Privacy Policy

Last updated:

BG Image

UNIVOOZ & UNIVOOZ GO PRIVACY POLICY

Effective Date: August 5, 2026


This Privacy Policy explains how Univooz ("Company", "we", "us", or "our") collects, uses, discloses, and protects information when you use the Univooz logistics management platform, website (collectively, the "Platform"), and the Univooz GO mobile driver application (the "Driver App").

1. Our Role: Data Controller vs. Data Processor (GDPR Framework)

Under the EU General Data Protection Regulation (GDPR) and applicable data protection laws, Univooz operates in a dual capacity:

  • Data Processor: When Business Clients (merchants, dispatchers, or enterprise customers) upload delivery orders, recipient names, phone numbers, drop-off locations, and package details into the Platform, Univooz acts as a Data Processor. We process this information strictly on behalf of and according to the instructions of the Business Client (the Data Controller).

  • Data Controller: Univooz acts as a Data Controller for:

    • Direct Business Client account credentials and contact info.

    • Driver profile data, app credentials, and operational telemetry generated within the Univooz GO app.

    • Technical device data, cookies, and usage analytics gathered from website visitors and Platform administrators.

2. Information We Collect & Process

A. Order & Recipient Information (Processed on behalf of Business Clients)

  • Delivery Details: Recipient name, delivery address, phone number, order ID, delivery notes, and package characteristics (size, weight, handling rules).

  • Proof of Delivery (POD): Electronic signatures, timestamped photos of dropped-off items, and delivery status logs.

B. Driver Data (Collected via Univooz GO App)

  • Account & Vehicle Info: Name, email, mobile phone number, driver profile picture, vehicle type, and license plate number.

  • Real-Time & Background Location Data: Precise latitude, longitude, heading, speed, and location telemetry.

    • Note: Location data is collected in both the foreground and background only while the driver is on-duty or actively fulfilling an assigned delivery batch.

  • Device Permissions & Hardware Data:

    • Camera Access: Required to scan package barcodes and capture Proof of Delivery (POD) photos.

    • Push Notifications & Device State: Battery status, network connectivity (Wi-Fi/cellular), and OS versions to maintain route connection and deliver dispatch alerts.

C. Platform & Business Client User Data

  • Account Setup: Admin name, corporate email, billing details, company address, and tax identification numbers.

  • Technical Logs: IP address, browser type, system activity, referring URLs, and session interactions.

3. Legal Bases for Processing (GDPR Art. 6)

We rely on the following legal grounds to process your personal data:

  • Contractual Necessity (Art. 6(1)(b)): To perform our service agreements, dispatch orders, provide live routing to drivers, and send delivery status updates to end-recipients.

  • Legitimate Interests (Art. 6(1)(f)): To optimize routing algorithms, detect fraud, ensure system stability, and enhance platform security.

  • Legal Obligations (Art. 6(1)(c)): To comply with tax laws, commercial record-keeping requirements, and legal transport mandates.

  • Consent (Art. 6(1)(a)): For background location permissions on mobile devices (granted via system settings) and optional direct marketing.

4. Special Notice: Driver Location Tracking (Univooz GO)

To enable route dispatching, accurate ETAs for end-customers, and real-time fleet visibility, Univooz GO tracks precise geolocation.

  • Active Tracking Window: Tracking begins when a driver toggles their status to "On Duty" or accepts a task, and continues in the background if the driver switches apps or locks their device while en route.

  • Off-Duty Privacy: When a driver goes "Off Duty" or logs out of the app, location collection automatically stops completely. We do not record off-duty location history.

5. How We Share & Disclose Information

We do not sell, rent, or monetize your personal data. Data is shared strictly as necessary to execute deliveries:

  • With Business Clients & Dispatchers: Real-time location of drivers assigned to their orders, live delivery status, and Proof of Delivery (photos/signatures).

  • With Delivery Recipients: Dynamic tracking links displaying estimated time of arrival (ETA), driver first name, vehicle info, and live map position during active delivery.

  • Sub-processors & Third-Party Service Providers:

    • Cloud Infrastructure: AWS / Google Cloud Platform (data hosting & database storage).

    • Mapping & Geocoding APIs: Google Maps Platform / Mapbox (for navigation & route calculation).

    • Communication Providers: Twilio (for SMS delivery status notifications and customer-driver masked phone calls).

6. International Data Transfers

If your personal data is transferred outside the European Economic Area (EEA) or UK, Univooz ensures appropriate protection through:

  • Standard Contractual Clauses (SCCs) approved by the European Commission.

  • EU-U.S. Data Privacy Framework (DPF) participation where applicable.

7. Data Retention & Anonymization

  • Order & Delivery Telemetry: Kept for as long as directed by our Business Clients (typically 45 to 90 days for operational audit history), after which recipient PII is permanently deleted or anonymized for platform metrics.

  • Driver Account Records: Maintained for the duration of the active account plus the statutory period required for tax, transport regulatory audit, or legal defense.

  • System Logs: Retained for a maximum of 30 days before automatic purge.

8. Data Protection & Security Safeguards

Univooz implements technical and organizational measures aligned with ISO 27001 and GDPR standards:

  • Encryption: All data in transit is encrypted using TLS 1.3, and data at rest is secured via 256-bit AES encryption.

  • Access Controls: Strict Role-Based Access Control (RBAC) and Least Privilege Access protocols.

  • Anonymized Logs: Delivery history is disconnected from direct personal identifiers upon order lifecycle completion.

9. Your GDPR Data Subject Rights

If you reside in the European Economic Area (EEA) or United Kingdom, you have the following rights regarding your personal data:

  1. Right to Access: Request a copy of the personal data we hold about you.

  2. Right to Rectification: Correct incomplete or inaccurate data.

  3. Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data when no longer needed. Users may request deletion of their account and associated personal data by contacting info@maxtech.solutions (Note: If you are an end-customer, please contact the merchant/business you purchased from directly, as Univooz processes this data under their instruction).

  4. Right to Restrict or Object: Limit or object to certain processing activities (including automated decision-making).

  5. Right to Data Portability: Obtain your data in a structured, machine-readable format.

  6. Right to Lodge a Complaint: You have the right to submit a complaint to your local Data Protection Authority (e.g., Datatilsynet, CNIL, ICO).

10. Contact Us & Data Protection Officer

For privacy inquiries, Data Subject Rights requests, or questions regarding our Data Processing Agreement (DPA), please reach out to us at:


  • General Support: info@maxtech.solutions