Draft for commercial and legal review This is a working draft, not a legally approved document. Do not treat it as binding, and do not issue it as final without founder and legal sign-off.

Fleet Shield Privacy Notice

Account information we collect

When your organisation is approved for access, we collect:

Billing information

Subscription billing is handled by Stripe. Your card details are entered directly into Stripe's hosted checkout and never touch Fleet Shield's own servers. We store a Stripe customer reference and subscription status (for example, active, past due, or cancelled) so the product knows whether your account has current access.

Fleet and vehicle information

Once your account is active, you may enter vehicle labels, driver names, and similar operational details ("customer data") to use the product. This information is yours — see "Data ownership" below.

Telemetry

Fleet Shield's live map, alerts, and reporting currently run on a simulated telemetry engine rather than ingesting data from real vehicle hardware — see the product documentation for detail. Where real device telemetry is integrated for a customer in future, this notice will be updated to describe exactly what's collected from that hardware and how.

Technical & audit logs

We keep a security-relevant audit log (for example, login attempts, MFA events, and account changes) that may include your username, IP address, and timestamp. This exists to protect your account and investigate suspicious activity, and is not used for any other purpose.

Support correspondence

If you contact us for support, we keep the correspondence to help resolve your issue and improve the product.

Analytics

Fleet Shield does not currently use third-party analytics or tracking scripts. If this changes, this notice will be updated first.

Why we collect this information

To create and operate your account, provide the product's core functionality, process subscription billing, maintain security, respond to support requests, and meet legal or regulatory obligations where applicable.

Data ownership

You retain ownership of the fleet, vehicle, and operational data you submit. We don't sell it, and we don't use it for advertising.

Service providers

We use third-party infrastructure and service providers to operate Fleet Shield, including hosting/infrastructure providers and Stripe for payment processing. These providers process data on our behalf under their own security and privacy commitments.

Security approach

Fleet Shield applies security controls including hashed passwords, optional multi-factor authentication, CSRF protection, rate limiting on authentication endpoints, and security-relevant audit logging. See Security and Procurement for our broader approach. We don't claim a formal security certification.

Retention

Account and customer data is retained for as long as your account is active, plus a reasonable period afterward for legal, accounting, or dispute-resolution purposes. [Placeholder — exact retention periods to be confirmed during legal review and reflected in your Subscription and Billing Terms.]

Export and deletion

On request, or on termination of your account, we'll provide a reasonable opportunity to export your customer data, and will delete account and customer data within a reasonable period afterward, except where we're required to retain it by law.

International processing

Hosting location and data-residency requirements are agreed for each deployment; we don't claim Australian-only hosting as a blanket policy. See the Security and Procurement page for current wording. Our service providers (including Stripe) may process data outside Australia as part of their normal operations.

Account information vs. customer operational data

This notice distinguishes between your account information (who can log in, billing status) and your customer operational data (fleet, vehicle, and telemetry information you enter). Both are covered by this notice, but they're handled differently — account information is used to operate the relationship with your organisation, while operational data is yours and is only used to provide the product back to you.

Privacy enquiries

Questions about this notice, or requests to access, export, or delete your data: hello@jegasec.com.