1. Scope & roles
Fleetfully ("Fleetfully," "we") operates this website and the Fleetfully platform. This policy covers personal information we handle as a business — for example, when you visit our site, contact us, or administer a customer account.
Order data and any protected health information (PHI) that flows through the platform belong to our carrier customers and their clients. For that data we act as a business associate (a processor), handling it on our customers' instructions under a Business Associate Agreement and the customer's own privacy notices — not under this policy. See our HIPAA & BAA statement.
2. Information we collect
- Information you give us — your name, email, company, phone, and message when you submit a contact form or correspond with us; account and billing details when you become a customer.
- Information processed for customers — order, address, routing, tracking, and proof-of-delivery data, which may include PHI. This is handled under the applicable Business Associate Agreement, not this policy.
- Information collected automatically — server logs, IP address, device and browser type, and similar technical data needed to operate and secure the platform.
3. How we use information
- To respond to your inquiries and provide demos, quotes, and support.
- To provide, maintain, secure, and improve the platform.
- To send account, transactional, and (where permitted) relevant business communications. We do not put PHI in email.
- To comply with legal obligations and enforce our agreements.
4. Cookies & analytics
We use strictly necessary cookies and similar technologies to operate the platform — for example, to keep you signed in and to remember your display preferences. We keep non-essential tracking to a minimum. Where we use analytics, we configure it to limit the personal data collected. You can control cookies through your browser settings; disabling necessary cookies may affect how the platform works.
5. How we share information
- Subprocessors — service providers that help us run the platform (messaging, AI extraction, mapping, hosting, storage). See the current list at Subprocessors. Those handling PHI are bound by appropriate agreements.
- Legal & safety — where required by law, or to protect rights, safety, and the integrity of the platform.
- Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy and applicable agreements.
We do not sell personal information.
6. Data retention
We keep information for as long as needed to provide the platform and meet our legal and contractual obligations. Audit and access records associated with PHI are retained on a six-year HIPAA floor. Contact inquiries are kept for as long as needed to follow up and for our legitimate business records, then deleted.
7. Security
We protect information with encryption at rest and in transit, scoped access controls, audit logging, and the other safeguards described on our Security & compliance page. No system is perfectly secure, but we work to protect information consistent with its sensitivity.
8. Your choices & rights
You may request access to, correction of, or deletion of personal information we hold about you, and you may opt out of non-essential communications at any time. To exercise a right, reach us through our contact page. For PHI held on a customer's behalf, please contact that customer (the lab, hospital, or carrier); we will support them in responding.
9. Children
The platform is a business tool and is not directed to children, and we do not knowingly collect personal information from children.
10. International users
We operate in the United States. If you access the platform from elsewhere, you understand that your information will be processed in the United States under this policy and applicable agreements.
11. Changes to this policy
We may update this policy from time to time. Material changes will be reflected in the "Last updated" date above and, where appropriate, with additional notice.
12. Contact
Privacy questions, requests, and general legal matters can be sent through our contact page, and we'll route them to the right team.