Privacy

Operator: Kapeje Solutions Inc. Contact: privacy@kolis.delivery.

You can reach this person for any question, request for access, correction or deletion, or complaint.

We ask for your consent clearly, for each purpose, in plain terms. At sign-up you tick a box to accept the terms and the policy; we keep the version accepted and the date.

Optional features (for example sharing your approximate location or notifications) stay off until you turn them on, and you can withdraw consent at any time.

We do not send any personal information to an artificial intelligence. The service's automated assistance features do not use your personal information, your documents or your delivery data.

• Account: first name, last name if needed, phone number, email, language, country.
• Delivery: pickup and drop-off addresses, parcel description and size, declared value, instructions, delivery code, delivery status.
• Recipient: first name and phone number given by the customer, to notify them and hand over the parcel. The recipient does not need an account.
• Courier: identity, supporting documents in their file, vehicle, payout details, online status, ratings.
• Courier GPS position during a delivery, and approximate location that you choose to share (for example to fill in an address).
• Payment: amounts, wallet balance and movements, payment references. We do not keep your card or mobile account numbers: they stay with the payment provider.
• Support: your messages, photos and evidence sent for a dispute or question.
• Reviews: ratings and comments about a delivery.
• Technical: security logs, IP address, device type, errors.

We do not ask for sensitive data. Please do not write any in free-text fields.

We use your information only for the following purposes:

• creating and managing your account, and identifying you;
• organising, tracking and delivering parcels, and notifying the recipient;
• processing payments and payouts, and keeping our accounting records;
• checking couriers' files (identity, licence, insurance, registration);
• providing support, handling disputes and preventing fraud;
• keeping the service secure and complying with the law.

We do not sell your information. We do not use it for other purposes without your consent.

The customer, recipient and courier see only what is needed for the delivery.

• They see the other person's first name, never their last name.
• They never see the other person's phone number: messages and calls go through Kolis.
• The courier sees the address needed for the current step, not every party's full address in advance.
• The customer and recipient see the courier's position during the delivery only, and not their home address.
• The courier sees the customer's average rating if the app provides it, never private comments.

The courier's position is collected only during a delivery and while online; it is shown to the customer and recipient concerned by that delivery.

Your approximate location is used only if you choose to share it. You can refuse or withdraw it in your device settings.

We keep your information only as long as needed for the purposes for which it was collected, then we destroy or anonymise it.

• Account, deliveries, payments and supporting records: 5 years after the end of the relationship or transaction, unless a longer legal obligation applies.
• Couriers' documents (identity, licence, insurance, registration): for the duration of registration, then 5 years at most.
• Precise GPS position: a short period set in the app, then deletion.
• Security logs: a short period set in the app.

You can ask for earlier deletion, subject to our legal retention obligations.

We use providers that process information for us, under contract and for our purposes only:

• Stripe: card payment processing;
• hosting and database;
• sending emails and text messages;
• maps and routing.

Each provider receives only what it needs.

The AI assistant is turned off by default. It works only if the administration turns it on with its own access key.

We send no personal data to the AI: no name, phone number, address, parcel contents or courier identity.

AI answers are aids. A support person makes the important decisions.

Some providers may process information outside Quebec. Before any transfer, we assess whether the information would receive adequate protection, in particular in light of generally recognised privacy principles, and we put in place a contract that ensures it.

We protect your information with reasonable measures: restricted access, encrypted traffic, stronger authentication for administration, access logging and sensitive documents kept in private storage.

Couriers' documents are visible only to the team authorised to check them.

A privacy incident is any unauthorised access to, use of or disclosure of personal information, its loss, or any other breach of its protection.

We keep an incident register. If an incident presents a risk of serious injury, we notify the Commission d'accès à l'information and the people concerned promptly, within 3 days of becoming aware of the facts where possible, and we take steps to reduce the risk.

You have the right to:

• access the information we hold about you;
• have it corrected if it is inaccurate, incomplete or equivocal;
• withdraw your consent;
• ask that dissemination stop or that information be de-indexed where the law allows;
• ask for its deletion, subject to our legal obligations;
• ask for a copy of your information in a structured, commonly used technological format, where the law provides for it;
• be informed when a decision is based exclusively on automated processing and ask for a review.

Write to privacy@kolis.delivery. We reply within 30 days of receiving a sufficiently precise request.

If you are not satisfied, you can complain to the Commission d'accès à l'information du Québec and, for federal matters, to the Office of the Privacy Commissioner of Canada.

Kolis is not intended for people under 18 and we do not knowingly collect their information. If you think a minor has given us information, write to us: we will delete it.

In Quebec, we comply with the Act respecting the protection of personal information in the private sector (CQLR, c. P-39.1, as amended by Law 25) and, where applicable, the Personal Information Protection and Electronic Documents Act (PIPEDA).

We may update this policy. The update date is at the top of the page. For an important change, we will tell you.

Questions: privacy@kolis.delivery. Other topics: support@kolis.delivery. Legal questions: legal@kolis.delivery.