Privacy Policy

This Privacy Policy explains how Star Technologies MMC (“Star Technologies”, “Starmile”, “we”, “us” or “our”) collects, uses, shares and protects your personal data when you use the Starmile logistics platform and our mobile applications and websites (together, the “Services”). It has been prepared in accordance with the Law of the Republic of Azerbaijan “On Personal Data” and other applicable data-protection laws.

Please read this policy carefully. By creating an account or using the Services, you acknowledge that you have read and understood it. If you do not agree with this policy, please do not use the Services.

1. Who we are

The Services are operated by Star Technologies MMC, a company registered in the Republic of Azerbaijan (Baku, Azerbaijan). Star Technologies is the data controller responsible for your personal data. Star Technologies develops and operates the Starmile platform, which also powers delivery partners that use Starmile technology; where a partner acts as an independent controller of your data, their own privacy notice will also apply.

For any privacy question or request, contact us at privacy@starmile.io (see Section 17).

2. Products this policy covers

This policy applies to all of our customer- and operations-facing products, including:

• Shop&Ship Cabinet — the customer app and web cabinet for shopping, shipping and tracking parcels (iOS and Android, and on the web).
• Starmile Courier — the courier/driver app for pickups, deliveries and route navigation.
• Starmile Ops — the warehouse/operations scanning app used by our operators.
• Starmile TMS — the transport-management app used by our transport staff and partners.
• Our other websites and consoles, including the public tracking portal and partner/administration consoles.

Some products (Starmile Ops and Starmile TMS) are used by our staff and partners rather than the general public, but this policy describes them for completeness.

3. Personal data we collect

We collect the following categories of personal data.

a) Information you provide

• Account & identity: first name, surname, email address, mobile phone number, password, and (optionally) a profile photo and date of birth.
• Government identification: for cross-border shipments we are legally required to collect your government identification number (e.g. Azerbaijani ID / FIN code), ID card serial number, and, where applicable, tax identification number (VÖEN). This is used to declare your parcels to customs.
• Addresses: delivery and pickup addresses, foreign warehouse suite numbers, and pickup-point (PUDO) selections.
• Shipment details: parcel descriptions and contents, weight and dimensions, declared value, HS (customs) codes, invoices and commercial documents, and tracking numbers.
• Payments & wallet: wallet balance and transaction history. Card payments are processed by our payment providers; we do not store your full card number.
• Communications: the content of messages you send us (for example via the contact or support forms, which may include your name, phone, email, city/branch, tracking number and message).

b) Information we collect automatically

• Device & technical data: IP address, device model and identifiers, operating system, app version, browser type, screen characteristics and language.
• Usage & diagnostics: the screens and features you use, session duration, interactions, and crash and performance diagnostics used to keep the apps stable.
• Location data (only with your permission — see Section 4):
  • In the Shop&Ship Cabinet app, we use your approximate or precise location to suggest the nearest addresses and pickup points and to help you complete delivery details.
  • In the Starmile Courier app, we collect precise location — including in the background while you are on an active delivery route — to enable navigation, live position sharing with the customer and dispatcher, and proof of delivery. Background location is used only while you are performing deliveries.
• Cookies & similar technologies on our websites, used for sign-in sessions, remembering preferences, security and analytics.

c) Camera, photos and scanning

• Camera: to scan parcel barcodes and QR codes, to capture proof-of-delivery photos (courier), and to take a profile picture (customer).
• Photo library / media: to let you choose a profile picture or upload documents and delivery evidence.
• On-device text recognition (OCR): in the Starmile Ops app, text on labels and documents is read on the device to speed up data entry. This processing happens locally on the device.
• Microphone: where an app requests microphone access, it is used only for optional features you actively initiate (for example attaching a voice note); we do not record audio in the background.

Camera, photos, location, microphone and notifications are only accessed after you grant the relevant permission, and you can change your choice at any time in your device settings.

4. Device permissions

The apps request only the permissions they need for the features you use. The table below summarises how each permission is used.

5. How we use your data

We use your personal data to:

• create and manage your account and authenticate you (including one-time-password sign-in);
• provide the Services — process orders, ship, transport, track and deliver your parcels;
• prepare and submit customs declarations for cross-border shipments as required by law;
• process payments, top-ups, refunds and manage your wallet;
• send you transactional messages and notifications about your shipments and account;
• provide customer support and respond to your requests;
• keep the Services secure, prevent fraud and abuse, and debug and improve the apps;
• comply with our legal, tax, customs and regulatory obligations.

6. Legal bases for processing

We rely on the following legal bases:

• Performance of a contract — to deliver the Services you request;
• Legal obligation — for customs declarations, tax and accounting, and other statutory requirements;
• Consent — for optional device permissions (location, camera, notifications) and any marketing communications, which you can withdraw at any time;
• Legitimate interests — to secure the Services, prevent fraud, and improve our products, balanced against your rights.

7. How we share your data

We do not sell your personal data. We share it only as needed to provide the Services and to comply with the law, including with:

• Delivery and logistics partners and carriers that transport and deliver your parcels (in Azerbaijan and in origin/destination countries such as the China–Azerbaijan corridor);
• Customs and government authorities, including the State Customs Committee of the Republic of Azerbaijan and equivalent authorities abroad, to whom we submit the declarations required to clear your cross-border shipments;
• Payment providers that process your payments and refunds;
• Technology service providers that host and operate the platform on our behalf (see Section 8);
• Merchants and partners integrating with the Starmile Partner API, limited to the data needed for your specific shipment;
• Authorities or third parties where required by law, to enforce our terms, or to protect the rights, safety and property of our users, the public or Star Technologies;
• A successor entity in connection with a merger, acquisition or sale of assets, subject to this policy.

8. Third-party services

We use trusted third-party providers that process personal data on our behalf. These include:

• Google / Firebase — push notifications (Firebase Cloud Messaging), crash and diagnostics reporting, app integrity and configuration, and Google Maps for maps and geocoding;
• OneSignal — push notifications in the customer app;
• Pusher — real-time updates for the courier app;
• Payment gateways — to process card payments and refunds;
• Cloud hosting and storage providers — to host the platform, databases and uploaded files.

These providers are permitted to use your data only to perform services for us and must protect it. Each provider processes data under its own privacy policy.

9. International data transfers

Because we ship parcels across borders and use international technology providers, your personal data may be transferred to and processed in countries outside the Republic of Azerbaijan, including the countries where our carriers, customs counterparts and service providers operate. Where we transfer data internationally, we take steps to ensure it receives an adequate level of protection as required by applicable law.

10. How long we keep your data

We keep your personal data for as long as your account is active and as long as needed to provide the Services. We keep certain data for longer where required to meet legal, tax, customs and accounting obligations, to resolve disputes, and to enforce our agreements. When data is no longer needed, we delete or anonymise it.

11. How we protect your data

We apply technical and organisational measures to protect your data, including encryption in transit (TLS/HTTPS), encrypted storage of credentials and tokens on your device, access controls, database-level isolation between tenants, and monitoring. No method of transmission or storage is completely secure, but we work continuously to protect your information.

12. Your rights

Subject to applicable law, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request deletion of your data (see Section 13);
• object to or request restriction of certain processing;
• withdraw consent where processing is based on consent;
• request a copy of your data in a portable format;
• lodge a complaint with the competent data-protection authority in the Republic of Azerbaijan.

To exercise any of these rights, contact us at privacy@starmile.io. We may need to verify your identity before acting on your request.

13. Account & data deletion

You can request deletion of your account and associated personal data at any time:

• in the Shop&Ship Cabinet app, via your profile/account settings, where available; or
• by emailing privacy@starmile.io from the email address associated with your account.

After we verify your request, we will delete or anonymise your personal data, except for information we are required to retain for legal, tax, customs or accounting purposes (for example records of completed shipments and customs declarations), which we keep only for as long as the law requires and then delete.

14. Push notifications & marketing

With your permission, we send push notifications about your shipments and account. You can turn notifications off at any time in your device settings. If we send optional marketing messages, you can opt out using the unsubscribe mechanism provided or by contacting us.

15. Children's privacy

The Services are intended for adults and are not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

16. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app or by other means. Your continued use of the Services after an update means you accept the revised policy.

17. Contact us

If you have any questions, concerns or requests regarding this policy or your personal data, please contact us:

• Email: privacy@starmile.io
• Data controller: Star Technologies MMC, Baku, Republic of Azerbaijan