Privacy & SMS policy

Accounts and identity

You can sign in with an email and password or with Google. Sign-in is handled by Supabase Auth. If you use Google, we receive the basic profile Google shares for that sign-in (such as name, email, and profile photo) so we can create or match your account.

We store the account and workspace details needed to run the product:

• Name, email, phone number, role, and profile photo.
• Company membership. A person may belong to more than one fleet and can switch the active company in the product.
• Hire and workforce records the company collects, such as join applications and the documents described below.

SMS and WhatsApp messaging

ConectaFleet sends optional automated SMS and WhatsApp messages about your account (document review, access, and settlements). Those messages are sent by our servers through Twilio. They are not sent from the mobile app on your phone. Owners and admins who opt in also receive one daily operations summary. WhatsApp and SMS are separate consents. Email alerts, when you opt in, are sent through Resend.

• SMS opt-in: Users voluntarily provide their mobile number on setup or in Settings and check an unchecked consent box agreeing to receive SMS from ConectaFleet about their account. Accepting a team invite requires checking that box before joining. Owners and admins who opt in also receive one daily operations summary. No SMS is sent without this explicit consent. Invitation texts are only sent when an admin includes a phone number on an invite.
• WhatsApp opt-in: WhatsApp is enabled separately in Settings or at the WhatsApp consent page. Checking the SMS box does not authorize WhatsApp. The app stores your preference; our servers send the messages.
• Opt-out: Users can stop SMS at any time by unchecking the text alert option in Settings or replying STOP to any SMS. WhatsApp STOP opts out of WhatsApp only.
• Frequency: Account texts are sent when something happens on your account. Urgent compliance expiry and join-review alerts may send a short message immediately. Owners and admins who opt in also receive one daily operations summary.
• Cost: Message and data rates may apply.
• Help: Reply HELP for assistance or contact support@conectafleet.com.

Information we collect

What we collect depends on your role and on the features you or your company turn on. Phone numbers are used for the account and for notifications you opt into. We do not sell personal information.

• Account and contact data: name, email, phone, role, and which company or companies you belong to. Used to run the account, hire workflows, and compliance alerts you request.
• Fleet and hire records: vehicles, drivers, join applications, compliance dates, and files the company uploads. Paperwork can include a commercial driver's license, a medical card, direct-deposit bank details, and a tax identifier (EIN or Social Security number) when the company requires it for employment or contractor onboarding. We use that information only to operate the fleet, payroll, and compliance workflows the company enables.
• Photos and files: documents and images you upload from the website or, in the Android app, from the camera or photo library. Files are stored in Supabase Storage and are available to authorized users in that company.
• Precise location: only when a driver opts in, as described under Location data. Used for on-duty fleet tracking, not for advertising.
• Notifications: your choices for email, SMS, in-app alerts, and WhatsApp. If you enable push notifications, we store a device push token so our servers can deliver those alerts. The token is an identifier for the app installation, not an advertising ID.
• Billing: subscription status for the company. Payment card details are collected by Stripe on the website during checkout. The Android app can show subscription status; it does not run checkout and does not include the Stripe payment SDK.

We do not collect app activity in the Android app for advertising, and we do not sell personal information to advertisers. The website uses essential cookies described below, including first-party cookies that record which campaign referred a signup. Those cookies are not used to sell data to advertisers.

Location data

ConectaFleet may access precise location (GPS) from a driver's device only when that driver allows location access and turns location sharing on. We collect coordinates and related details such as accuracy, speed, and heading so the driver's company can see position, route progress, and geofence-related alerts for fleet operations and safety.

• Optional and driver-initiated: Location is off until the driver opts in. Denying the device permission, or never turning sharing on, means we do not collect that driver's location.
• Android, including background: On the Android app, a driver opts in on Track and starts an on-duty shift. While that shift is active, the app may collect precise location in the background about every two minutes. Collection stops when the shift ends or the driver turns sharing off. We do not collect location in the background after that.
• Website: In the driver portal, location is collected while sharing is on and the tracking session is in use in the browser.
• Employer visibility: Location is visible to the driver's employer and to authorized users in that company, such as owners, admins, and dispatchers with tracking permission. They use it for the fleet map, route progress, and geofence-related alerts. We do not sell location data or share it with unrelated third parties for advertising.
• Control: Drivers can revoke location permission in device or browser settings and can stop sharing by ending the shift or turning location sharing off in the product.

ConectaFleet Mobile (Android)

This section summarizes how the Android app uses data. It does not replace the rest of this policy. The app is the same product as the website: one account, company membership, and the same employer visibility rules.

• Sign-in and profile: email and password or Google, plus name, email, phone, and photo. You may belong to more than one company.
• Documents and photos: camera and photo library access is used only when you choose a file to upload for compliance or hire paperwork (for example a license, medical card, or related document). Uploads are stored for that company.
• Background location during on-duty shifts: precise location, including in the background about every two minutes, only after a driver opts in on Track and starts an on-duty shift. The driver's employer and authorized fleet admins can see it for the fleet map, route progress, and geofence-related alerts. It stops when the shift ends or sharing is turned off. It is not used for advertising.
• Notifications: optional push (we store a push token if you allow it), in-app notifications, and preferences for email, SMS compliance alerts, and WhatsApp. SMS, email, and WhatsApp are sent by our servers, not from the app.
• Billing: the app may show whether the company's subscription is active. Checkout and card payment happen on the website through Stripe.
• Not in the app: the app does not include the web CRM, does not take card payments, and does not send email, SMS, or WhatsApp from the device. It does not sell your data to advertisers.

How we use your information

We use information to operate the fleet dashboard and the Android app, review hire applications, store compliance documents, generate compliance alerts, send notifications you request, provide live location and route history when a driver has sharing on, process subscriptions on the website, and keep accounts secure. We do not sell personal information and we do not use it for third-party advertising.

Who we share data with

Fleet data is shared with the user's company (the employer or contracting carrier) and with people that company authorizes, according to role. A driver's on-duty location is shared with that company as described above. We also use service providers that process data for us:

• Supabase — accounts, database, authentication, and file storage.
• Stripe — subscription billing on the website.
• Finch — only if a company connects payroll. Workforce data that company chooses to sync may be shared with Finch and the payroll provider it selects (for example Gusto).
• Twilio — SMS and WhatsApp messages you opt into.
• Resend — email, including account and compliance messages you opt into.
• Google — only if you choose Google sign-in.
• Mapbox — map display for fleet tracking. Map requests can include the map view so tiles can load. Mapbox is not used for advertising.

We may also disclose information if the law requires it, or to protect the rights, safety, and security of users, the company, and the service.

Cookies

The website uses cookies that are needed to run the product: a sign-in session, your language preference, and which company workspace is active if you belong to more than one. We also set first-party cookies that remember a referral or campaign source when you arrive from a link we use for our own signup attribution. We do not use third-party advertising cookies. The Android app does not use those website cookies; it uses your account session and, if you allow push, a push token.

Security

We transmit data between your browser or the Android app and our service over HTTPS (TLS). Access to a company's records is limited by the role on that membership. No method of transmission or storage is perfectly secure.

Retention

We keep account and fleet records while the account or the company workspace is active, and for as long as needed for legal, tax, safety, and dispute reasons. Location history collected during on-duty sharing is kept for that company's fleet operations. If you leave a company or delete your login, records the company must keep — such as compliance documents and location history tied to fleet operations — may remain with that company.

Your choices and account deletion

You can review and update your profile (name, email, phone, and photo) in the product. You can turn off SMS, WhatsApp, email alerts, and push notifications, and you can stop location sharing as described above. You can leave a company according to the options shown for your role.

You can ask us to delete your personal login. Members who are not company owners can delete their account from the website or from the Android app. Company owners must delete the company from Settings on the website first; the owner account cannot be deleted while it still owns a company. Deleting a login removes the authentication account and profile. It does not automatically erase fleet records the company is required to keep.

To access, correct, or delete information, or to ask a question about this policy, contact support@conectafleet.com.

Children

ConectaFleet, including the Android app, is a workplace service for carriers, drivers, owner-operators, and fleet administrators. It is not directed at children under 13, and we do not knowingly collect personal information from children.

Changes

We may update this policy from time to time. The date at the top of this page shows when it was last updated. Continued use of the website or the Android app after an update means the updated policy applies.

Contact

Questions about privacy, the Android app, or SMS messaging: support@conectafleet.com