Privacy Policy
Darb (“we”, “us”) operates a multi-tenant last-mile routing platform for delivery companies. This policy explains what we collect, how we use it, who we share it with, and how long we keep it.
Data we collect
- Account data — company name, administrator and dispatcher names, email addresses, and hashed passwords.
- Operational data — delivery stops, saved places, routes, and campaign records created by our business customers (tenants).
- End-customer contact data — phone numbers (stored in E.164 format) that a tenant enters in order to request a delivery location.
- End-customer location data — the delivery location a recipient shares over WhatsApp or through an SMS location link.
- Technical data — the minimal server logs required to operate and secure the service.
How we use WhatsApp and SMS location data
When a tenant has only a customer’s phone number, Darb sends a WhatsApp message (or, as a fallback, an SMS containing a one-time link) asking the recipient to share their delivery location. Shared locations are used solely to build and optimize the specific delivery route for the tenant that requested them. We do not use end-customer locations for advertising, and we do not sell them.
30-day location retention
End-customer locations are automatically deleted 30 days after the related route is completed. This retention limit is enforced by the platform and applies to every tenant. Phone numbers a tenant saves for recurring customers are kept only while that tenant maintains the record and are removed on request.
Data sharing
We share data only with the service providers needed to deliver messages and compute routes — for example WhatsApp (Meta), our SMS provider, and mapping/traffic providers — and only to the extent required to perform the requested action. We do not sell personal data. We may disclose information where required by law.
Where your data is processed
Darb’s servers are hosted in Doha, Qatar (Google Cloud regionme-central1). Personal data — including end-customer phone numbers and the locations they share — is therefore stored outside Oman.
Some of that data also reaches service providers that operate internationally, each receiving only what its task requires:
- WhatsApp (Meta) — the recipient’s phone number and the message itself, in order to deliver the location request.
- Our SMS provider — the recipient’s phone number and the one-time link, when SMS is used as the fallback.
- Mapping and routing providers — stop coordinates, and any address text typed into the address search, in order to compute travel times and suggest addresses.
Two systems deliberately receive less. Our error tracking runs on our own infrastructure, and phone numbers, e-mail addresses and coordinates are replaced with placeholders before an event is recorded. Our uptime monitoring receives no personal data at all — it only checks whether the service responds.
Your rights
End customers may ask the delivery company (tenant) that contacted them to access or delete their information; tenants can action these requests in the platform, and locations are deleted automatically within the 30-day window regardless. Tenant account holders can access, correct, or delete their account data from their account settings or by contacting us.
Contact
For privacy questions or requests, contactprivacy@darbhq.com.