1. Who this policy covers
This policy applies to visitors to drove.africa, authorised users of Drove software, people whose information a customer records in Drove, and people who contact us for sales or support. A customer normally decides why its operational and personnel data is used and acts as data controller. Drove processes that data to provide the contracted service.
2. Information Drove may process
- Account details, names, roles, contact information and authentication records.
- Employee, leave, payroll-export, loan, attendance and approval information entered by a customer.
- Producer, customer, supplier, purchase, sales, stock, livestock, food-safety, fleet and fiscal records.
- Device, audit, error, sync, security and support records needed to operate and protect the service.
- Location coordinates when a workflow asks for advisory GPS evidence and the device user grants permission.
- Photographs, documents, barcodes and weights deliberately captured in a workflow.
- Sales enquiries and correspondence sent by email or WhatsApp.
3. Android permissions
The Drove Android app may request camera access to scan barcodes, Bluetooth access to connect compatible scales, and location access where a configured workflow captures location evidence. It uses local device storage and an encrypted credential store to support offline work and secure sign-in. Biometric sign-in is optional and uses the device’s operating-system service; Drove does not receive the user’s fingerprint or face template. The app may download a signed update and hand it to Android’s installer, which always requires the device user’s approval.
4. Why information is used
We use information to provide and secure Drove, authenticate users, synchronise authorised sites, process the customer’s operational instructions, provide backups and support, meet legal or fiscal obligations, investigate faults, and communicate about the service. We do not sell personal information or use customer operational data for advertising.
5. Hosted and on-site data
Web Hosted data runs in Drove-managed infrastructure. On-site Mirrored data is held on the customer’s site server and synchronises with the customer’s authorised HQ environment when connectivity returns. Support personnel access customer data only when needed to provide authorised support, security or recovery work.
6. Sharing and international transfers
Information may be handled by DigitalOcean for Drove-managed application hosting, Cloudflare for this public website and edge security, and the customer’s chosen email, WhatsApp, backup or integration providers. On-site Mirrored data is also held on customer-controlled hardware. The selected application and backup regions are recorded in the customer’s order form. Drove requires processors to protect information and use it only for the contracted purpose.
7. Retention and deletion
Customer records are retained for the subscription term and any legal, fiscal, backup or agreed retention period. Audit and fiscal records may need to be retained after ordinary operational data. When service ends, Drove will provide an agreed export and delete or return personal information after the applicable retention and backup cycle, unless law requires continued retention.
8. Security
Drove uses role-based access, audit records, encrypted transport, protected credentials, backups and site isolation. Customers remain responsible for choosing authorised users, protecting devices and local networks, removing leavers’ access and keeping recovery contacts current.
9. Your choices and rights
Requests to access, correct, restrict or delete information held by a Drove customer should normally be sent to that customer. We assist customers with valid requests. Website and direct-contact requests can be sent to the address above. A person may also contact the Postal and Telecommunications Regulatory Authority of Zimbabwe in its capacity as Data Protection Authority.
10. Website cookies
The current public website does not use advertising cookies or behavioural analytics. Essential hosting and security logs may still record technical request information. If non-essential analytics are introduced, this policy and the site’s consent controls will be updated first.
11. Changes
We may update this policy as Drove, its hosting or applicable law changes. The current version and date will remain available on this page.