Privacy Policy
Drova is a GPS dispatch platform for Australian transport operators. This policy explains what personal information we handle, why, and who it is shared with. It is written to align with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
Who we are
Drova is operated from New South Wales, Australia. For any privacy question, correction or complaint, contact us at privacy@drova.au.
Two kinds of people
It matters who you are, because we handle your information differently.
Operators are transport businesses who hold an account with us. Everyone else — drivers, customers, stock agents and facility contacts — has their information entered into Drova by an operator. If your details are in Drova, it is almost certainly because a transport operator put them there in order to run a job.
What we collect
From operators, when they sign up: business name, contact name, email address, mobile number, and if they subscribe, billing details and ABN. Payment card details are handled by Stripe and never reach our servers.
Entered by operators, about other people:
- Customer name and mobile number
- Driver name and mobile number
- Stock agent or facility contact name and phone number
- Pickup and delivery addresses
- Notes written by the dispatcher about the job
Location data: while a driver has an active job and has granted location permission, we record the position of their device and the distance travelled. Collection stops when the job is marked complete or the driver revokes permission.
Technical data: basic server logs, and timestamps recording when a tracking link was opened.
Why we collect it
- To show a customer where their delivery is, and to text them a tracking link and an arrival warning
- To let an operator dispatch and manage their own jobs, drivers and vehicles
- To record distance travelled so an operator can bill accurately
- To operate, support and secure the service
We do not sell personal information. We do not use it for advertising or share it with data brokers.
Location tracking, specifically
Location is only recorded while a job is active. It is not collected between jobs, and not once a job is completed. A driver can withdraw permission at any time in their phone's settings, which stops collection immediately.
Drivers: the operator who dispatched you can see your position while you are on a job, and so can the customer you are delivering to, via the tracking link. If you are an employee, your employer has separate legal obligations to notify you before tracking you — see the note in our Terms of Service.
Who your information is shared with
We use a small number of service providers to run Drova:
- Twilio — sends the SMS messages. Receives the recipient's mobile number and the message content.
- Google Maps Platform — maps, address lookup and routing. Receives addresses and coordinates.
- Stripe — subscription payments. Receives operator billing details directly; card numbers never pass through us.
- Railway and Turso — application hosting and database.
Some of these providers process or store data outside Australia, including in the United States. By using Drova you consent to that transfer. We otherwise disclose personal information only where the law requires it.
How long we keep it
Job records, including addresses and distance, are retained while the operator's account is open, so they have their history for tax and business purposes. Raw location trail points are deleted once a job is completed and its distance has been calculated — only the summary and the last known position are kept.
If an operator closes their account, we delete their data within 90 days, except where we are required to retain records by law.
Accessing or correcting your information
You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Email privacy@drova.au and we will respond within 30 days.
If your details were entered by a transport operator, we may direct you to that operator, or contact them on your behalf, since the information is theirs to manage.
Security
Data is transmitted over encrypted connections and access to operator accounts requires a passcode. No system is completely secure, and we cannot guarantee absolute security. If a data breach occurs that is likely to cause serious harm, we will notify affected people and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
Complaints
If you are unhappy with how we have handled your information, contact us first at privacy@drova.au. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
If we change this policy we will update the date at the top. Material changes affecting operators will be notified by email.
← Back to Drova