Privacy Policy

1. What we collect

Account data: name, email address or phone number, password (stored only as a salted hash), role, organization and team membership. If you sign in with Google, we receive your verified email address and name from Google and never see your Google password.

Operational data you enter: shipments, loads, bids, vehicles, drivers, bookings, documents, invoices, inspections, fuel and expense records and expiry dates, which may include personal data about drivers, passengers and customers.

Assistant conversations: the questions you ask the in-app assistant, and the records it needs to answer them, are processed by an AI service provider to produce a reply.

Technical data: device identifier and name, browser, IP address and sign-in activity, used to secure your account and enforce device limits. Location is used only for features you use, such as live maps or nearby loads.

Payment data: card payments are handled by Stripe and we do not see your card number.

2. How we use it

To provide and secure the service, authenticate you, process bookings and payments, send confirmations, alerts and security notices, provide support, prevent fraud and abuse, and improve reliability. We do not sell your personal data.

3. Who we share it with

With other users where the feature requires it (for example a carrier sees a load, a passenger sees trip details), with your organization administrators, and with providers that help us run DrivePilot, such as hosting (Oracle Cloud), database (Supabase), email (Resend), phone verification (Firebase), Google sign-in (Google) and payments (Stripe), each only for their service to us.

We may disclose data when the law requires it or to protect people, the service or our rights.

4. Cookies and sign-in

We use a secure, httpOnly cookie to keep you signed in. If you choose "Keep me signed in" it lasts up to 30 days and renews while you use the app; otherwise it ends when you close the browser. We use local storage for small preferences, such as your theme and the pay rates you last entered, and your device identifier. If you use Google sign-in, Google may set its own cookies on its sign-in button. We do not use advertising cookies.

5. Security and retention

Sensitive fields are encrypted at rest, traffic uses HTTPS, tokens rotate and access is checked on the server for every request. No system is perfectly secure, so please use a strong, unique password.

We keep data while your account is active and for as long as needed for legal, tax, audit and dispute purposes, then delete or anonymise it.

6. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict some processing. Contact us and we will respond within a reasonable time. Organization data is controlled by your organization, so some requests may need to go through its administrators.

7. International transfers and children

Our providers may process data in other countries; we use providers with appropriate safeguards. DrivePilot is not for anyone under 18 and we do not knowingly collect their data.

8. Changes and contact

We will post updates here and notify you of material changes. Contact support@drivepilot.net with any privacy question or request.

Operator: DrivePilot. Business name and address are provided on request at legal@drivepilot.net.