Skip to content
TrackKaro

Privacy Policy

Last updated: October 2026. TrackKaro is a project of DANGO.

1. Who We Are

TrackKaro is a shipment tracking and booking software service (SaaS) operated by DANGO. The platform is available at trackkaro.pk. "TrackKaro", "we", "us" and "our" in this policy refer to DANGO.

2. What Data We Collect

Account data. When you create an account we collect your name, email address, business details and (optionally) your phone number, to identify your account, communicate with you and provide support.

Shipment data you submit. When you or your store submits a shipment, we store the tracking number, courier, order reference, and your customer's name, phone, email (if provided) and delivery address. This is needed to query couriers and show you the status.

Courier credentials. The API keys of your own courier accounts are stored encrypted and used only to connect to those accounts on your behalf.

Shopify connection. If you connect a Shopify store, we keep the Client ID and secret of the app you created in your own Shopify account, and the access token Shopify gives us, encrypted. We read your open, unfulfilled orders only when you ask, store the details of the orders you book, and write the fulfilment, tracking number and delivery progress back to those orders. We do not change your products, prices or customers. Disconnecting deletes the stored keys.

Usage data. We count API calls and shipments per store per day to apply plan limits and prepare invoices.

Payment data. Payments for our service are processed by our payment gateway or by bank transfer. We receive confirmation of the payment; we never see or store card numbers or banking passwords.

3. How We Use Your Data

  • To query courier systems on your behalf and show you tracking updates.
  • To book shipments on your own courier account when you ask us to.
  • To send shipment notifications to your customers, only when you turn this on.
  • To prepare invoices, apply plan limits and provide support.
  • To keep the platform secure and reliable.

We do not sell your data or your customers' data.

4. Couriers and Other Services

TrackKaro sends tracking numbers and order details to the couriers you use (PostEx, TCS, Leopards Courier, Sonic/Trax, M&P, DEX (Daraz Express), InstaWorld, Bridge; in Egypt: Aramex Egypt, Bosta, Mylerz and iMile Egypt; in Saudi Arabia: Aramex Saudi Arabia, SMSA Express and iMile Saudi Arabia; in United Arab Emirates: Aramex UAE, iMile UAE, DHL Express UAE, FedEx UAE and Jeebly; in Jordan: Aramex Jordan, iMile Jordan and Mylerz Jordan; in Kuwait: Aramex Kuwait and iMile Kuwait) as their systems require. Each courier's own privacy policy governs how it handles that data.

5. Paid Add-ons (including WhatsApp)

Add-ons such as WhatsApp order confirmation and notifications run as a plugin on your hosting, not ours. Your customers' phone numbers and messages go directly from your store to the WhatsApp Business API provider you chose. They are not sent to TrackKaro, and we do not store your customers' WhatsApp messages. Your store only checks its licence and updates with us (your store's API token, the add-on and its version, and the time of the check).

6. Data Retention

Finished shipment records are kept for a limited period (by default about four months) and then deleted. Account data is kept while your account is open. You may ask us to delete your data at any time.

7. Security

API tokens and courier keys are stored encrypted, and all communication between your store and TrackKaro uses HTTPS.

8. Your Rights

You may access, correct or ask us to delete your account data at any time by writing to support@dango.pk.

9. Cookies

The TrackKaro dashboard uses a session cookie only to keep you signed in. We use no advertising or third-party tracking cookies. Our store plugins set no cookies on your customers' browsers.

10. Contact

For privacy questions, write to support@dango.pk or see About TrackKaro.