Privacy Policy

1. Who we are

DistrX.io is a wholesale distribution ERP operated by DistrX.io. This policy explains what data we handle on this website and in DistrX.io, how we use it, who we share it with, and the choices you have. It should be read together with our Terms of Service.

Three kinds of people meet DistrX.io. Visitors to this website, including people who ask for a demo. Distributors and their staff, who use DistrX.io to run their business; for their account details we decide how the data is used. A distributor’s own customers and vendors, including people who sign in to its ordering portal. They are that distributor’s contacts, not ours. The distributor decides what is collected and why, and we handle that data on its behalf and on its instructions.

2. Data we handle

• Demo requests and live chat: what you enter in the demo form, and the messages you send in the chat on this website, including your name, company, email and phone if you give them. The chat is also told the address and title of the page you are on, your window’s width, how far you have scrolled and whether the pointer leaves the window, so our team can see where you are when they reply.
• Account and staff data: the company’s name, addresses and contact details; each user’s name, email address, phone and role; sign-in credentials, with passwords stored only as hashes; and sign-in records such as the time, IP address and device.
• Business records: products, prices and costs, stock and its movements, lots, orders, invoices, payments, purchase orders, routes and reports.
• Customer and vendor data, on a distributor’s behalf: business names, contact names, email addresses, phone numbers, delivery addresses, terms, credit limits, balances, license and tax-exemption certificate details, and the people who sign in to the ordering portal.
• Proof of delivery: signatures, photos, the time of delivery and, when a driver completes a stop, the location of the device at that moment.
• Device permissions in the mobile apps: the camera, only when you scan a barcode or take a delivery photo, and the device’s location, only at the moment a driver completes a stop. Each is asked for by the phone first and can be turned off in its settings. The apps do not track location in the background.
• Usage data: feature usage, device and browser information, and application logs used to keep the service secure and reliable.

3. How we use data

• to answer demo requests and talk with you about DistrX.io;
• to deliver the service: taking and filling orders, keeping stock, routing deliveries, invoicing, syncing to accounting and producing reports;
• to secure the service: authentication, the audit trail of who changed what, abuse prevention and debugging;
• to communicate with distributors about the service, including important notices and product updates you can opt out of;
• to improve DistrX.io using aggregated, de-identified usage patterns.

We do not sell personal data, we do not use a distributor’s customer data to market to those customers, and we never show one distributor’s data to another.

4. Who we share data with

Running the service needs a few trusted providers. Data is shared only as far as each one needs:

• Orbit: our own customer-messaging service at orbit.distrx.io runs the demo form and the live chat on this website, and keeps those conversations.
• App stores: Apple and Google deliver the rep and driver apps and handle their downloads and updates under their own policies.
• Email: the recipient’s address and the content of an invoice, statement, order confirmation or sign-in code go to the email service that delivers it.
• Accounting: if a distributor connects its accounting software, the invoices, payments, credit memos and bills it syncs go to that software’s provider.
• File storage: product photos, signatures, delivery photos and documents are kept in object storage.
• Infrastructure: the hosting, database and monitoring providers that run the service.

We may also disclose data when the law requires it, or to protect the rights and safety of our users and the service. Each provider handles data under its own contractual safeguards.

5. Storage and security

Data is stored on managed infrastructure and encrypted in transit. Each distributor’s data is kept apart from every other’s on every read and write, and portal users only see their own company’s account. Staff see only what their role allows. When a member of our team works inside a distributor’s account to help, it is recorded. No system is perfectly secure, but we design for least privilege and review access regularly. If we learn of a breach affecting your data, we will notify you without undue delay.

6. Retention and deletion

We keep data for as long as a distributor’s subscription is active or as needed to provide the service. Invoices and tax records are kept because a business is usually required to keep them. When a subscription ends, the distributor has 30 days to export its data, after which we delete it, except where the law requires us to keep it. Deleted data leaves our backups as they expire on their rotation schedule. Demo requests are kept as long as we are in conversation with you, and deleted on request.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, restrict or delete personal data held about you, and to object to certain processing. If you are a customer or vendor of a distributor that usesDistrX.io, that distributor controls your data. Ask it first, and we will help it honor your request. Otherwise, email distrx.io@gmail.com, or see deleting an account or its data.

8. Cookies and storage on your device

This website stores your light or dark theme choice in your browser, and the live chat keeps what it needs to continue a conversation. It uses no advertising cookies. The details are in our Cookie Policy. DistrX.io uses a small amount of browser storage to keep you signed in and remember preferences, and the rep and driver apps keep a copy of the data they need on the phone so they work without a connection. We do not use third-party advertising cookies or cross-site trackers.

9. International transfers

Our providers may process data in countries other than yours. Where that happens, transfers rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

10. Children

DistrX.io is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us data, contact us and we will delete it.

11. Changes to this policy

We may update this policy as the product or the law changes. Material changes are announced in the product or by email before they take effect, and the “Last updated” date above always reflects the current version.

12. Contact

Privacy questions, requests or concerns: distrx.io@gmail.com.