Privacy Policy

Last updated: April 2026

    Short version: We collect only what we need to run the service. We never sell your data. Your fleet data belongs entirely to you. We use Supabase (EU servers available) to store your data securely.
  

1. Who We Are

Fleetzy ("we", "us", "our") operates the fleet vehicle replacement management platform at gofleetzy.com. For privacy enquiries, contact privacy@gofleetzy.com.

2. What Data We Collect

Account data: your name, email address, company name, and chosen password (stored as a secure hash — we never see your actual password).

Fleet data: vehicle details you enter including make, model, year, mileage, maintenance costs, repair records, and photos of invoices or plates that you upload for scanning.

Usage data: pages visited, features used, and error logs. This is used to improve the product and diagnose technical issues. We do not build advertising profiles.

Payment data: handled entirely by Stripe. We never see or store your credit card details.

3. How We Use Your Data

To provide and operate the Fleetzy service
To send you service-related emails (account confirmation, invoices, service alerts you configure)
To process AI analysis requests — your fleet data is sent to Anthropic's API only when you explicitly trigger an AI analysis. It is not stored by Anthropic beyond the request.
To improve the product using anonymised, aggregated usage statistics

We do not use your data for advertising. We do not sell your data to any third party.

4. Invoice and Plate Photos

When you upload a photo for invoice scanning or plate recognition, the image is sent directly from your browser to the AI provider (Anthropic) for processing. The image is not stored on our servers. Extracted data (repair cost, vehicle details) is stored in your account database.

5. Data Storage and Security

Your data is stored in Supabase, a SOC 2 Type II certified cloud database provider. Data is encrypted at rest (AES-256) and in transit (TLS 1.3). Each account's data is isolated by row-level security — no account can access another's data.

We use Supabase's EU region for European customers on request.

6. Data Retention

Your data is retained for as long as your account is active. If you cancel, your data is kept in read-only mode for 30 days, then permanently deleted. You can request immediate deletion by emailing privacy@gofleetzy.com.

7. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

Access a copy of your personal data
Correct inaccurate data
Request deletion of your data ("right to be forgotten")
Export your data in machine-readable format (CSV export available in-app)
Object to processing or withdraw consent

To exercise any of these rights, contact privacy@gofleetzy.com. We will respond within 30 days.

8. Cookies

We use only essential cookies — session tokens required to keep you logged in. We do not use advertising, tracking, or analytics cookies. No cookie banner is required.

9. Third-Party Services

Supabase — database and authentication (supabase.com/privacy)
Anthropic — AI analysis (anthropic.com/privacy)
Stripe — payment processing (stripe.com/privacy)
NHTSA — free US vehicle plate/VIN lookup API (no personal data sent)

10. Contact

For any privacy questions: privacy@gofleetzy.com