Last updated 6 August 2026.
Nado is a freight dispatch platform operated by Torque Freight Pty Ltd (ABN 47 090 148 499), located in Shepparton, Victoria, Australia. Contact us at [email protected].
When you create an account: your company name, a username, your email address, and a password. When you use the app: the freight items you create, the customers and addresses you add, GPS location of your vehicles during active runs (drivers only, when signed in and on a scheduled run), photos you upload as proof of delivery, and transactional data we sync with Xero on your behalf if you connect it.
To operate the dispatch software you've signed up for — show your drivers their runs, send your customers booking confirmations and tracking links, generate invoices, surface analytics in your admin dashboard. We do not sell your data. We do not use it to train AI models. We do not share it with advertisers.
Your data is shared only with services you explicitly connect (e.g. Xero), the infrastructure providers that run Nado (Cloudflare for traffic, and our email providers — Postmark and, where you connect it, your own Gmail), and Australian regulators or law enforcement when legally required.
If you connect a Google account so Nado can send email as you, we
ask Google for one permission:
https://www.googleapis.com/auth/gmail.send. That
permission lets us send a message on your behalf and nothing else.
It does not let us read, search, download, modify or delete
anything in your mailbox, and we do not request any permission
that would.
We use it only to send the mail you have asked Nado to send — booking confirmations, delivery notifications, quotes and invoices to your own customers — so those arrive from your address instead of ours. We also read your Google account's email address and name, once, at the moment you connect, so the app can show you which account is connected.
What we store: the access and refresh tokens Google issues, encrypted at rest, plus the connected address and the granted permission. We do not store the contents of sent messages beyond the freight, invoice or booking record the message was generated from.
Google account data is never sold, never shared with anyone other than Google itself in the course of sending your mail, never used for advertising, and never used to train AI or machine-learning models. Nado's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect at any time from Settings → Email inside Nado, which deletes the stored tokens, or revoke Nado's access directly at myaccount.google.com/permissions. Either way Nado immediately stops sending as you — customer-facing email stays unsent until you connect an account again.
Your data is retained as long as your account is active. You can request export or deletion at any time by emailing [email protected]. We action deletion requests within 30 days. Some records we are legally required to keep for tax / freight regulatory reasons (typically 7 years) are flagged and retained even after account closure; everything else is purged.
Data is encrypted in transit (TLS) and at rest. Passwords are hashed with PBKDF2 + SHA-256. The iOS app stores its auth token in iOS Keychain. We do not log passwords or sensitive personal identifiers.
You may access, correct, or delete your personal information at any time via your admin account or by emailing us. We comply with the Australian Privacy Principles under the Privacy Act 1988.
If we change this policy materially, we'll email all account admins at least 14 days before the change takes effect.