REDX TRUCKS PRIVACY POLICY

Effective Date: April 26, 2026

RedX Trucks ("RedX", "we", "us") is committed to protecting your privacy. This comprehensive Privacy Policy details how we collect, use, disclose, store, secure, and protect personal information when you use the RedX Trucks App ("App"). Your use of the App constitutes consent to these practices.

1. Information We Collect

1.1 Personal Information

We collect information necessary to verify your identity and facilitate transactions, including:

• Identity details: Full name, mobile number, email address, and National ID (NID) for verification.
• Contact information: Billing or shipping address and emergency contact details (if provided).

1.2 Service and Trip Data

When you use our services, we collect:

• Booking details: Pickup and drop-off locations, type, weight, volume, and value of goods, along with truck specifications.
• Transactional information: Payment amounts, one-time passwords (OTPs), delivery confirmations, and receipts.
• Communications: Support requests, feedback, and ratings or reviews.

1.3 Technical and Device Data

We collect data automatically from your device, such as:

• Device information: Device ID, model, operating system version, and browser type.
• Network details: IP address, carrier, and connection type.
• Usage data: App interactions, session duration, and crash reports.
• Location data: Real-time GPS information (only with your explicit permission).

1.4 Third-Party Data

We may receive limited data from third parties, including:

• Verification services (e.g., telecom APIs for number validation).
• Publicly available sources or partners for fraud detection (processed anonymously).

2. How We Use Information

We process data only for legitimate business purposes, including:

• Core services: Booking management, driver matching, trip tracking, OTP verification, and proof-of-delivery.
• Payments: Recording transactions, issuing receipts, and resolving payment disputes.
• Security and fraud prevention: Risk assessment, unusual activity monitoring, and account protection.
• Customer support: Responding to queries, handling complaints, and analyzing feedback.
• App improvement: Conducting analytics, product testing, and feature development.
• Compliance: Meeting KYC, AML, tax reporting, and regulatory obligations (e.g., Bangladesh Bank).
• Marketing: Sending promotional messages or newsletters (you can opt out via the App or by replying "STOP").

3. Sharing and Disclosure

3.1 With Service Providers

We share data only with trusted service providers under strict contractual obligations, such as:

• Payment processors, SMS/OTP gateways, and cloud hosting providers (e.g., AWS, Google Cloud).
• Analytics platforms (e.g., Google Analytics, Firebase) using anonymized data.
• Verification APIs (e.g., government or telecom sources).

3.2 With Drivers

We share only the minimum information necessary—such as pickup and drop-off points, goods summary, and OTP—for completing deliveries. Sensitive personal data is never shared.

3.3 Legal and Safety Disclosures

We may disclose information, without prior notice, when required by law or necessary to:

• Comply with legal processes, court orders, or law enforcement requests.
• Protect the rights, safety, and property of users or the public (e.g., fraud or emergency situations).

3.4 Business Purposes

In the event of a merger or acquisition, your data may be transferred to the successor entity (you will be notified accordingly). Aggregated or anonymized information may be used for research or analytics. We do not sell, rent, or trade personal information to third parties.

4. Data Security and Retention

4.1 Security Measures

We use industry-leading safeguards to protect your data, including:

• Encryption: AES-256 encryption for stored data and TLS 1.3 for data in transit.
• Access controls: Role-based permissions, multi-factor authentication, and logging.
• Compliance: Adherence to ISO 27001 standards and regular penetration testing.
• Breach response: Timely notification to affected users and regulators as required by law.

4.2 Retention Periods

• Active accounts: Data retained indefinitely to support active service use.
• Deactivated accounts: Retained for two years for legal, accounting, or dispute purposes, after which data is securely deleted or anonymized.
• System logs: Maintained on a rolling basis for 90 days.

4.3 International Transfers

All data is primarily stored in data centers compliant with Bangladeshi regulations. Any cross-border data transfer occurs only when adequate protection measures are in place.

5. Your Privacy Rights

In accordance with applicable data protection regulations in Bangladesh, you have the right to:

• Access: Request a copy of your personal data (free of charge, within 30 days).
• Correction: Update or rectify inaccurate information via the App or profile settings.
• Deletion: Close your account (subject to retention obligations).
• Objection: Opt out of marketing or automated decision-making.
• Portability: Request your data in a structured, machine-readable format.

You can exercise your rights through the App settings or by contacting us at support@redxtrucks.com or +8809610078788.

6. Cookies, Tracking, and Third Parties

We use essential cookies for core functionality and analytics cookies (which you can disable via settings). We may also use pixel tags for performance tracking. Third-party SDKs (such as Google and Firebase) are disclosed in the App Store listing.

7. Children's Privacy

Our services are strictly intended for users aged 18 and above. We do not knowingly collect personal data from minors. Parents or guardians who believe a minor has provided information should contact us at support@redxtrucks.com.

8. Policy Updates

We may update this Privacy Policy from time to time. Any material changes will be communicated at least 30 days in advance through the App or by email. Updated versions will require renewed consent where necessary.