DrayTalk Privacy Policy

Effective Date: September 24, 2026

DrayData, Inc. (“DrayData,” “we,” “our,” or “us”) values your privacy. This Privacy Policy explains how the DrayTalk mobile application (“DrayTalk” or the “App”) collects, uses, stores, shares, and protects information when you use it. It applies to the DrayTalk apps distributed through the Apple App Store and the Google Play Store.

DrayTalk is a business communication application for drivers, dispatchers, and other authorized personnel of organizations that use DrayData’s transportation management solutions. DrayTalk is not a consumer product; accounts are provisioned by organizations, not created by individuals in the App.

1. Summary of Key Points

We collect the phone number and password you use to sign in, the messages, photos, files, and calls you exchange, technical information about your device, an approximate location (city, region, and country) derived from your IP address, and app-usage and diagnostic data — including session recordings of your in-app screens (the screen of an open chat is blurred, see Section 2.4).
We use third-party services to run DrayTalk: Twilio (messaging and calling), UXCam (analytics, diagnostics, and session recording), and push-notification services (Google Firebase Cloud Messaging and, on iPhone, Apple Push Notification service).
We do not sell your personal information, we do not use it for advertising, and we do not track you across other companies’ apps or websites.
You can manage device permissions, block and report other users, and request deletion of your account and personal information (see “Account and Data Deletion”).

2. Information We Collect

2.1 Account and Authentication Information

To give you access to DrayTalk, we collect and process the information needed to authenticate you:

Phone number – used as your sign-in identifier.
Password – submitted to DrayData’s authentication service over an encrypted (HTTPS/TLS) connection and used only to verify your identity.
Account and organization identifiers – a user identifier, your company/organization affiliation, your assigned role, and a session/correlation identifier issued after you sign in.
Display name and email address – associated with your account and shown to other authorized users in your organization directory and in conversations.
Device information needed to maintain a secure session (see Section 2.5).

DrayTalk authenticates directly against DrayData’s own backend. It does not use Microsoft, Google, Apple, or other third-party or social sign-in.

2.2 Messages, Calls, and Shared Content

DrayTalk lets authorized users exchange messages and voice calls. In providing this functionality, the App collects, transmits, and stores:

Text messages and their content.
Photos, videos, and file attachments you send or receive.
Message metadata – timestamps, sender and recipient identifiers, conversation and group membership, message reactions, and delivery/read status.
Voice call data – real-time audio of voice calls is transmitted between participants through our communications provider (Twilio) to connect the call. We do not record call audio. We do process and store call metadata such as the participants, call start time, duration, call status, and missed-call records.

DrayTalk uses a video-capable calling technology, but video is disabled – calls are audio only. DrayTalk does not have an in-chat “voice message” recording feature.

Messages, attachments, and call metadata are processed and stored through third-party communication infrastructure (Twilio) that supports messaging, calling, and content delivery. See Section 3.

2.3 Device Permissions and Features

With your permission, DrayTalk accesses certain device features. You can grant or deny each of these, and you can change your choice later in your device settings; some features will not work without the relevant permission.

Camera – to take a photo to attach to a conversation.
Photo library and files – to choose existing photos, videos, or files to attach to a conversation, through your device’s picker.
Microphone – to transmit your audio during a voice call.
Notifications – to alert you to new messages and incoming or missed calls.

On Android, DrayTalk also uses a foreground service and related notifications while a call is ongoing, and the ability to show a full-screen incoming-call screen over the lock screen. A Settings option opens your phone’s battery settings so that you can choose to let DrayTalk run in the background, which helps message and call notifications arrive without delay; this is entirely your choice. On iPhone, DrayTalk can show an ongoing-call timer as a Live Activity on the Lock Screen and Dynamic Island. DrayTalk does not request access to your location, the contacts stored on your device, SMS messages, call log, or other device data.

2.4 Analytics, Diagnostics, and Session Recording

DrayTalk uses UXCam, a third-party product-analytics and session-replay service, to understand how the App is used and to find and fix problems. Through UXCam, the App collects:

App usage information – screens viewed, features used, taps and gestures, navigation paths, and session length.
Session recordings – a visual replay of your in-app screens and interactions during a session. These recordings can capture on-screen content displayed within the App. While a chat is open, the recording of that screen is blurred on your device before it is sent, so the message text, names, and photos shown in that chat are not captured. Other screens are not blurred and can appear in recordings. For example, the conversation list can show a contact’s name and a preview of the latest message, and the directory and settings screens can show names and other account details. Blurring is applied automatically and may not cover every case.
Diagnostic information – crash reports, error events, performance metrics, device model, operating-system version, and app version.
A user identifier that links a session to your DrayTalk account and device. This identifier is the phone number you use to sign in, together with an installation identifier.
Approximate location – UXCam derives your approximate location (city, region, and country) from your IP address. DrayTalk does not use your device’s location services or GPS.

When an in-app network request fails, DrayTalk also sends UXCam a diagnostic event containing the request URL and a copy of the request body with sensitive fields (such as passwords and authentication tokens) removed before it leaves the device.

Session recording begins when the App opens. You may ask us to delete your session recordings by emailing info@draydata.com (see Section 11). Call audio is not recorded.

This information is used only to identify issues, troubleshoot, improve usability, and maintain the quality and reliability of the App. It is not used for advertising.

2.5 Information Collected Automatically

When you use DrayTalk, we and our service providers automatically receive certain technical information:

Device and app information – device model, operating system and version, app version, device language, time zone, and unique device or installation identifiers used by Twilio, Firebase, and UXCam.
Push notification token – a registration token that identifies your app installation so we can deliver notifications to it.
Connection information – IP address and similar network information, processed transiently by our backend and service providers as a normal part of routing internet traffic and maintaining security.
Locally stored data – DrayTalk stores your messages, conversations, participant lists, your sign-in credentials and session tokens, and your app settings in app-private storage on your device so the App works quickly and offline. When you sign out, your messages, conversations, participant information, and sign-in credentials and tokens are deleted from the App. A few device preferences (theme, notification sound and permission settings, the auto-download setting, and the fact that you accepted the Terms) are kept. Attachments you download stay on your device until you delete them, and signing out does not remove them. On Android they are saved in your device’s Downloads folder; on iPhone they are kept in the App’s storage and are removed if you uninstall the App.

2.6 Information We Do Not Collect

DrayTalk does not collect your precise location (it does not use your device’s location services), the contacts stored on your device (the in-app directory of people in your organization comes from your organization’s account, not your address book), health or fitness data, financial or payment information, browsing history, or biometric identifiers. DrayTalk contains no advertising, does not collect advertising identifiers (such as IDFA or the Android Advertising ID), and does not track you across other apps or websites. The only analytics and diagnostics service in the App is UXCam, described above. The only location-related data is the approximate location (city, region, and country) that UXCam derives from your IP address, described in Section 2.4.

3. Third-Party Services and SDKs

DrayTalk relies on the following third-party services, which process user data on our behalf as part of delivering the App. Each is bound by contract to use the data only to provide services to DrayData and to provide the same or equal protection of user data as this Privacy Policy describes.

Twilio Inc. (Programmable Conversations and Programmable Video) – transmits and stores your messages, attachments, and message metadata, and connects your voice calls in real time. Twilio also processes device and connection information needed to deliver these services. See https://www.twilio.com/legal/privacy.
UXCam Inc. – provides product analytics, crash and performance diagnostics, and session recording as described in Section 2.4. See https://uxcam.com/privacy-policy.
Google LLC – Firebase Cloud Messaging – delivers push notifications to your device and processes your notification token and related delivery information. See https://firebase.google.com/support/privacy.
Apple Inc. – Apple Push Notification service – on iPhone, push notifications are delivered through Apple’s service. See https://www.apple.com/legal/privacy.
Cloud hosting and infrastructure providers – DrayData’s backend services (including the authentication and notification services) are hosted on cloud infrastructure operated by our providers, which process data on our behalf to run and secure the service.

These are the only third parties with which DrayTalk shares personal data through software components (SDKs or APIs). DrayTalk does not include any advertising, marketing, attribution, or data-broker SDKs.

4. How We Use Information

We use the information described above to:

Authenticate you and maintain your secure session.
Provide messaging and calling functionality – send and deliver messages, attachments, and calls, and show delivery and read status.
Send push notifications for new messages and calls.
Operate content-safety features – process reports of objectionable content and enforce blocking.
Maintain the security and integrity of the service and investigate misuse.
Diagnose and fix crashes, errors, and performance problems, and improve usability and reliability.
Comply with legal obligations and enforce our agreements.

We do not sell personal information, and we do not use personal information for advertising or for automated decision-making that produces legal or similarly significant effects.

5. How We Share Information

We share information only as follows:

With service providers – the third parties listed in Section 3, acting on our instructions to provide communication delivery, analytics and diagnostics, push notifications, hosting, and security.
With your organization – the organization that licenses DrayTalk for you may manage your account and access communications and information associated with your use of the App, as permitted by its agreement with DrayData (see Section 6).
With other users – your display name, and the messages, attachments, and calls you send, are shared with the other participants in your conversations.
For legal reasons – when required by law or valid legal process, or to protect the rights, safety, property, or security of DrayData, our customers, our users, or the public.
In a business transfer – in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

6. Organization (Business) Accounts

DrayTalk is provided to you through an organization that licenses DrayData’s services. Your organization may: manage your access to DrayTalk; provide and administer your user account; determine who you may communicate with; and access communications and information associated with your use of the App, as permitted through its use of DrayData services and applicable agreements. For questions about account administration, access permissions, or your organization’s own data practices, contact your organization administrator.

7. Content Safety, Blocking, and Reporting

DrayTalk has zero tolerance for objectionable content and abusive behavior. Before using the messaging features you must accept our Terms of Use. Within the App you can:

Block another user, which hides that user’s messages from you on your device. Blocks, and messages you have hidden by reporting them, are stored only on your device: they do not carry over to another device, and they are cleared when you sign out.
Report a message by choosing a reason in the App. The message is hidden for you immediately and a pre-filled email to info@draydata.com opens so you can send us the details.

We review reports and may remove content and suspend or remove users who violate our Terms of Use. Reports you submit, including the reported content and identifiers, are processed for this purpose. Our Terms of Use are available at https://draydata.com/draytalk-terms-of-use/.

8. Data Retention

We retain each category of information only as long as needed for the purposes described in this Policy, and then delete or anonymize it, unless a longer period is required to comply with law, resolve disputes, enforce agreements, or maintain security and business records.

Messages, attachments, and call metadata – retained as part of the DrayTalk service through our communications infrastructure. This data is not automatically deleted and may remain available until it is deleted through App features, your organization’s configuration or administrative action, or a deletion request.
Account and authentication information – retained for as long as your account is active with your organization, and for a limited period afterward as needed for security and records.
Analytics, diagnostics, and session recordings – retained according to UXCam’s data-retention configuration and our operational needs, and then deleted.
Locally stored data on your device – messages, account data, and sign-in credentials are deleted when you sign out; see Section 2.5 for what is kept.

9. Data Storage and Security

All communication between the App and our servers and service providers is encrypted in transit using industry-standard TLS/HTTPS. Your sign-in credentials and session tokens are stored in app-private storage on your device and are erased when you sign out. On Android, DrayTalk’s local data is excluded from cloud backups and device-to-device transfers; on iPhone, app data may be included in your device’s iCloud or computer backups, depending on your device settings. We and our service providers apply commercially reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. Because DrayTalk accounts are administered by your organization, you should first contact your organization administrator to exercise these rights. You may also contact DrayData directly at info@draydata.com, and we will respond consistent with applicable law.

California residents: we do not sell or “share” personal information as those terms are defined under the California Consumer Privacy Act, and we do not use or disclose sensitive personal information for purposes that would require an opt-out. You may exercise your CCPA rights, including the right to know and the right to delete, by contacting us as described above; we will not discriminate against you for doing so.

You can withdraw any consent you have given by changing the relevant permission in your device settings or by contacting us at info@draydata.com. You can also: manage or revoke camera, photo, microphone, and notification permissions in your device settings; turn notifications on or off in the App’s settings; block or report other users; and request account deletion as described below.

11. Account and Data Deletion

DrayTalk does not allow you to create an account in the App; accounts are provisioned and managed by your organization. To delete your account or your personal information, first contact your organization administrator, who manages your account and associated data.

You may also submit a deletion request directly to DrayData by email to info@draydata.com, or by using the “Request Account Deletion” option in the App’s settings, which opens a pre-filled request to that address. You can include a request to delete your session recordings in the same email. Upon receiving a verifiable request, we will delete or anonymize your personal information, and instruct our service providers to do the same, within 30 days, except where we are required or permitted by law to retain specific information (for example, to comply with legal obligations, resolve disputes, enforce agreements, or maintain security). Signing out of the App immediately erases your messages, account data, and sign-in credentials stored by DrayTalk on that device.

12. Children’s Privacy

DrayTalk is a business application for authorized personnel of DrayData customers and is not directed to children. The App is intended only for users who are at least 18 years old (or the age of majority in their jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

13. International Data Transfers

DrayTalk is operated from the United States and is intended primarily for organizations doing business within the United States. If you use DrayTalk from outside the United States, your information may be transferred to, processed, and stored in the United States or other countries where DrayData or its service providers operate, which may have data-protection laws different from those in your country. By using DrayTalk you acknowledge this transfer and processing as described in this Policy.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post any changes on this page and update the Effective Date above. If we make material changes, we will provide a more prominent notice as appropriate — for example, by asking you to review and accept updated terms in the App. Your continued use of DrayTalk after the changes take effect constitutes acceptance of the revised Policy.

15. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact: DrayData, Inc. · Email: info@draydata.com · Website: https://www.draydata.com