1. Introduction
DistributeIQ (“we”, “us”, or “our”) is a distribution management platform operated by The Stack Hub Pvt Ltd. We build software that helps FMCG brands manage orders, trips, invoicing, payments, and distributor relationships.
This Privacy Policy applies to information we process when you access the DistributeIQ web application, mobile apps, or any related APIs. It is written in line with India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and aligns with comparable privacy frameworks such as the GDPR.
2. Information We Collect
We collect only the data needed to run the platform you signed up for:
a. Account & Identity Information
- Name, email address, and phone number
- Role (Admin, Supervisor, Executive, Distributor, Driver, Accountant)
- Company affiliation and franchise/brand assignment
- Authentication credentials (managed by our auth provider, Clerk)
b. Business & Operational Data
- Orders, invoices, purchase bills, payments, returns, and credit notes
- Inventory movements, stock adjustments, and trip logs
- Distributor and supplier records, credit limits, and ledger entries
- GSTIN, PAN, FSSAI, Shop Act, and Aadhaar references stored as KYC
- Uploaded documents, signatures, and photographic proof of delivery
c. Device & Usage Data
- IP address, browser/device type, OS version, and app version
- Access timestamps, request paths, and error/audit logs
- Approximate or precise GPS location for driver check-ins and proof of delivery (only while the driver app is in use)
d. Communications
- One-time passwords (OTPs) sent via SMS for sign-in and verification
- Support messages you send to our team
We do not knowingly collect financial card details, health data, or any special-category sensitive personal data.
3. How We Use Your Information
- Provide, operate, and secure the DistributeIQ platform
- Authenticate users and prevent unauthorized access
- Generate GST-compliant invoices, statements, and ledger reports
- Process orders, deliveries, payments, and returns
- Send transactional SMS/OTP and in-app notifications
- Produce analytics and insights for the companies you work with
- Diagnose errors, maintain service health, and protect against abuse
- Comply with tax, accounting, and other legal obligations
We do not use your data for advertising, profiling for unrelated purposes, or to train third-party machine-learning models.
4. Legal Basis for Processing
- Performance of contract — to deliver the service you or your employer has subscribed to.
- Legitimate interest — to keep the platform secure, reliable, and free from abuse.
- Legal obligation — to meet Indian tax, accounting, and regulatory requirements (for example, GST record-keeping).
- Consent — where required, for example before sending optional communications or accessing device location.
6. Data Retention
We retain personal data only as long as it is needed for the purposes above, or as required by law:
- Account data is retained while your account is active and for up to 90 days after closure to allow recovery and dispute handling.
- Invoices, ledgers, and tax-related records are retained for the period required by Indian tax law (typically 8 years).
- Audit logs and backups are retained for a rolling period not exceeding what is required for security and reliability.
When data is no longer needed, we delete it or irreversibly anonymize it.
7. Security
We take reasonable and appropriate safeguards, including:
- TLS/HTTPS encryption for all traffic in transit
- Encryption at rest for databases and object storage
- Role-based access control and least-privilege principles
- Audit trails for sensitive actions
- Regular dependency updates and code reviews
No online service can be perfectly secure. If we become aware of a data breach affecting your information, we will notify you and the appropriate authorities as required by law.
8. Your Rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data, subject to legal retention requirements
- Withdraw consent where processing is based on consent
- Receive a copy of your data in a portable format
- Nominate a representative to exercise these rights on your behalf
- Lodge a complaint with the Data Protection Board of India
To exercise any of these rights, email admin@distributeiq.com. We will respond within the timelines required by applicable law.
10. Children’s Privacy
DistributeIQ is a B2B platform intended for business users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us information, please contact us and we will delete it.
11. International Transfers
Our primary infrastructure is hosted in India. Some of our vendors (for example, Clerk and Vercel) may process data in other countries. Where such transfers occur, we rely on appropriate safeguards such as standard contractual clauses and the vendor’s own compliance certifications.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you through the application or by email. Your continued use of DistributeIQ after an update means you accept the revised policy.
13. Contact & Grievance Officer
For any questions, requests, or concerns about this policy or your data, reach out to our Grievance Officer:
The Stack Hub Pvt Ltd
admin@distributeiq.comWe aim to acknowledge every request within 7 business days and resolve it within the timelines required by law.