Privacy Policy

1.1 Information You Provide Directly

• Full name, email address, phone number, and mailing address
• Business name, fleet details, and vehicle information
• Driver's license number and government-issued ID (for identity verification and insurance eligibility purposes)
• Insurance application information including driving history, vehicle use, coverage preferences, and any other information required by insurance underwriters
• Communications you send us via email, chat, or support requests

1.2 Financial Information via Plaid

When you connect your bank account or credit card through our Platform, we use Plaid Technologies, Inc. ("Plaid") to facilitate that connection. Through Plaid, we may collect:

• Bank account and routing numbers
• Account balances and transaction history
• Account holder name and institution name

iFleet does not directly store your bank login credentials. Your banking credentials are transmitted directly to Plaid and are governed by Plaid's Privacy Policy (available at plaid.com/legal). By connecting your bank account through our Platform, you agree to Plaid's Terms of Service and authorize iFleet to receive and use the financial data Plaid provides on your behalf.

1.3 SMS & Communication Data

When you opt in to receive SMS text messages from iFleet, we collect:

• Your mobile phone number
• Message content and delivery status
• Opt-in and opt-out records and timestamps

Standard message and data rates from your carrier may apply. You may opt out of SMS communications at any time by replying STOP to any message or contacting us directly.

1.4 Location Data

We may collect location information including:

• GPS coordinates or approximate location data associated with vehicles in your fleet
• Location data from your device when you access the Platform with location permissions enabled

Location data is used to support fleet operations, telematics reporting, and mileage tracking. You may disable device-level location access through your device settings, though some Platform features may be limited as a result.

1.5 Device & Usage Data

When you access the Platform, we automatically collect certain technical information including:

• IP address, browser type, and operating system
• Device identifiers and mobile device type
• Pages visited, features used, and time spent on the Platform
• Referring URLs and clickstream data
• Error logs and crash reports

This data is used to maintain Platform security, improve performance, and diagnose technical issues.

1.6 Google Account & Email Data

If you choose to connect a Google (Gmail) account to use iFleet's in-platform communication tools, we access certain Google user data through Google's secure OAuth consent flow, which may include:

• The email address associated with your Google account
• The content, headers, and metadata of email messages in your connected Gmail mailbox that are read or displayed within the Platform
• Messages you compose, send, reply to, or organize through the Platform

Connecting a Google account is optional and is never required to use the Platform's core fleet-management features. Our access to, use of, and controls over this data are described in detail in Section 9 (Google Account Connection & Support Access).

3.1 Plaid

To enable bank and credit card connectivity, we share your authorization and account connection requests with Plaid. Plaid acts as a service provider and data processor. iFleet does not sell your financial data to Plaid or any other party. Plaid's use of your data is governed by its own privacy policy.

3.2 Insurance Carriers

If you use iFleet to apply for or manage insurance coverage, we will transmit your personal and vehicle information to the relevant insurance carrier(s) or their authorized agents for the purpose of underwriting, quoting, binding, and administering your policy. This may include:

• Full name, date of birth, and contact information
• Driver's license number and driving history
• Vehicle identification numbers (VINs), make, model, year, and usage information
• Any additional information required by the insurer for underwriting purposes

By initiating an insurance application through the Platform, you expressly authorize iFleet to share your information with the applicable insurance carrier(s). Insurance carriers receiving your data are independent entities and their use of your information is governed by their own privacy practices.

3.3 SMS Service Providers

We use third-party SMS delivery providers to transmit text messages on our behalf. These providers receive your phone number and message content solely for the purpose of message delivery and are contractually prohibited from using that data for any other purpose.

3.4 Legal & Safety Disclosures

We may disclose your information if we believe in good faith that such disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or enforceable governmental request
• Enforce our Terms of Service or investigate potential violations
• Detect, prevent, or address fraud, security, or technical issues
• Protect the rights, property, or safety of iFleet, our users, or the public

3.5 Business Transfers

If iFleet is involved in a merger, acquisition, financing, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on the Platform before your information is transferred and becomes subject to a different privacy policy.

3.6 No Sale of Personal Information

iFleet does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes.

6.1 Account Information

You may review and update your account information at any time by logging into the Platform. You may also request deletion of your account by contacting us at the information below.

6.2 Bank Connection

You may disconnect your bank or credit card account at any time through the Platform's Connected Accounts settings. Disconnecting will stop future transaction syncs; historical transaction data already imported may be retained per our data retention policy.

6.3 SMS Opt-Out

You may opt out of SMS communications at any time by replying STOP to any iFleet text message or by updating your notification preferences in the Platform. Opting out of marketing SMS does not affect transactional messages necessary for your account or bookings.

6.4 Location Data

You may disable location sharing on your device at any time. Note that disabling location access may limit certain fleet tracking features.

6.5 California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information (iFleet does not sell personal information). To exercise these rights, contact us at the address below.

6.6 Delaware Residents

As a Delaware-incorporated company, iFleet complies with applicable Delaware law. If you have questions about your rights under Delaware law, please contact us.

9.1 Connecting a Google (Gmail) Account

iFleet offers optional in-platform communication tools that let you manage email from your own account. If you connect a Google (Gmail) account through Google's secure OAuth consent flow, you authorize iFleet to access that account on your behalf in order to provide those features. Depending on the permissions you approve, this access may allow iFleet to:

• Read and display messages from your connected Gmail mailbox within the Platform
• Compose, send, and reply to messages from your connected Gmail address
• Organize, label, or otherwise manage messages you act on through the Platform
• Retrieve the email address associated with your Google account

We request only the access needed to operate these features. You grant this access voluntarily and may withdraw it at any time (see Section 9.4).

9.2 How We Use Google User Data — Limited Use

iFleet's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google user data solely to provide and improve the user-facing communication features you enable
• We do not use Google user data for advertising, and we do not sell, rent, or trade it
• We do not transfer Google user data to others except as necessary to provide or improve these features, to comply with applicable law, or as part of a merger or acquisition with appropriate notice
• We do not allow humans to read your email except (i) with your consent, including the support access described in Section 9.3; (ii) where necessary for security investigations, to prevent abuse, or to comply with applicable law; or (iii) where the data has been aggregated and de-identified

Access and refresh tokens for your connected Google account are stored in encrypted form and are never exposed to client-side applications.

9.3 Support Access to Your Account

To resolve technical problems, iFleet maintains the ability for a limited number of authorized support personnel to securely access your account on your behalf — a capability sometimes called impersonation. When it is used, a support agent can view your account as you would see it, which may include content from a connected communication account, such as your Gmail mailbox.

We treat this as a last resort, not a routine practice. Having the technical ability to access your account does not mean that we do. In practice, this access is only used when:

• You ask us for help with a feature or function that we cannot diagnose otherwise, or
• We detect a problem with your account that requires hands-on investigation to resolve

Support access is limited to what is reasonably necessary to resolve the issue. Each session is time-limited and recorded in an internal audit log that captures which staff member initiated it and when it began and ended. We do not use support access to browse, monitor, mine, or read your communications for any purpose unrelated to the support you have requested or a problem we are actively resolving. By connecting a communication account and using these features, you consent to this support access.

9.4 Managing and Revoking Access

You may disconnect a connected Google account at any time from the Platform's Settings, which revokes iFleet's access tokens and stops all future access to that account. You may also review or revoke iFleet's access directly from your Google Account permissions. Disconnecting stops the communication features that rely on that account; data already processed or displayed through the Platform is handled in accordance with Section 4 (Data Retention).