This Privacy Policy explains how Paygala Limited ("Paygala", "we",
"us" or "our") collects, uses, shares and protects information in connection with the
ParcelGala mobile application (package co.paygala.parcelgala),
the ParcelGala web administration console and related services (together, the "Service").
ParcelGala is a parcel and cargo management platform used by courier companies and their staff (agents, managers and administrators) to register, track, dispatch, offload and hand over parcels, and to notify customers. By using the Service you agree to this Policy.
1. Who is responsible for your data
The Service is operated by Paygala Limited (Tanzania). Where a courier company uses ParcelGala to manage its own operations, that company acts as the controller of the operational data it enters (such as parcels and customer contact details), and Paygala processes that data on its behalf as a service provider.
2. Information we collect
a) Account information
- Name, username, email address and phone number.
- Your role (agent, manager, company administrator) and the company, branch and office you belong to.
- A securely hashed password. We never store your password in plain text.
b) Operational data you enter
- Parcel details: tracking codes, origin and destination, type, weight/quantity, description, price and status.
- Sender and recipient names and phone numbers, which staff enter to create and deliver parcels.
- Dispatch, offload, vehicle, driver and cash/sales records.
c) Device and technical information
- Device push-notification token (via Firebase Cloud Messaging) so we can send you alerts.
- Basic device identifiers, app version, language and log/diagnostic data needed to operate and secure the Service.
d) Permissions used on your device
| Permission | Why we use it |
|---|---|
| Camera | To scan parcel QR/barcodes when dispatching and offloading. Images are processed on-device and are not stored or uploaded. |
| Bluetooth (scan/connect) | To find and connect to thermal receipt printers. |
| Location (Android) | Required by Android only to allow Bluetooth device discovery on some versions. We do not collect, store or share your geographic location. |
| Notifications | To deliver operational alerts and updates. |
| Internet / Network | To sync data with our secure servers. |
3. How we use information
- To provide, operate and maintain the Service and your account.
- To register, track, dispatch, offload and hand over parcels.
- To send SMS notifications to senders and recipients about their parcels (e.g. registration and arrival/ready-for-collection messages).
- To send push and in-app notifications to staff.
- To generate reports and cash-up/sales summaries for companies and branches.
- To secure the Service, prevent abuse and comply with legal obligations.
4. SMS notifications to customers
Courier companies may enable automated SMS to the senders and recipients whose phone numbers are entered for a parcel. These messages relate solely to that parcel (for example, confirming registration or notifying that it has arrived). SMS are delivered through a third-party SMS gateway provider on our behalf. Customers do not need a ParcelGala account to receive these messages.
5. How we share information
We do not sell your personal information. We share information only as follows:
- Within your organization: with the courier company, branch and offices you belong to, according to role-based access.
- Service providers (processors): hosting/infrastructure, Firebase Cloud Messaging (push notifications) and our SMS gateway, strictly to operate the Service.
- Legal: when required by law, regulation, legal process or to protect rights, safety and the integrity of the Service.
- Business transfers: in connection with a merger, acquisition or sale of assets, subject to this Policy.
6. Data retention
We retain account and operational data for as long as your account is active and as needed to provide the Service, then for a reasonable period to meet legal, accounting, audit and dispute-resolution obligations. When data is no longer needed it is deleted or anonymized. See Account & Data Deletion.
7. Security
We use technical and organizational measures to protect your information, including encrypted transport (HTTPS), hashed passwords and role-based access controls. No method of transmission or storage is completely secure, but we work to protect your data and to respond to incidents.
8. Children
The Service is intended for business use by staff of courier companies and is not directed to children under 16. We do not knowingly collect personal information from children.
9. Your rights
Subject to applicable law, you may request to access, correct, export or delete your personal information, or object to or restrict certain processing. You can update your name, username and password from within the app and the web console. To make other requests, contact us using the details below.
10. International transfers
Your information may be processed and stored on servers located in other countries. Where this happens, we take steps to ensure your information remains protected in accordance with this Policy.
11. Third-party services
The Service relies on third parties including Google Firebase (Cloud Messaging) and an SMS gateway provider. Their handling of data is governed by their own privacy policies.
12. Changes to this Policy
We may update this Policy from time to time. We will revise the "Last updated" date above and, where appropriate, provide additional notice. Continued use of the Service after changes take effect constitutes acceptance.
13. Contact us
Paygala Limited
Email: support@paygala.co