Last updated: August 2026
Drix is a courier management platform operated by SpaGreen Creative, based at Mirpur DOHS, Dhaka, Bangladesh. This policy explains what personal data we collect through drix.app and the Drix platform, why we collect it, how long we keep it, and the choices you have. It applies to visitors to this website and to the courier companies, merchants, and riders who use Drix.
1. Data we collect from website visitors
When you submit the contact form, we collect the name, email address, phone number, and message you enter. We use these solely to answer your enquiry and to follow up about Drix. The submission is delivered to our sales inbox by email; we do not sell it, rent it, or pass it to advertisers.
If you book a demo, the scheduling is handled by Calendly, which collects the name, email address, and meeting time you provide to it under its own privacy policy. If you contact us on WhatsApp, that conversation is governed by WhatsApp's privacy policy.
Our web server and hosting provider record standard technical logs — IP address, browser and device type, referring page, and timestamps — for security, abuse prevention, and to keep the site running.
2. Analytics and cookies
We use Google Tag Manager and Google Analytics to understand which pages are read and which calls to action are used, and Vercel Analytics for aggregate traffic measurement. These tools set cookies or similar identifiers and process usage data such as pages viewed, approximate location derived from IP address, and device type. We use this only in aggregate to improve the site — we do not use it to build advertising profiles of individuals.
You can block or delete cookies in your browser settings, or install Google's opt-out add-on. Blocking them does not stop you from using the site.
3. Data processed inside the Drix platform
When a courier company uses Drix to run its operation, that company decides what data goes into the system and is the data controller for it. SpaGreen Creative acts as a data processor, handling that data on the courier company's instructions. Typically this includes:
- Parcel records — recipient name, delivery address, phone number, parcel contents description, and COD amount.
- Merchant accounts — business name, contact details, pickup addresses, and payout details.
- Rider accounts — name, phone number, assigned parcels, delivery status updates, cash collected, and, where the courier company enables it, location reported by the rider app during shifts.
- Staff accounts — name, role, branch, and the audit trail of actions taken in the panel.
If you are a parcel recipient, merchant, or rider and want your data corrected or deleted, contact the courier company you dealt with first — they control that record. We will support them in acting on your request.
4. Why we are allowed to process this data
We process contact-form data on the basis of your request to be contacted, platform data under our contract with the courier company operating the account, and technical logs and analytics under our legitimate interest in keeping the service secure and usable. Where local law requires consent for analytics cookies, we rely on the choice you make in your browser.
5. Who we share data with
We share personal data only with service providers who help us operate: our hosting and infrastructure provider, our transactional email provider, our analytics providers, and our scheduling provider. Each processes data on our instructions. We also disclose data where a court, regulator, or law of Bangladesh requires it. We never sell personal data.
6. How long we keep it
Contact-form enquiries are kept in our sales inbox for up to 24 months from your last message, then deleted. Technical logs are kept for up to 12 months. Data inside a customer's Drix account is retained for as long as that account is active and deleted or returned within 90 days of the account closing, unless the customer asks for a different arrangement in writing.
7. Security
Drix runs over encrypted HTTPS connections. Access inside the platform is role-based, so staff see only what their role allows, and administrative actions are recorded in an audit trail. Customer deployments are kept in isolated, access-controlled environments with regular backups. No system is perfectly secure, but if a breach affects your personal data we will notify the affected account owners without undue delay.
8. Your rights
You can ask us to give you a copy of the personal data we hold about you, correct it if it is wrong, delete it, or stop using it for a particular purpose. You can also withdraw consent at any time where we relied on it. Email info@spagreen.net and we will respond within 30 days. If we cannot act on a request — for example because a courier company controls the record — we will tell you who to approach.
9. Children
Drix is business software and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child's data has reached us, email us and we will remove it.
10. International transfers
Our hosting, email, analytics, and scheduling providers operate servers outside Bangladesh, so your data may be processed abroad. We use providers that apply recognised safeguards for such transfers.
11. Changes to this policy
We may update this policy as the product and the law change. The "last updated" date above always reflects the current version. Material changes affecting existing customers are communicated by email.
12. Contact us
Questions about this policy or about your data go to SpaGreen Creative, Mirpur DOHS, Dhaka, Bangladesh — info@spagreen.net or +880 1322-827799.