Privacy Policy

1. Who We Are

This app is operated by JCR Services Enterprise (trading as JCR Enterprise X 3QY), a business registered in Singapore. SANQUEYI is an associated entity under the same management.

We provide last-mile delivery management services in Singapore via the JCR × 3QY Delivery Management System ("the App") accessible at https://jcrx3qy.app/.

For questions about this policy or your data, contact us at Alvin.lee@3anqueyi.com.

2. Data We Collect

We collect the following personal data in the course of providing our services:

• ▸Account information: Username, name, phone number, and profile picture.
• ▸Order information: Customer names, delivery addresses, phone numbers, and postal codes submitted when placing orders.
• ▸Delivery proof photos: Photos taken by drivers as proof of delivery.
• ▸Driver location data: Location data used for route planning only. This is not stored permanently on our servers.
• ▸Device information: Basic device information required for Progressive Web App (PWA) functionality.

3. How We Use Your Data

• ▸Process and manage delivery orders
• ▸Assign drivers to deliveries
• ▸Provide proof of delivery to stores and clients
• ▸Generate delivery reports and invoices
• ▸Improve our services

4. Who We Share Data With

• ▸Drivers see only their assigned order details.
• ▸Stores see only their own orders.
• ▸Admin sees all data for operational purposes.
• ▸We never sell your personal data to third parties.

Third-party services used:

• ▸Railway (Singapore region): Hosting — order and account data is stored on Railway's infrastructure in Singapore.
• ▸Cloudinary: Photo storage — proof of delivery photos are stored securely on Cloudinary.
• ▸OneMap.sg: Mapping — address geocoding and route planning.

5. Data Retention

• ▸Order data: Retained for 2 years from the date of the order.
• ▸Proof of delivery photos: Retained for 1 year.
• ▸Account data: Retained while the account is active, and for 1 year after deactivation.

6. Your Rights under PDPA

Under Singapore's Personal Data Protection Act (PDPA), you have the following rights regarding your personal data:

• ▸Right to access your personal data
• ▸Right to correct inaccurate data
• ▸Right to withdraw consent to the collection, use or disclosure of your data

To exercise any of these rights, submit a request to Alvin.lee@3anqueyi.com. We will respond within 30 days.

7. Data Security

• ▸All data is transmitted over HTTPS (TLS encryption)
• ▸Passwords are stored using bcrypt encryption — we never store plaintext passwords
• ▸Role-based access control (Admin / Client / Driver) restricts data access
• ▸Regular security audits of our systems
• ▸Daily automated database backups

8. Cookies

We use session cookies solely for login authentication to keep you securely signed in. We do not use advertising cookies, tracking cookies, or any third-party analytics cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will notify users via the App. Continued use of the App after notification constitutes acceptance of the updated policy.

10. Contact Us

Data Protection Officer
JCR Services Enterprise (trading as JCR Enterprise X 3QY)
Email: Alvin.lee@3anqueyi.com
Singapore
We will respond to all enquiries within 30 days.