1. Information We Collect
Account information
Name, email address, phone number, job details and organization, provided when you sign up, are invited, or update your profile.
Recipient information
Names, other names people go by, email addresses, phone numbers, departments and delivery locations of the people your organization receives parcels and mail for. Organizations may add this themselves, import it, or sync it from their own directory.
Parcel information
Tracking numbers, carriers, senders, return addresses, weights, reference numbers, storage locations, notes, and photos of shipping labels. When a parcel is handed over we record who received it, who handed it over and when, and may record a signature and a delivery photo. Staff may also add condition photos or short videos of a parcel and attach documents such as packing lists, whose text is read so they can be searched.
Mail information
Photos of envelopes and the details read from them (sender, recipient and addresses), scans of mail contents when a recipient asks for one, and the requests recipients make, such as scan, forward or shred.
Visitor information
When the Visitor Management add-on is used: visitors' names, email addresses, phone numbers, companies, the person they are visiting, visit times, answers to check-in questions, signed agreements and their signatures, and a photo taken at check-in. If an organization turns on ID scanning, a photo of the visitor's ID is used to read only the name and the type of document. The ID image is not stored, and we do not read or keep the date of birth, ID number or address.
Help and support
Questions you ask our in-app help assistant, the page you asked from, whether an answer helped, and the service requests you send us, including any screenshots you attach.
Website inquiries
Information you give us when you book a demo, contact us or apply to become a partner, such as your name, email address, company and message.
Device and usage information
IP address, browser and device type, operating system, app version, push notification tokens, sign-in activity and error reports, collected automatically when you use the Service.
Face ID and fingerprint
The mobile apps can be unlocked with Face ID or a fingerprint. This is handled entirely by your device. We never receive or store biometric data.
Payment information
Billing is handled by our payment processor. We never store full credit or debit card numbers on our servers.
2. How We Use Information
- Providing and operating the Service, including receiving and delivering parcels, handling mail, and checking visitors in and out
- Sending email, SMS and push notifications, such as parcel arrivals, mail requests and visitor arrivals
- Keeping a record of each handover, so an organization can show who received a parcel and when
- Producing reports and analytics for your organization
- Processing billing and managing subscriptions
- Answering help questions and support requests, and improving our help articles
- Keeping the Service secure, investigating misuse, and fixing errors
- Complying with legal obligations
3. AI Features
Some features use artificial intelligence. AI Smart Scan sends a photo of a shipping label to an AI model to read the carrier, tracking number, recipient and other details. Mail scanning does the same for envelopes, and ID scanning does the same for the name on an ID. The help assistant and parcel search send your question, together with our help articles or the relevant parcel details, to an AI model to write an answer.
These requests go to third-party AI model providers, which receive only what is needed for that request. We do not use your data to train AI models.
5. Data Retention
We keep information for as long as your organization's account is active or as needed to provide the Service. Organizations can choose how long visitor records and mail are kept. When that time passes, the records are removed together with their photos, signatures and scans. Visitors who are still signed in are never removed, so the building's emergency list stays accurate. A short entry noting that a mail item existed and was destroyed stays in its chain of custody.
When an organization closes its account, it has 30 days to export its data. After that, we delete its records and stored files, including photos, signatures, scans and logos, in line with applicable law. Backups are kept for up to seven days before they are overwritten.
6. Data Security
Information is encrypted in transit and at rest. Each organization's data is kept separate by database rules that check every request, and photos, signatures and scans are kept in private storage. Access is controlled by roles, sign-ins can be protected with two-factor authentication, and sign-in activity is logged. No system is completely secure, but we use commercially reasonable safeguards to protect your information. See our Security page for more.
7. Our Customers' Data
Organizations that use Receivly decide what information about their recipients and visitors to put into the Service and how long to keep it. For that information, we act on the organization's instructions. If you are a recipient or visitor and want to access, correct or delete your information, please contact the organization first. We will help them respond.
8. Your Rights
- Access, correct or delete your personal information
- Export your data in a portable format
- Opt out of non-essential communications
- Close your account at any time
To exercise any of these rights, please contact us.
9. California Residents (CCPA)
If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of the sale of your personal information. We do not sell personal information. We will not discriminate against you for exercising your CCPA rights.
10. Children's Privacy (COPPA)
The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected such information, we will promptly delete it.
12. SMS Communications and Data Sharing
We respect your privacy. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
13. International Users
The Service is operated from the United States. If you access the Service from outside the US, your information will be transferred to, processed, and stored in the United States, which may have different data protection laws than your jurisdiction.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected by the "Last updated" date at the top of this page. We encourage you to review this page periodically.
15. Contact Us
If you have any questions about this Privacy Policy, please contact us or visit receivly.io.