Your data at SeeBuyGet

SeeBuyGet keeps what it needs to carry a parcel and to show who handled it at each step. This page says what that is, who can see it, who else handles it, how long it is kept and what you can do.

What SeeBuyGet keeps

• For a parcel, SeeBuyGet keeps the sender’s and the receiver’s phone numbers, the two shops, every step with its time, and the photos taken at each hand-over.
• For a shop, driver, sort hub or fleet that works with SeeBuyGet, SeeBuyGet keeps the name, national ID number and phone number of the person responsible, and the papers checked before the first parcel.
• For an account, SeeBuyGet keeps the phone number or email address it signs in with, the phones and browsers it was confirmed on, and the day it last signed in.
• When you sign up, SeeBuyGet keeps which versions of its terms of use, of this page and of the cookie statement you agreed to — the general ones, and your country’s own where it has any — and when, and again each time you agree to a new version.
• The notices in your SeeBuyGet app — a parcel’s steps, word about your account, a new version of these pages — are kept with your account.
• During a shift, SeeBuyGet keeps a driver’s latest position, each new one replacing the last.
• For freight, SeeBuyGet keeps the consignment note: the sender, the consignee, the goods, the seals and who received them.
• When you write to SeeBuyGet, it keeps your email address and your message, to answer you.
• A conversation between two parties in a SeeBuyGet app is kept as it was written: nothing in it is edited or deleted.

What SeeBuyGet does not do

• SeeBuyGet shows no advertising, and no analytics or tracking script runs on its pages or in its apps.
• SeeBuyGet’s emails carry no open or click tracking.
• SeeBuyGet sends no text about a parcel. A text from SeeBuyGet only ever carries a sign-in code, or tells an old payout number that it was replaced.
• A photo taken in a SeeBuyGet app has its location and phone details removed on the phone, before it is sent.

How it is protected

• The names, national ID numbers and phone numbers of the people who work with SeeBuyGet are encrypted in its database (AES-256), and each time one is opened, a record of the opening is written first.
• PINs and passwords are kept only as a one-way hash: nobody at SeeBuyGet can read them.
• A SeeBuyGet PIN works only on a phone or browser that first signed in with a code sent to your number.
• Too many wrong tries lock a SeeBuyGet sign-in, for longer each time: 15 minutes, then an hour, 6 hours and 24 hours.
• Every SeeBuyGet page and app is served only over HTTPS.
• Every hand-over of a SeeBuyGet parcel is chained to the one before it by a fingerprint, so a record changed afterwards shows.
• The rest — parcels with their phone numbers, photos, messages — is kept on the SeeBuyGet server without that extra encryption, reachable only through the sign-ins and staff roles on this page.

Who can see it

• You see your own account, and your own parcels, in your SeeBuyGet app.
• The shop that takes in or hands out a SeeBuyGet parcel receives that parcel’s record, with the phone numbers on it.
• A SeeBuyGet driver sees the loads they carry, and the consignment notes that go with them.
• SeeBuyGet staff see what their role needs — support, checking papers, money — and every record a staff member opens by name or number is noted with who opened it.
• Some SeeBuyGet staff actions take two people, one asking and a different one approving: creating a staff account, moving an account to another number, and publishing a new version of this page among them.
• A conversation in a SeeBuyGet app can be read by its two parties and nobody else, SeeBuyGet staff included, unless one of them reports or shares a message.
• A fleet, a business or an online store sees its own drivers, loads or orders in SeeBuyGet, and can have them sent on to systems of its own.

Other companies that handle it

• Cloudflare carries every SeeBuyGet page and app between your phone and the SeeBuyGet server, and protects the site from attacks; what you send, photos included, passes through it.
• DigitalOcean rents SeeBuyGet the server its database and photos are kept on, and holds its backups.
• When SeeBuyGet sends an email — a sign-in code, a password reset, a notice about your account, an answer to your message, or word that an order is on its way — it goes through ZeptoMail, by Zoho.
• When SeeBuyGet texts a sign-in code, it goes through Twilio, and only to a number in a country where SeeBuyGet runs.
• A SeeBuyGet notification goes through your phone’s own push service — Google, Apple or Microsoft — encrypted, so that the service cannot read it.
• The maps in SeeBuyGet apps are drawn from OpenStreetMap, which sees your internet address and the area on the screen.
• When a payment to SeeBuyGet is made by M-Pesa, Safaricom receives the phone number and the amount.
• When a dispatcher asks the SeeBuyGet fleet planning adviser something, the question and the loads it is about — plates, shipper names, places, weights and times, never a phone number — go to Claude, by Anthropic.
• An address typed to find the nearest SeeBuyGet shops — yours, a receiver’s, or one a store or a shop types for its customer — is looked up on the SeeBuyGet server and by OpenStreetMap’s address service, which sees the address and the SeeBuyGet server’s internet address, not yours; it is kept with no account. A place tapped on the map, or your phone’s own position, stays on your phone.
• Cloudflare tells the SeeBuyGet server which country your internet address is in. It only chooses the first country code shown beside a phone number box, which you can change, and nothing keeps it.

How long it is kept

• Photos of a hand-over are deleted 90 days after the parcel’s journey ends.
• Photos added to a dispute are deleted 180 days after the dispute is settled.
• Photos from a face-and-ID check are deleted 30 days after the decision.
• An ID document is kept as long as the account; one that was replaced is deleted 30 days later.
• When a photo is deleted, a note that it existed stays with the record — not the photo.
• A SeeBuyGet consignment note is deleted 365 days after its load is finished, with a warning 30 days before; its fingerprint stays, so a copy can still be checked.
• A message to SeeBuyGet is deleted, with its email address, 180 days after it is closed.
• A SeeBuyGet sign-in code lasts 10 minutes by text and 15 minutes by email; a password-reset link lasts 30 minutes.
• A phone or browser not used for 90 days stops being one your SeeBuyGet PIN works on.
• Parcels and conversations have no deletion date: SeeBuyGet keeps them, as other people’s records too. An account is kept until its owner closes it, which they can once it has gone four years without a sign-in; its personal details are then removed, and parcels and hand-overs keep “closed account” where the person was.
• Which versions of these documents you agreed to, and when, is kept as long as the account; so are the notices in your app.
• A deleted record can remain in a backup of the SeeBuyGet database until that backup is replaced by a newer one.

What you can do

• In your SeeBuyGet app, under “Settings”, you can change your PIN or password, your recovery email and your phone number.
• Under “Settings › Phones and browsers” you can see where your SeeBuyGet PIN works, and forget this phone or all the others.
• A change of phone number can be undone for 24 hours, and a change of recovery email is told to the old address.
• SeeBuyGet notifications can be turned off on each phone.
• A shop, online store or business can download its own SeeBuyGet records, and have a copy sent to storage of its own.
• Under “Settings › Mute my account” you can rest your SeeBuyGet account: nothing new reaches it — no notification on your phone, no email beyond codes and your account’s safety, no new work — until you unmute it. Nothing is deleted.
• A SeeBuyGet account that has gone four years without a sign-in can be closed by its owner, under “Settings › Close my account”, once nothing is open: SeeBuyGet tells them when it can be. Closing removes their name, ID number, phone number, email and ID photos. To ask what SeeBuyGet holds about you, or to have it corrected, write to us and choose “My data, or closing my account”.

When this page changes

• Every version of this page is kept, with its date and what changed, and can be read back here.
• When a new version is published, you are told in your SeeBuyGet app, with what changed. Where a country’s law asks for more, that country has a text of its own as well, listed on this page.