Privacy Policy — Deliproof

1. Who We Are

Deliproof ("we," "us," or "our") is a delivery dispute automation platform that helps restaurants capture photo evidence, match it to chargeback claims, and recover lost revenue from delivery platforms. Our service is operated by Deliproof, contactable at support@deliproof.com.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password. If you sign in via Google OAuth, we receive your Google profile name and email address.

Business & Location Information

You may provide your restaurant name, locations (address, city, country), team member assignments, and contact details. This information is used to organize your orders and evidence by location.

Order Data

We store order identifiers from delivery platforms (Pyszne.pl, Glovo, Wolt, Bolt Food, Uber Eats) including external order IDs, platform names, order status, and any notes you add. This data is used to match evidence to disputes.

Photo & Video Evidence

Your staff captures photos or videos of orders before driver pickup. These media files are stored securely in cloud storage (Cloudflare R2) and linked to the corresponding order. They serve as timestamped evidence for dispute resolution.

Usage Data

We collect standard analytics data (page views, feature usage) to improve our service.

3. Legal Basis for Processing

In accordance with Article 6 of the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

Contract performance — processing necessary to provide the Deliproof service (account management, order tracking, evidence storage, dispute filing)
Legitimate interest — improving our service, preventing fraud, and ensuring platform security
Consent — marketing communications and optional analytics cookies, which you can withdraw at any time
Legal obligation — retaining billing and tax records as required by law

4. How We Use Your Information

To provide and maintain the Deliproof service
To store and organize delivery evidence by order and location
To match evidence to platform disputes and file claims on your behalf
To send email notifications (verification, password reset, dispute outcomes)
To improve and develop new features
To provide customer support

5. Data Sharing

We do not sell, rent, or trade your personal data. We share data only with:

Service providers — infrastructure partners (hosting on Railway, storage on Cloudflare R2, email delivery via Resend, payment processing via Stripe) who process data on our behalf under strict data processing agreements
Delivery platforms — when filing disputes on your behalf, we submit the relevant evidence (photos, order details) to the applicable platform
Legal requirements — when required by applicable law or legal process

6. Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected, unless a longer period is required by law:

Account data — retained while your account is active and deleted within 30 days of account deletion
Order data & evidence — retained for 12 months after the order date to cover dispute resolution windows, then automatically deleted
Billing records — retained for 5 years in accordance with Polish accounting and tax obligations
Analytics cookies — retained for a maximum of 13 months
Support correspondence — retained for 3 years after the last exchange

After these periods, your data is deleted or anonymized.

7. Data Security

We implement appropriate security measures to protect your personal data against unauthorized access, use, or disclosure. These include encrypted data transmission (TLS), encrypted storage of sensitive credentials, access controls, and secure cloud infrastructure. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Cookies

Our site uses cookies to enhance your browsing experience. We use essential cookies for authentication and session management, and optional analytics cookies to understand usage patterns. You can disable non-essential cookies in your browser settings, but this may affect certain functionalities.

9. Links to Third-Party Sites

Our service may contain links to third-party websites (delivery platforms, payment providers). We have no control over these sites and disclaim any responsibility for their privacy policies. Please review their privacy policies before providing personal information.

10. Your Rights

Under the GDPR, you have the right to:

Access your personal data and obtain a copy
Rectify inaccurate or incomplete data
Delete your personal data ("right to be forgotten")
Restrict or object to processing
Data portability — receive your data in a structured, machine-readable format
Withdraw consent at any time for consent-based processing
Lodge a complaint with your local data protection authority

To exercise your rights, contact us at support@deliproof.com. We will respond within 30 days.

11. Changes to This Policy

We reserve the right to modify this privacy policy at any time. Any material changes will be communicated via email or an in-app notice. The date of the last update is indicated at the top of this page. Continued use of the service after changes constitutes acceptance.

12. Contact

For privacy-related questions, concerns, or requests, contact us at:

Deliproof
Email: support@deliproof.com