Privacy Policy

1. Who we are

“GoDrop”, “we”, “us” and “our” refers to the operator of godrop.sg, a free, mobile-first delivery-dispatch service that connects Singapore businesses (“Posters”) with independent couriers (“Delivery Partners”). This Policy describes how we handle personal data of Posters, Delivery Partners, and visitors to our website (collectively, “you”).

2. Personal data we collect

We collect only the data we need to run the service:

• Account data. Your mobile number (verified via a click-to-chat handshake on Telegram or WhatsApp), your display name, your role (Poster or Delivery Partner), and — for Delivery Partners — your vehicle type.
• Verification identifiers. The Telegram chat ID returned by Telegram’s Login Widget, or the WhatsApp JID returned by the inbound “verify” message you send to our verification number. These are how we recognise you on the messaging channel and deliver job notifications.
• Job data. Pickup and drop-off addresses you enter, parcel description, vehicle requirement, time window, recipient contact details, parcel photos, and proof-of-delivery photos.
• Delivery Partner location. Approximate latitude/longitude refreshed roughly every five minutes while the app is open in the foreground, captured only after you sign up as a Delivery Partner and while location sharing is enabled in Settings. See Section 6.
• Communications. Messages you send to support, ratings you give the other party after a job, and dispute reports.
• Technical data. Standard request logs (IP address, user agent, timestamps) for security, abuse prevention, and debugging.

We do not collect government identifiers (NRIC/FIN), payment-card data, email addresses (unless you write to us), or background-check data. We do not use third-party advertising trackers.

3. Purposes we use it for

Under the PDPA we must tell you the purposes. They are:

• Verifying that you control the mobile number you sign up with;
• Matching a job with eligible Delivery Partners near the pickup location, in real time, using your Delivery Partner location (where applicable);
• Delivering job-related notifications (new pings, accepts, completion, ratings) via Telegram, web push, and — for signup verification only — WhatsApp;
• Revealing the full pickup/drop-off address and the other party’s contact details only to the Delivery Partner who has accepted a specific job, and to the Poster of that same job;
• Storing proof-of-delivery photos so both sides have evidence of completion;
• Investigating disputes, fraud, harassment, no-shows, and other abuse;
• Operational analytics on aggregate, non-personally-identifying job volumes and service health;
• Complying with applicable law and lawful requests from authorities.

4. Legal basis under the PDPA

We rely on your consent — given when you sign up and when you enable location sharing — and, where applicable, the PDPA’s legitimate interests exception (for fraud prevention, security logging, and dispute handling). You may withdraw consent at any time as set out in Section 9; withdrawing consent may mean we can no longer provide the service to you.

5. Address and contact gating

Before a Delivery Partner accepts a job, our public feed shows only district-level area names (for example, “Bukit Timah” or “Tampines”), the approximate pickup and drop-off points on a map, and the route shape between them. The full address with unit/floor, the Poster’s contact details, and the recipient’s contact details are revealed only to the Delivery Partner who has accepted that specific job. This is enforced at the API layer.

6. Delivery Partner location

If — and only if — you sign up as a Delivery Partner and enable location sharing, the app captures your device location roughly every five minutes while the tab is open in the foreground. We use this for two things:

1. Matching. Your most recent location is compared against pickup locations to decide which jobs you are eligible to receive a ping for, in real time.
2. Dispute investigation. We keep a private history of your location samples so that — if a Poster and a Delivery Partner disagree about what happened on a specific job — our admin team can review whether the Delivery Partner was where they said they were.

Your coordinates are never shown to Posters or to any other user. The only consumers of this data are (a) the automated matching system and (b) GoDrop admin during a dispute. You can turn location sharing off at any time in Settings; while it is off, you will not be matched to nearby jobs. Location history is retained for 90 days and then permanently deleted.

7. Disclosure to third parties

We do not sell personal data. We disclose it only as follows:

• Other users on the same job. After a Delivery Partner accepts a job, the Poster sees the Delivery Partner’s name, vehicle, rating, and preferred contact channel; the Delivery Partner sees the full pickup/drop-off address, the recipient name, and the Poster’s preferred contact channel.
• Messaging platforms. When you choose to verify or receive notifications via Telegram, your chat ID and message content are processed by Telegram FZ-LLC under its own privacy policy. When you choose to verify via WhatsApp, your phone number and the verification message are processed by Meta Platforms under its own privacy policy. We do not use Meta’s WhatsApp Business Cloud API; the WhatsApp integration is solely a one-time inbound verification handshake.
• Infrastructure providers. Our hosting, database, object storage (for photos), and map-tile / routing providers process data on our behalf strictly to deliver the service. They are contractually bound to confidentiality and are not permitted to use your data for their own purposes.
• Law and safety. Where we are required to do so by law, court order, or a lawful request from a Singapore authority, or where disclosure is necessary to protect the rights, property, or safety of GoDrop, our users, or the public.

8. Retention

• Account data is kept for as long as the account is active, and for up to 24 months after deactivation for fraud-prevention and dispute purposes.
• Job records (including addresses you entered, parcel descriptions, and ratings) are kept for 24 months from job completion.
• Proof-of-delivery photos are kept for 12 months from job completion.
• Parcel photos uploaded to draft jobs are auto-deleted after 7 days if the job is not posted, or promoted to the job record (and follow the 24-month rule) on post.
• Delivery Partner location history is kept for 90 days.
• Server access logs are kept for up to 90 days.

After the retention period expires, data is deleted or irreversibly anonymised.

9. Your rights under the PDPA

You may at any time, by writing to [email protected]:

• Access the personal data we hold about you and the ways it has been used or disclosed in the 12 months before your request;
• Correct personal data you believe is inaccurate or incomplete;
• Withdraw consent for any specific purpose; we will tell you the likely consequences (often: we can no longer match you to jobs);
• Delete your account and the personal data attached to it, subject to the retention obligations above and any ongoing dispute.

We respond to verified requests within 30 days. We may need to verify your identity (typically by sending a confirmation to the messaging channel you signed up with) before acting on a request.

10. Cross-border transfers

Some of our infrastructure providers (object storage, map tiles, routing, push notifications, Telegram, and WhatsApp) operate servers outside Singapore. Where personal data is transferred outside Singapore, we take steps required under the PDPA’s Transfer Limitation Obligation to ensure a standard of protection comparable to the PDPA — typically via the provider’s standard contractual terms and recognised certifications.

11. Security

We use TLS in transit, encrypted-at-rest object storage for photos, parameterised database queries, hashed credentials where credentials exist, role-based access controls for admin, and short-lived signed URLs for photo access. No system is perfectly secure; if we become aware of a data breach that is likely to cause significant harm or affects 500 or more individuals, we will notify the Personal Data Protection Commission and affected users as required by the PDPA.

12. Cookies and analytics

We use a small number of first-party cookies and localStorage entries strictly to keep you signed in (a 30-day JWT), to remember your in-progress job draft, and to remember UI preferences such as dark mode. We do not use third-party advertising cookies. We may use privacy-preserving aggregate analytics (no IP address retention, no cross-site tracking) to measure traffic.

13. Children

GoDrop is not intended for anyone under 18. We do not knowingly collect personal data from minors. If you believe a minor has signed up, please email us and we will remove the account.

14. Changes to this Policy

We may update this Policy from time to time. The “Effective” date at the top reflects the most recent change. Material changes will be highlighted on the landing page and, where appropriate, sent to your registered messaging channel. Continuing to use GoDrop after a change means you accept the updated Policy.

15. Contact and Data Protection Officer

For any privacy question, access or correction request, or complaint, please email our Data Protection Officer at [email protected] with the subject line “Privacy request”. If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission of Singapore at pdpc.gov.sg.