Privacy Policy

1. Controller

Data controller: DTS Delivery / Oscar Herrera. Privacy and support contact: soporte@dtsdrop.com.

2. Data we process

Account: name, email, phone, profile photo (if provided), and Google or Apple sign-in identifiers.

Orders and deliveries: delivery address, order contents, status history, and order chat messages.

Location: device coordinates when you search nearby stores, set a driver work zone, or use live delivery tracking (with your permission).

Device and notifications: FCM tokens, platform (iOS/Android), and technical data needed for security and performance.

Merchants: business details, catalog, logos, and product photos published in the merchant panel.

3. Purposes

Provide the marketplace and delivery service (accounts, orders, operational payments, chat, and tracking).

Send push notifications about order status, driver offers, and relevant messages.

Improve security (authentication, fraud prevention) and platform reliability.

Meet legal obligations and handle support or account-deletion requests.

4. Legal bases

Performance of a contract when you create an account and use the apps or panel.

Consent for location and push notifications when the OS prompts you.

Legitimate interests in security, abuse prevention, and service improvement, balanced against your rights.

5. Processors and third parties

Firebase / Google (Authentication, Cloud Messaging) and Apple (Sign in with Apple) for identity and notifications.

Hosting infrastructure (e.g. Railway) for API, database, and media storage.

We do not sell your personal data to third parties for advertising.

6. Retention

We keep data while your account is active and as needed to provide the service.

After a deletion request, we delete or anonymize account data within 30 days, except where law requires limited retention (e.g. accounting or claims).

7. Your rights

You may request access, correction, objection, restriction, or deletion by emailing soporte@dtsdrop.com or using the Delete account page on dtsdrop.com.

You can also revoke location and notification permissions in your device settings.

8. Children

The service is not directed to children under 13 (or the applicable minimum age in your jurisdiction). If we learn of an unauthorized minor account, we will delete it.

9. Changes

We may update this policy. The update date appears at the bottom of the page. Continued use after a material change means you have been informed; we will notify you of material changes when reasonable.