Privacy Policy

This policy explains what personal information AllRouted collects, why, who it is shared with, and the choices you have. It covers this website, the AllRouted console and its API.

Two kinds of data

Your account information — who you are and how you use AllRouted — is ours to look after, and this policy describes how we do. The operational data you put into the service — your orders, your customers’ names, addresses and phone numbers, your vehicles and drivers — belongs to you. We process it only on your instructions, to run the service for you.

What we collect

• Account details: your name, work email, company name and password (stored only as a one-way hash).
• Billing details: plan, billing name and address, and the last four digits and expiry of your card. The card itself is handled by Authorize.net and never reaches our servers.
• Operational data you enter or import: orders, addresses, time windows, notes, vehicles, drivers, routes, and location and status updates from the devices or integrations you connect.
• Usage and security records: sign-ins, changes made in the console, API requests, IP addresses and browser type. We keep an activity log so you and we can see who changed what.
• Messages you send us through the contact form or by email.

How we use it

• To provide the service: building routes, showing the day as it runs, and keeping your account working.
• To bill you, and to send the emails the service needs, such as address confirmation and account notices.
• To keep the service secure, prevent abuse, and investigate problems.
• To answer your questions and improve the product.

We do not sell personal information, and we do not use your operational data to advertise to anyone.

Who we share it with

Only the service providers we need to run AllRouted, each bound to use it only for that purpose:

• Authorize.net, to process card payments;
• Mailchimp Transactional (Mandrill), to deliver email;
• Cloudflare, which carries traffic to our servers;
• map and geocoding providers, which receive addresses so they can be placed on the map and routed.

We may also disclose information when the law requires it, or to protect the rights and safety of our customers and the public. If AllRouted is ever sold or merged, this policy continues to apply to the data transferred.

Cookies

The console sets a cookie to keep you signed in, and a short-lived one while you sign in with Google. They are needed for the service to work and are not used for tracking. This website uses no advertising or analytics trackers. It loads fonts from Google Fonts, which sees your IP address when it serves them.

Security

Traffic is encrypted in transit, passwords are hashed, and stored secrets such as API keys are encrypted. Access to production systems is limited to the people who run them. No system is perfectly secure; if a breach affects your personal information, we will tell you promptly.

How long we keep it

Account and operational data is kept while your account is open. After it closes, you can ask for an export for 30 days; then it is deleted from the live service, and from backups as they cycle out. Billing records are kept as long as tax and accounting law requires.

Your choices and rights

You can see and correct most of your information in the console. You can also ask us for a copy of your personal information, or to correct or delete it, by writing to [email protected]. Depending on where you live, you may have further rights, such as to object to some processing or to complain to a data protection authority. If you are a customer of one of our customers — for example, someone receiving a delivery — please contact that business first, as it controls your information; we will help it respond.

Children

AllRouted is a business service and is not directed at children.

Changes

We will post any update here with its date and, for material changes, email account owners before they take effect.

Contact

Privacy questions: [email protected], or use our contact form.