DrayApp Privacy Policy

Effective Date: October 19, 2026

DrayData, Inc. (“DrayData,” “we,” “our,” or “us”) develops DrayApp (“DrayApp” or the “App”), available on the Apple App Store and the Google Play Store. DrayApp helps drivers receive dispatches, update milestones, upload documents, communicate with their dispatch team, and support operational workflows in real time. This Privacy Policy explains what information the App collects, how we use, share, store, and protect it, and the choices you have.

DrayApp is a business tool for drivers and other authorized personnel of organizations (your “employer” or “fleet”) that use DrayData’s transportation management platforms. Accounts are created and managed by your employer or by DrayData, not by individuals in the App. DrayApp includes DrayTalk, a built-in messaging and calling feature (“DrayTalk in DrayApp”). This Policy covers DrayApp and the DrayTalk feature inside it; in this Policy, “DrayApp” includes DrayTalk in DrayApp. Our Terms of Use are at https://draydata.com/draytalk-terms-of-use/.

1. Summary of Key Points

We collect your sign-in details, precise location (including in the background while you work a dispatch), photos and documents you submit, messages and calls made through DrayTalk, device and diagnostic information, and app-usage information, which may include session recordings of in-app screens.
Your location and operational data are shared with your employer or fleet, because DrayApp is a business tool.
We use a small number of service providers to run the App: Twilio (messaging and calling), UXCam (analytics and diagnostics), Google Firebase Cloud Messaging and Apple Push Notification service (notifications), Google Play services (location, Android), Trimble CoPilot / PC*MILER (routing and ETA, where enabled), and cloud hosting providers.
We do not sell your personal information. We do not use it for advertising. We do not track you across other companies’ apps or websites.
You can manage device permissions, block and report other DrayTalk users, and ask for correction or deletion of your information (Sections 10 and 11).

2. Information We Collect

2.1 Information You Provide

Account information – name, email address, phone number, driver ID, company/organization, role, and other identifiers needed to sign you in and authenticate you. Sign-in is performed against DrayData’s own servers over an encrypted connection.
Uploaded content – photos, documents, signatures, notes, and other files you submit as part of dispatch workflows, proof of delivery, or electronic manifests.
Messages and calls (DrayTalk) – text messages, photos, videos and file attachments you send or receive; message metadata (timestamps, sender and recipient identifiers, conversation and group membership, delivery and read status); and call metadata (participants, start time, duration, status, missed-call records). Voice calls are audio only and call audio is not recorded by DrayData; audio is transmitted in real time between participants through Twilio.
Reports and blocks (DrayTalk) – if you report a message or block a user, we process the report details so we can review it.

2.2 Location Information

DrayApp relies on accurate location data to provide its core functionality. With your permission, the App collects your precise (GPS) location, including in the background when the App is closed or not in use while you are logged in and working, to:

automatically update dispatch milestones through geofencing;
calculate ETAs, distances, and routes;
generate electronic driver manifests;
support customer tracking, safety, compliance, and reporting requirements.

Background location is used only for these dispatch features and only where required by your employer to support operational workflows. It is never used for advertising or sold. On Android the App shows an ongoing notification while it collects location in the background; on iPhone the system shows its location indicator. You can turn location off at any time in your device settings, but doing so will disable key features and may prevent you from using the App. See Section 4.

2.3 Device Permissions

With your permission, the App accesses certain device features. You can grant or deny each one and change your choice later in your device settings; some features will not work without the related permission.

Location (precise, approximate, and background) – for the purposes in Section 2.2.
Camera – to photograph documents, delivery proof, and attachments.
Photo library and files – to select existing photos or files to upload or attach, using the system picker.
Microphone – to transmit your audio during DrayTalk voice calls.
Notifications – to alert you to new dispatches, messages, and incoming or missed calls.
Android only – a foreground service and notifications while location tracking or a call is active, and a full-screen incoming-call screen over the lock screen. A DrayTalk setting opens your phone’s battery settings so you may choose to let the App run in the background so notifications arrive on time; this is your choice.
iPhone only – background location updates, and an ongoing-call timer shown as a Live Activity on the Lock Screen and Dynamic Island.

The App does not access the contacts stored on your device, your SMS messages, or your call log.

2.4 Information Collected Automatically

Device and app information – device model, operating system and version, app version, language, time zone, unique device or installation identifiers, and diagnostic data (crashes, errors, performance) used to troubleshoot and improve the App.
Push notification token – a registration token that identifies your app installation so we can deliver notifications.
Connection information – IP address and similar network information, processed as a normal part of routing internet traffic and securing the service.
Usage data – buttons tapped, screens viewed, timestamps, and feature usage.
Update check – the App’s version and platform, sent to our settings service so the App can tell you when a new version is available.

2.5 Analytics, Diagnostics, and Session Recording

We use UXCam, a third-party product-analytics and session-replay service, to understand how the App is used and to find and fix problems. Through UXCam the App may collect screens viewed, taps and gestures, navigation paths, session length, crash and performance diagnostics, and session recordings (a visual replay of in-app screens and interactions). Recordings can capture content displayed in the App, such as names, addresses, dispatch and load details, and documents shown on screen. While a DrayTalk chat is open, the recording of that screen is blurred on your device before it is sent, so chat text, names, and photos are not captured; other screens are not blurred, and blurring may not cover every case.

UXCam associates a session with a user identifier — the phone number you sign in with — and an installation identifier, and derives approximate location (city, region, country) from your IP address. When a network request fails, a diagnostic event may be sent that includes the request address and request details with sensitive fields (such as passwords and authentication tokens) removed. Call audio is not recorded.

This information is used only to identify issues, troubleshoot, and improve usability, reliability, and performance. It is not used for advertising. You may ask us to delete your session recordings (Section 11).

2.6 Integration Data (When Enabled by Your Employer)

ELD data (for example Motive, Samsara) – hours of service, odometer readings, and shift activity, when your employer connects its ELD account to DrayData’s platform.
Navigation and routing (Trimble CoPilot / PC*MILER) – origin, destination, and coordinates sent to obtain route, mileage, and ETA information.

2.7 Information We Do Not Collect

The App does not collect the contacts stored on your device, health or fitness data, payment or financial information, browsing history, or biometric identifiers. The App contains no advertising and no advertising, marketing, attribution, or data-broker SDKs, does not collect advertising identifiers (such as IDFA or the Android Advertising ID), and does not track you across other apps or websites.

3. How We Use Your Information

We use information to:

deliver dispatches and real-time operational updates;
update milestones automatically through geofencing and generate electronic driver manifests;
provide navigation, routing, mileage, and ETA calculations;
support customer tracking, reporting, billing, safety, and compliance workflows;
provide messaging and calling, deliver push notifications, and show delivery and read status;
review reports of objectionable content and enforce blocking and our Terms of Use;
authenticate you, maintain your secure session, and prevent fraud and misuse;
diagnose and fix crashes, errors, and performance problems and improve usability;
comply with legal obligations and enforce our agreements.

We do not sell personal information, we do not use it for advertising, and we do not use it for automated decision-making that produces legal or similarly significant effects. Information collected for these purposes is not used for unrelated purposes without further notice and, where required, your consent.

4. Consent, Location Permission, and Your Choices on Permissions

Before the App asks your device for background location access, it shows a notice explaining that DrayApp collects your location even when the App is closed or not in use, which features use it (geofenced milestone updates, ETAs and routing, electronic manifests, and compliance and customer tracking), and that it is shared with your employer. You decide whether to allow it. You can change or withdraw your choice at any time in your device settings (Android: Settings > Apps > DrayApp > Permissions; iPhone: Settings > DrayApp). Withdrawing location permission will disable features that depend on it. You can also turn notifications on or off in your device settings and deny camera, photo, or microphone access; the related features (for example attaching a photo or making a call) will not work without it.

5. How We Share Information

We share information only in the following cases:

With your employer or fleet – DrayApp is a business tool. Operational data, including your location, milestones, documents, and driver information, is shared with the fleet using DrayFleet or related DrayData platforms. Your employer may also manage your account and access communications and information associated with your use of DrayTalk, as permitted by its agreement with DrayData.
With integrated partners – only when enabled by your employer, such as ELD providers (Motive, Samsara) and navigation/routing tools (Trimble CoPilot / PC*MILER).
With service providers – third parties acting on our instructions to provide the services in Section 6: messaging and calling, analytics and diagnostics, push notifications, hosting, and security.
With other users – your display name, and the messages, attachments, and calls you send in DrayTalk, are shared with the other participants in your conversations.
For legal reasons – when required by law or valid legal process, or to protect the rights, safety, property, or security of DrayData, our customers, our users, or the public.
In a business transfer – in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

We never share information with third parties for advertising purposes, and we do not sell personal information.

6. Third-Party Services and SDKs

The following third parties process data on our behalf. Each is bound by contract to use the data only to provide services to DrayData and to provide the same or equal protection of user data as this Privacy Policy describes.

Twilio Inc. (Programmable Conversations and Programmable Video) – transmits and stores DrayTalk messages, attachments, and message metadata and connects voice calls in real time. https://www.twilio.com/legal/privacy
UXCam Inc. – product analytics, crash and performance diagnostics, and session recording (Section 2.5). https://uxcam.com/privacy-policy
Google LLC – Firebase Cloud Messaging – delivers push notifications and processes your notification token. https://firebase.google.com/support/privacy
Google LLC – Google Play services (Android) – provides the fused location service used to obtain device location. https://policies.google.com/privacy
Apple Inc. – Apple Push Notification service and Core Location (iPhone) – push delivery and location services. https://www.apple.com/legal/privacy
Trimble Inc. (CoPilot / PC*MILER) – route, mileage, and ETA calculations, where enabled. https://www.trimble.com/en/legal/privacy
ELD providers (for example Motive, Samsara) – only when your employer connects them.
Cloud hosting and infrastructure providers – host DrayData’s backend services (authentication, dispatch, documents, notifications) and process data on our behalf.

DrayApp does not use Firebase Analytics or Crashlytics and contains no advertising SDKs.

7. Content Safety, Blocking, and Reporting (DrayTalk)

DrayTalk has zero tolerance for objectionable content and abusive behavior. Before using chat you must accept our Terms of Use. In the App you can block another user (hiding that user’s messages from you on your device) and report a message (it is hidden for you immediately, and a pre-filled email to info@draydata.com opens so you can send details). Blocks and reported-message hiding are stored on your device only and are cleared when you sign out. We review reports and may remove content and suspend or remove users who violate the Terms of Use. Our Terms of Use are available at https://draydata.com/draytalk-terms-of-use/.

8. Data Retention

We keep each category of information only as long as needed for the purposes in this Policy, and then delete or anonymize it, unless a longer period is required to comply with law, resolve disputes, enforce agreements, or maintain security and business records.

Operational and location data – retained as long as required to provide the services or as required by your employer or fleet, who controls most retention settings for operational data.
Account and authentication information – retained while your account is active with your employer, and for a limited period afterward as needed for security and records.
DrayTalk messages, attachments, and call metadata – retained through our communications infrastructure; not automatically deleted, and may remain until deleted through App features, your employer’s configuration or administrative action, or a deletion request.
Analytics, diagnostics, and session recordings – retained according to UXCam’s retention configuration and our operational needs, then deleted.
Data on your device – messages, conversations, and sign-in credentials used by DrayTalk are deleted when you sign out; offline dispatch data cached by DrayApp is removed when you log off or uninstall the App. Files you download remain on your device until you delete them.

9. Data Storage and Security

We protect your data using industry-standard practices, including encryption in transit (TLS/HTTPS) and at rest on our servers, secure authentication and access controls, and monitoring and auditing of system activity. Sign-in information and session tokens are kept in app-private storage on your device and are erased when you sign out. On Android, DrayTalk’s local data is excluded from cloud backup and device-to-device transfer; other App data may be included in device backups depending on your device settings. On iPhone, app data may be included in iCloud or computer backups depending on your device settings. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; please keep your credentials protected and report a lost or compromised device to your employer.

10. Your Rights and Choices

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. Because DrayApp accounts are administered by your employer, please contact your employer’s administrator first. You may also contact DrayData directly (Section 13), and we will respond consistent with applicable law.

California and other U.S. state residents: we do not sell or “share” personal information as those terms are defined under the California Consumer Privacy Act and similar state laws, and we do not use or disclose sensitive personal information (including precise geolocation) for purposes that would require an opt-out. You may exercise your rights to know, correct, and delete by contacting us; we will not discriminate against you for doing so.

You can withdraw any consent by changing the relevant permission in your device settings or by contacting us. You can also manage permissions and notifications in your device settings and block or report other DrayTalk users.

11. Account and Data Deletion

DrayApp does not allow you to create an account in the App; accounts are provisioned and managed by your employer or by DrayData. To delete your account or your personal information, contact your employer’s administrator, or submit a request to DrayData by email to info@draydata.com or through www.draydata.com/contact (you may also use the “Request Account Deletion” option in DrayTalk settings, which opens a pre-filled request). You can include a request to delete your session recordings. After a verifiable request, we will delete or anonymize your personal information, and instruct our service providers to do the same, within 30 days, except where we are required or permitted by law to retain specific information (for example, to comply with legal obligations, resolve disputes, enforce agreements, maintain security, or meet your employer’s recordkeeping obligations for dispatch and compliance data). Logging off or signing out erases the data stored on that device as described in Section 8.

12. Children’s Privacy

DrayApp is intended for professional commercial use only. It is for authorized personnel who are at least 18 years old (or the age of majority in their jurisdiction) and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

13. International Data Transfers

DrayApp is operated from the United States and is intended primarily for organizations doing business in the United States. If you use the App from outside the United States, your information may be transferred to, processed, and stored in the United States or other countries where DrayData or its service providers operate, which may have different data-protection laws. By using the App you acknowledge this transfer and processing as described in this Policy.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the Effective Date, and may also post it in the App and/or on our app store listings. If we make material changes, we will provide a more prominent notice as appropriate, for example by asking you to review and accept updated terms in the App. Your continued use of the App after changes take effect constitutes acceptance of the revised Policy.

15. Contact Us

For questions about this Privacy Policy, to exercise your rights, or to request deletion, contact:

DrayData, Inc.

Email: info@draydata.com

Website: www.draydata.com/contact