Privacy Policy

Last updated: April 4, 2026

Who We Are

Amalytic operates the Mantis platform — a performance analytics and operational management tool built for Delivery Service Partners (DSPs). Throughout this policy, references to "Amalytic", "we", "us", or "our" refer to Amalytic and the Mantis platform.

We are committed to handling all data that passes through our platform with care, transparency, and respect for the privacy of every individual it relates to. This policy explains what we collect, why we collect it, how we protect it, and what rights you have.

What Information We Collect

We collect and process only the information necessary to deliver the Mantis service. This falls into the following categories:

Account & Onboarding Information

When a DSP operator registers with Mantis, we collect:

  • DSP business name and shortcode identifier
  • Primary contact name and email address
  • Account credentials — passwords are hashed using industry-standard algorithms and are never stored in readable form
  • Subscription tier selected at the point of registration

Operational & Performance Data

Mantis processes operational and performance data on behalf of DSP operators. The DSP operator retains full control over the source systems from which this data originates. The scope, accuracy, and completeness of this data is governed entirely by the access and permissions that the DSP operator holds at the source.

This data may include:

  • Driver performance metrics and weekly scorecard results
  • Delivery route data, stop-level performance records, and package outcomes
  • Vehicle safety event data such as harsh braking, speeding, and camera-detected events
  • Working hours, shift timing, and attendance records
  • Pre-trip vehicle inspection records
  • Driver names and internal identifiers used to associate records with individuals

Usage Data

When users interact with the platform, we collect limited usage information to maintain and improve the service:

  • Pages and features accessed within the platform
  • Actions taken — such as filters applied, records updated, or reports generated
  • Session timestamps and duration

Technical Data

Standard technical information is collected automatically when you access the platform:

  • IP address
  • Browser type and version
  • Device type and operating system
  • Referring URL

This is used solely for security monitoring, fraud prevention, and diagnosing technical issues. It is not used to build profiles or shared with third parties.

How We Use Your Information

Amalytic uses the information we collect exclusively to deliver, maintain, and improve the Mantis platform. Specifically, we use it to:

  • Provide DSP operators and their teams with access to the Mantis platform
  • Process, store, and display performance and operational data as governed by the DSP operator's source access
  • Generate insights, trends, and recommendations within the platform
  • Send essential service communications — account confirmations, security alerts, and system updates
  • Diagnose bugs, monitor platform stability, and carry out technical improvements
  • Comply with applicable legal and regulatory obligations
We do not sell, rent, licence, or share your data with any third party for commercial or marketing purposes. Data processed through Mantis is used solely to power the service you have subscribed to.

Data Control & the Source Pipeline

The DSP operator holds full and exclusive authority over the source systems from which operational data originates. Those systems are owned and operated by the DSP operator, and it is through that ownership that data flows into the Mantis platform.

Because the DSP operator controls the source of data, they are the authoritative decision-maker over what data is available to the platform, the scope of that data, and the access permissions that determine what can be seen and processed. Amalytic receives and processes only what the DSP operator's own access allows to flow through.

Responsibility for the accuracy, completeness, and appropriateness of source data rests with the DSP operator. Amalytic's role is to process, organise, and present that data within the platform — not to determine what exists at the source or how it is structured.

Driver Data & DSP Operator Responsibilities

Mantis processes performance and behavioural data that relates to individual drivers. This data flows into the platform through the source systems controlled by the DSP operator, and is processed by Amalytic on their behalf.

DSP operators are the data controllers in respect of their drivers' personal data. As such, DSP operators are responsible for:

  • Informing drivers that their performance data is being collected and processed
  • Ensuring a lawful basis exists for that processing under applicable data protection legislation
  • Obtaining any consents required under employment contracts or local law
  • Responding to any data subject access requests made by their drivers

Amalytic acts as a data processor in relation to driver data. We process it only as directed by the DSP operator and for no purpose beyond operating the Mantis platform. We do not use driver data to build external profiles, train third-party models, or share it with any other organisation.

Data Storage & Security

All data processed by Amalytic is stored on secured infrastructure. We apply appropriate technical and organisational measures to protect your information, including:

  • Encryption of data in transit using TLS
  • Role-based access controls, configurable by the DSP operator
  • Password hashing using industry-standard one-way algorithms
  • Session management with automatic expiry on inactivity
  • Regular security reviews and access audits

Access to the platform is restricted to users who have been created and permissioned by the DSP operator. Amalytic staff do not access customer data except where explicitly required to resolve a technical support issue, and only with the customer's knowledge.

Data Retention

We retain your account and operational data for as long as your Mantis subscription remains active. If your account is closed or your subscription lapses:

  • Your data will be retained for 90 days to allow for reactivation or data export requests
  • After 90 days, your data will be permanently deleted or anonymised from our systems
  • Certain records may be retained for longer where required by legal or regulatory obligations

You may request early deletion of your data at any time by contacting us at the address below.

Your Rights

Depending on your location and applicable law, you may have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — request correction of inaccurate or incomplete data
  • Erasure — request deletion of your personal data
  • Restriction — request that we limit how we process your data
  • Portability — request your data in a structured, machine-readable format
  • Objection — object to processing where we rely on legitimate interests as our lawful basis

To exercise any of these rights, contact us at privacy@amalytic.com. We will acknowledge your request within 5 business days and respond in full within 30 days.

Cookies

Mantis uses a small number of cookies that are strictly necessary to operate the platform:

  • Session cookie — maintains your authenticated session while you are logged in. This cookie expires when you log out or your session times out.
  • Preference cookies — remembers display preferences such as selected depot or date filters within the platform.

We do not use advertising cookies, third-party tracking cookies, or analytics cookies that identify you personally. You can disable cookies in your browser settings, though doing so will prevent you from accessing authenticated areas of the platform.

Third-Party Services

Mantis does not embed third-party advertising networks, social media tracking pixels, or external analytics services that would share your data with third parties. Where we use third-party infrastructure providers — such as hosting or database services — those providers are bound by appropriate data processing agreements and process data only as instructed by Amalytic.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in the platform, our practices, or applicable law. When we do, we will update the date shown at the top of this page. We will notify active customers of any material changes by email prior to those changes taking effect. Continued use of the Mantis platform following notification constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this policy, wish to exercise your rights, or have a concern about how Amalytic handles your data, please get in touch: