Draft for legal review. This page is a plain-English draft and is not yet legal advice or a final policy.
Draft of 2 October 2026
Privacy at Doorstep
What Doorstep collects when you send, receive or deliver a parcel, why, and who can see it.
The short version
- Doorstep collects what it needs to arrange a delivery and to prove that it happened.
- Riders and recipients see only what the job needs. A recipient sees the sender’s first name and nothing else about the sender.
- Doorstep does not sell personal information.
- You can ask for a copy of your information, or ask for it to be corrected or deleted, on WhatsApp.
What Doorstep collects
If you send a parcel
- Your WhatsApp number and the name on your WhatsApp profile.
- The pickup and drop-off addresses you type or pin, with any landmark or directions you add.
- The messages you exchange with Doorstep.
- What you say the parcel is, and roughly what it is worth.
- The offers you make, the rider you choose and the ratings you give.
If you receive a parcel
- The first name the sender gives for you.
- Your location, only if you choose to share it from the tracking page.
- Your thumbs up or down after delivery, and what you write if you report a problem.
If you ride with Doorstep
- Your phone number, and photos of your motorcycle licence, the bike’s registration book and your national ID, plus a selfie taken in the app.
- Your location while you are online, and the GPS point at each pickup and at each door.
- Photos of parcels at pickup.
- Your wallet top-ups, commission, job history, ratings and strikes.
Why Doorstep collects it
- To arrange the delivery. Finding the addresses, working out the fair price and offering the job to riders nearby.
- To prove the delivery. The pickup photo, the time of every step, the GPS points and the completion code show what happened and when.
- To settle problems with evidence. When someone reports a late, damaged or missing parcel, the founders look at the record of that job.
- To keep wallets accurate. Every rider top-up and every commission is recorded.
- To make addresses better. When a rider closes a job at the door, the GPS point is saved against that address, so the next delivery there is exact.
- To keep the service safe. Rider documents are checked before the first job, and ratings and cancellations are counted.
Who can see what
- Doorstep’s founders and support staff. Each person sees only what their role needs. Rider documents are stored privately, and only the founders can open them.
- Riders see the sender’s first name, the pickup and drop-off for their job in the sender’s own words, what the parcel is and its rough value, and the sender’s rating.
- Senders see a rider’s first name, rating and number of trips when offers arrive. The bike and its plate number are shared once the sender has chosen a rider.
- Recipients see the delivery status, the rider’s first name, bike, plate and rating, and the sender’s first name. Nothing else about the sender is shown.
- The services Doorstep runs on. WhatsApp carries the messages, Google Maps finds addresses and distances, PayNow handles riders’ wallet top-ups, and an AI model reads typed addresses. They handle information only to provide those services to Doorstep.
Tracking links
The tracking link a sender forwards shows the delivery status only, and it stops working 24 hours after delivery. Anyone who has the link can open it while it works, so it should go only to the person receiving the parcel.
How long Doorstep keeps it
To be confirmed. Retention periods are being set as part of the legal review. They will be listed here, for each kind of information, before Doorstep opens to the public.
The law and your rights
Zimbabwe’s Cyber and Data Protection Act applies to Doorstep, because Doorstep stores customers’ and riders’ personal details. The regulator is the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), and Doorstep needs a data controller licence from it. The licence details will be added to this page once the licence is issued.
You can ask Doorstep:
- for a copy of the information it holds about you;
- to correct something that is wrong;
- to delete your information. Some records may have to be kept, such as wallet entries and the record of a disputed delivery. Doorstep will tell you which ones and why.
How to ask
Message Doorstep on WhatsApp from the number your information is linked to, and say what you need. Doorstep confirms it is you from that number and answers in the same chat.
Changes to this page
This is a draft. It will change after legal review, and the date at the top will change with it.