Privacy Policy

Last updated: February 28, 2026

1. Information We Collect

When you create an account, we collect your name, email address, and organization details. As you use the platform, we store data you provide including fuel receipts (images, amounts, dates, locations), trip records (origin, destination, mileage by state), order details, invoice information, and vehicle/fleet data.

2. How We Use Your Information

We use your data to:

  • Provide our services — fuel tracking, trip logging, IFTA worksheet generation, order management, and invoicing
  • Generate IFTA worksheets and compliance reports
  • Send transactional emails (invoices, account notifications)
  • Improve the platform and fix issues

We do not sell your personal information. We do not use your data for advertising. We do not share your data with third parties except as required to operate the service (e.g., cloud infrastructure providers).

3. Data Storage & Security

Your data is stored on Supabase infrastructure with row-level security (RLS) policies ensuring your data is isolated to your account. All data is encrypted in transit (TLS) and at rest. Receipt images are stored in private cloud storage buckets accessible only through authenticated requests from your account.

4. Cookies & Analytics

We use essential cookies for authentication and session management. We may use privacy-respecting analytics to understand usage patterns. We do not use third-party advertising cookies or trackers.

5. Your Rights

You have the right to:

  • Access all data associated with your account
  • Export your data at any time
  • Request correction of inaccurate data
  • Request deletion of your account and associated data

To exercise these rights, contact us at [email protected].

6. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription, your account enters read-only mode and your data remains available for viewing and export for 90 days. After 90 days, your data is permanently deleted from our systems. You may resubscribe at any time during the retention period to restore full access. See our Refund Policy for full details.

7. Third-Party Services

We use the following third-party services to operate the platform:

  • Supabase — database, authentication, and file storage
  • Vercel / Railway — application hosting
  • Resend — transactional email delivery

These providers are bound by their own privacy policies and process data only as needed to provide their services.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or an in-app notice. Continued use of the platform after changes constitutes acceptance.

9. Contact

For privacy-related questions, contact us at [email protected].