrastructure may be hosted outside Kenya. Where personal data is transferred internationally, we take steps intended to ensure it continues to receive an appropriate level of protection consistent with the Data Protection Act, 2019 and our contractual arrangements with our hosting and service providers.

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal, operational, or regulatory reasons. We will update the “Last updated” date above when we do, and where changes are material we will provide additional notice, such as an email or an in-app notice.

If you have questions about this Privacy Policy or how we handle your information, contact us at privacy@truckonnect.co.ke.