Privacy policy

1. Data controller

The data controller is Forward Air Logistics LLC, which operates the Depaso service ("Depaso"). Depaso is operated by Forward Air Logistics LLC, a limited liability company incorporated in the United States of America. Contact: soporte@depaso.app. For any privacy question write to that email.

2. Data we collect

We only collect the data needed to provide the service:

• Identification and contact: first and last names, national ID or RUC, email and phone.
• Your purchases: tracking number, store, description, value, invoice, weight and photos of the package.
• Delivery addresses in Ecuador.
• Payment data, processed by Stripe. Depaso does not store full card numbers; it only keeps an identifier for later charges that you authorize.
• Technical usage data from the site and the app: device, operating system, push notification identifier and activity logs.
• App usage data (analytics and performance): which steps of sign-up, package registration and payment you complete, loading times and errors, through Firebase (Google). Usage analytics is turned on only if you agree to receive news and is turned off when you disable them in your profile; it never includes your email, ID, name or amounts.
• If you register as a traveler: name, email, phone, city, route and travel frequency.

3. What we use it for

To create and manage your account and your Depaso address, register and transport your purchases, coordinate delivery, process payments and refunds, handle claims, send you notices about your shipments, prevent fraud and send you Depaso news and offers, which you agree to when you create your account and can turn off at any time from your profile in the app or with the unsubscribe link in every email. If you subscribe to the blog news, we store your email only after you confirm the link we send you (double opt-in), in the content management system we use to publish the blog, until you unsubscribe.

4. Who we share it with

We share only the data strictly needed with those who make the service possible: the travelers and the people who receive your packages in each city, Servientrega as the national delivery provider in Ecuador, Stripe as the payment processor, PayPhone for the payments you make with PayPhone, Resend as the transactional email provider, the content management system of the blog if you subscribe to the news, Google and Apple for notifications and sign-in, Google (Firebase) for usage analytics and app performance, and the authorities when the law requires it. We do not sell your data.

5. How long we keep it

While your account is active and, afterwards, for as long as legal and accounting obligations require. When you delete your account we anonymize your profile immediately and keep only the record of payments, shipments and wallet that the law requires.

6. Your rights

Under Ecuador's Organic Law on Personal Data Protection you may access, rectify, update, delete, object to and request portability of your data. Write to soporte@depaso.app from your account email; we reply within 15 days.

7. Security

We encrypt communications, limit access to data to the staff who need it and log every team action on your account. No system is infallible: if we detect an incident that affects you, we will let you know.

8. Minors

The service is for people over 18. If we detect an account belonging to a minor, we delete it.

9. Cookies

The use of cookies on depaso.app is described in the Cookie policy.

Cookie policy

10. Changes

If we change this policy we will let you know in the app or by email. The date of the last update appears at the top.

11. Location

Every delivery address is saved with a point on the map, which we store as latitude and longitude; that point is required to save the address. What is optional is the location permission on your phone: if you grant it, the app can place the point at your current location and you can move it before saving; if you do not grant it, you place the point on the map by hand. You can grant approximate or precise location according to your device options. The app only reads your location while you are using it: we do not collect a movement history or track your location in the background.

We use the point to locate your address and coordinate the delivery of your shipments. We do not use it for advertising. Granting location permission is not the same as consenting to marketing; news requires an explicit, separate choice.

We keep the coordinates together with the address and with the shipments that used it while your account is active, like the rest of the shipment data (section 5). There is no automatic deletion period for the coordinates. If you delete an address in the app, it is no longer shown or used for new shipments, but its data stays in our internal records until you delete your account or request its erasure at soporte@depaso.app.

When the map is displayed in the app, the map provider (Google Maps on Android and Apple Maps on iOS) receives technical and location data. We send the point, as a Google Maps link together with the address and the contact details of the recipient, to the logistics operator that transports your shipment and arranges its delivery; the delivery company (Servientrega when it carries out the delivery) may receive it from that operator to reach your address. Our operations staff also view it, on OpenStreetMap and Google Maps maps.

You can withdraw the permission in Android or iOS settings; that stops new readings of your location, but does not erase the points already saved. When you delete your account we erase the coordinates of your addresses and those of the delivery address saved in each shipment. The copy of the delivery data recorded when it was transmitted to manage each shipment is not erased automatically: it keeps the address, the contact details and the point (its coordinates and the map link) in the internal history of the shipment until you request its erasure at soporte@depaso.app. Backups made before the deletion keep that data until they are renewed.