Privacy Policy
Last Updated · 10 Sept. 2026
1. Introduction
Welcome to Rushbox. This Privacy Policy ("Policy") explains how Rushbox ("we," "us," "our," or "the Company") collects, uses, discloses, and protects information about you when you use our delivery routing platform, including our website at https://rushboxapp.com, mobile applications for iOS and Android, developer API, site-builder plugins, MCP endpoint for AI agents, and any related services (collectively, the "Services").
Rushbox is a delivery routing platform that identifies the best courier for every specific address and enables businesses to offer delivery anywhere globally. We operate across Nigeria, Kenya, and Ghana, with plans for continued expansion across African markets and international courier network integrations.
By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Policy, please do not access or use our Services.
This Privacy Policy applies to:
- Merchants and business users who book deliveries through Rushbox
- Developers who integrate with our REST API
- Courier partners who use Rushbox for Couriers software
- End customers whose deliveries are routed through our platform
- Visitors to our website and users of our mobile applications
- AI agents and automated systems that interact with our MCP endpoint
2. Information We Collect
2.1 Information You Provide Directly
Account Information
When you create an account with Rushbox, whether as a merchant, developer, courier partner, or individual user, we collect information such as:
- Full name (individual or business representative)
- Business name and registration details
- Email address
- Phone number
- Physical address
- Password and authentication credentials
- Profile photograph (optional)
- Business type and industry
- Tax identification numbers (where applicable)
- Bank account or payment details for courier partners and merchants receiving payouts
Delivery Information
When you book a delivery through Rushbox, we collect:
- Pickup address and location details
- Drop-off address and location details
- Package dimensions, weight, and description
- Package value and contents category
- Special handling instructions
- Recipient name and contact information
- Delivery preferences and scheduling information
- Proof of delivery documentation (signatures, photographs)
Payment Information
When you make payments through Rushbox, we collect:
- Payment method details (card numbers, mobile money accounts, bank transfers)
- Billing address
- Transaction history
- Payment confirmation and receipt information
We do not store complete payment card numbers on our servers. Payment processing is handled by PCI-DSS compliant third-party payment processors.
Communication Information
When you contact us for support, sales inquiries, partnership discussions, or legal matters, we collect:
- Correspondence content (emails, chat messages, phone call recordings)
- Contact preferences
- Feedback and survey responses
- Complaint and dispute details
Developer and API Information
When you integrate with our REST API, we collect:
- API key and authentication credentials
- Application name and description
- Integration endpoints and webhook URLs
- Usage logs and request data
- Technical contact information
Courier Partner Information
When you partner with Rushbox as a courier company, we collect:
- Company registration and licensing documents
- Fleet information (vehicle types, capacities, counts)
- Driver information (names, contact details, identification documents, licenses)
- Service coverage areas and capabilities
- Performance metrics and delivery history
- Insurance and compliance documentation
- Banking details for settlement and payouts
2.2 Information Collected Automatically
Device and Technical Information
When you access our Services, we automatically collect:
- Device type, model, and manufacturer
- Operating system and version
- Browser type and version
- IP address and approximate location
- Device identifiers and advertising identifiers
- Screen resolution and display settings
- Language preferences
- Time zone settings
Usage Information
We collect information about how you interact with our Services, including:
- Pages viewed and features used
- Search queries and filters applied
- Booking patterns and preferences
- Click-through rates and navigation paths
- Session duration and frequency
- Error logs and crash reports
- API call patterns and volumes
Location Information
For certain features, we collect:
- GPS coordinates from mobile devices (with your consent)
- Approximate location derived from IP address
- Pickup and drop-off location history
- Real-time location during active deliveries (for couriers)
Cookies and Similar Technologies
We use cookies, web beacons, pixels, and similar tracking technologies to:
- Maintain session state and authentication
- Remember preferences and settings
- Analyze usage patterns and trends
- Deliver personalized content and recommendations
- Measure advertising and marketing effectiveness
- Prevent fraud and enhance security
You can control cookie preferences through your browser settings. However, disabling certain cookies may limit functionality of our Services.
2.3 Information from Third Parties
Site-Builder Platforms
When you install Rushbox plugins on Shopify, WooCommerce, or similar platforms, we receive:
- Store information and configuration
- Order details and customer information necessary for delivery routing
- Product information relevant to shipping
- Platform authentication tokens
Payment Processors
We receive transaction confirmations, payment status updates, and fraud alerts from payment processors.
Courier Partners
We receive delivery status updates, proof of delivery documentation, and performance data from courier partners.
Identity Verification Services
We may use third-party services to verify identity, business registration, and compliance status.
Public Sources
We may collect publicly available information, including:
- Public courier reviews and ratings
- Business registration databases
- Social media profiles (for marketing and verification purposes)
- News articles and press mentions
3. How We Use Your Information
3.1 Providing and Improving Our Services
We use collected information to:
- Route deliveries to the optimal courier based on our proprietary algorithm
- Process bookings, payments, and refunds
- Track deliveries in real-time and provide status updates
- Facilitate communication between merchants, couriers, and recipients
- Handle customer support requests and resolve disputes
- Process insurance claims and delivery failure resolutions
- Improve our routing algorithm through performance data analysis
- Develop new features and enhance existing functionality
- Conduct structured test deliveries and performance calibration
- Personalize user experience and recommendations
3.2 Communication
We use your information to communicate with you about:
- Account notifications and security alerts
- Booking confirmations and delivery updates
- Payment receipts and invoices
- Service announcements and maintenance schedules
- Policy updates and legal notices
- Marketing and promotional content (with your consent)
- Survey requests and feedback solicitation
- Response to your inquiries and support requests
You may opt out of marketing communications at any time by following unsubscribe instructions or contacting us directly. Transactional and service-related communications cannot be opted out of while you maintain an account.
3.3 Safety, Security, and Compliance
We use information to:
- Verify identity and prevent fraud
- Detect and prevent unauthorized access
- Monitor for suspicious activity and security threats
- Enforce our Terms & Conditions
- Comply with legal obligations and regulatory requirements
- Respond to legal requests and court orders
- Protect the rights, property, and safety of Rushbox, our users, and the public
- Conduct risk assessments and audits
3.4 Business Operations
We use information for:
- Analytics and business intelligence
- Financial reporting and accounting
- Vendor and partner management
- Strategic planning and decision-making
- Mergers, acquisitions, or asset sales (with appropriate protections)
- Quality assurance and performance monitoring
3.5 AI and Automated Processing
As a technology company, we use automated processing and artificial intelligence to:
- Optimize courier selection and routing decisions
- Predict delivery times and costs
- Detect anomalies and potential issues
- Improve our machine learning models
- Power our MCP endpoint for AI agent interactions
- Enhance customer support through automated responses
Our routing algorithm continuously learns from delivery outcomes to improve accuracy and reliability. This processing uses aggregated and anonymized data where possible.
4. Legal Basis for Processing
We process personal information based on the following legal grounds:
Contractual Necessity
Processing necessary to perform our contract with you, including providing delivery services, processing payments, and maintaining your account.
Legitimate Interests
Processing necessary for our legitimate business interests, including improving our services, preventing fraud, ensuring security, and conducting marketing (where not overridden by your rights).
Legal Obligation
Processing necessary to comply with applicable laws, regulations, and legal processes in Nigeria, Kenya, Ghana, and other jurisdictions where we operate.
Consent
Processing based on your explicit consent, such as for marketing communications or location tracking. You may withdraw consent at any time.
Vital Interests
Processing necessary to protect life or physical safety in emergency situations.
5. Information Sharing and Disclosure
5.1 Courier Partners
To fulfill deliveries, we share necessary information with courier partners, including:
- Pickup and drop-off addresses
- Package details and special instructions
- Recipient name and contact information
- Delivery preferences and scheduling
Courier partners are contractually obligated to use this information only for completing the delivery and maintaining confidentiality.
5.2 Merchants
For deliveries booked on behalf of merchants, we share:
- Delivery status and tracking information
- Proof of delivery documentation
- Performance metrics and analytics
- Issue reports and resolution outcomes
5.3 Service Providers
We engage third-party service providers who may access information to perform services on our behalf, including:
- Cloud hosting and infrastructure providers
- Payment processors and financial institutions
- Analytics and business intelligence providers
- Customer support and communication platforms
- Identity verification and fraud prevention services
- Marketing and advertising partners
- Legal, accounting, and consulting professionals
These providers are bound by contractual obligations to protect information and use it only for specified purposes.
5.4 Business Transfers
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, information may be transferred as part of the transaction. We will notify you of any such change and provide choices regarding your information.
5.5 Legal Requirements
We may disclose information when required by law or in response to:
- Court orders, subpoenas, or legal processes
- Regulatory inquiries or government requests
- Law enforcement investigations
- National security or public safety requirements
- Protection of our legal rights or defense against claims
5.6 With Your Consent
We may share information with third parties when you have given explicit consent or directed us to do so.
5.7 Aggregated and Anonymized Data
We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you for:
- Industry analysis and research
- Marketing and promotional purposes
- Improving our services and algorithms
- Public reporting and thought leadership
6. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. Retention periods vary based on:
Account Information
Retained while your account is active and for a reasonable period thereafter to comply with legal obligations and resolve disputes.
Delivery Records
Retained for a period necessary to handle disputes, process refunds, and maintain business records, typically up to 7 years.
Payment Information
Retained as required by financial regulations and tax laws.
Communication Records
Retained for customer service quality and legal compliance purposes.
Usage Data
Retained in aggregated or anonymized form for analytics and improvement purposes.
Courier Performance Data
Retained to maintain routing algorithm accuracy and quality assurance.
When information is no longer needed, we securely delete or anonymize it in accordance with our data retention policies.
7. Data Security
We implement appropriate technical, administrative, and physical safeguards to protect information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest
- Secure authentication and access controls
- Regular security assessments and penetration testing
- Employee training on data protection
- Incident response and breach notification procedures
- Vendor security assessments
- Physical security measures at our facilities
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.
8. Your Rights and Choices
Depending on your jurisdiction, you may have certain rights regarding your personal information:
8.1 Access and Portability
You may request access to the personal information we hold about you and request a copy in a portable format.
8.2 Correction
You may request correction of inaccurate or incomplete personal information.
8.3 Deletion
You may request deletion of your personal information, subject to legal retention requirements and legitimate business needs.
8.4 Restriction and Objection
You may request restriction of processing or object to certain processing activities, including direct marketing.
8.5 Withdrawal of Consent
Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
8.6 Non-Discrimination
We will not discriminate against you for exercising your privacy rights.
To exercise these rights, please contact us at corporate@rushboxapp.com. We will respond to requests within the timeframe required by applicable law. We may need to verify your identity before processing requests.
9. International Data Transfers
Rushbox operates across Nigeria, Kenya, Ghana, and potentially other jurisdictions. Your information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have different data protection laws.
When transferring information internationally, we implement appropriate safeguards, including:
- Standard contractual clauses approved by relevant authorities
- Binding corporate rules for intra-group transfers
- Adequacy determinations where applicable
- Other lawful transfer mechanisms
10. Children's Privacy
Our Services are not intended for children under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without appropriate consent, we will take steps to delete it promptly.
11. Third-Party Links and Services
Our Services may contain links to third-party websites, applications, or services. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:
- Posting the updated Policy on our website
- Sending email notification to registered users
- Providing in-app notification
Your continued use of our Services after the effective date of an updated Policy constitutes acceptance of the changes.
13. Contact Us
For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Rushbox
- Email: corporate@rushboxapp.com
- Support: support@rushboxapp.com
- Website: https://rushboxapp.com
Download the app!
Join 8K+ Rushbox app users in Nigeria 🇳🇬 and soon Africa 🛵 🌍. Be part of our early beginning!.❤️
App store
Play store