Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

• Account Information: Name, email address, phone number, company name, job title, and other registration details you provide when creating an account.
• Payment Information: Billing address, credit card or payment method details processed securely through our third-party payment processor, Stripe, Inc. We do not store your full credit card number on our servers.
• Communications: Information you provide when you contact our support team, submit feedback, or correspond with us via email or chat.
• Fleet Configuration: Vehicle details, driver information, fuel card numbers, and operational preferences you enter into the Service.

1.2 Information Collected Automatically

• Fleet Location Data: GPS coordinates and location history of fleet vehicles transmitted through integrated telematics devices or mobile applications. This data is essential for providing route optimization and fuel guidance services.
• Vehicle Telemetry: Fuel consumption rates, engine performance metrics, odometer readings, idle time, speed data, and other vehicle diagnostic information received from onboard telematics systems and ELD devices.
• Usage Data: Information about how you interact with the Service, including pages visited, features used, search queries, click patterns, and session duration.
• Device & Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and referring URLs.
• Analytics Data: We use analytics services including Google Analytics and Mixpanel to collect aggregated usage statistics to help us understand how users interact with the Service and to improve our offerings.

1.3 Information from Third Parties

• Fuel Price Data: Real-time and historical fuel pricing information from fuel station networks, aggregators, and public sources.
• Telematics Providers: Data received from third-party telematics platforms and ELD providers that you authorize to share information with FuelAtlas.
• Business Partners: Information from fleet management companies, fuel card providers, and other integrated services.

1.4 FuelAtlas Driver Mobile App

In addition to the data described above, the FuelAtlas Driver mobile app (Android and iOS) collects and transmits the following information when a driver is signed in and actively using the app:

• Precise Location: The driver's device GPS coordinates are sampled while the app is in the foreground during an active trip, and transmitted in real time to webapi.fuelatlas.com over HTTPS so that dispatch and fuel guidance features can match the driver to upcoming fuel stops, routes, and zones. Location data is not collected while the app is closed or backgrounded; the app does not request background-location permission.
• Driver Account Information: The email or username, password (hashed server-side), driver name, phone number, driver's license number, company assignment, and selected vehicle that the driver supplies at sign-in or that their company provisions on their behalf.
• Push Notification Token: A Firebase Cloud Messaging (FCM) device token is generated by Google Play Services on the device and registered with our backend so we can deliver fuel-guidance alerts and route updates. The token does not identify the device hardware and can be reset by uninstalling the app.
• App Activity: Aggregated usage events are collected via Firebase Analytics to help us diagnose crashes and improve the app. The Android Advertising ID is explicitly excluded — the app does not use ads or ad-tracking identifiers.

Mobile data is transmitted to the following recipients: FuelAtlas servers (webapi.fuelatlas.com) for all features; Google Firebase for push delivery and analytics; Google Maps Platform for map tile rendering of the driver's current location and route; and our OSRM routing service (osrm.fuelatlas.com) for turn-by-turn directions. All connections use TLS.

The mobile app does not allow driver self-registration. Driver accounts are created and managed by the driver's employer. To request modification or deletion of driver-app data, contact your fleet administrator or email support@fuelatlas.com.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: To operate, maintain, and deliver the features of the Service, including fuel price comparisons, route-optimized fueling guidance, fleet analytics, and reporting.
• Account Management: To create and manage your account, process transactions, and send service-related communications.
• Personalization: To customize the Service to your fleet's specific needs, preferences, and operational patterns.
• Analytics & Improvement: To analyze usage trends, monitor performance, diagnose technical issues, and improve the Service's features and user experience.
• Communications: To send you updates, security alerts, billing notifications, and promotional materials (with your consent where required).
• Legal & Safety: To comply with legal obligations, enforce our Terms of Service, prevent fraud, and protect the rights, property, and safety of FuelAtlas, our users, and the public.

Legal Basis for Processing (GDPR): Where the GDPR applies, we process your personal data on the following legal bases: (a) performance of a contract (to provide the Service), (b) legitimate interests (to improve and secure the Service), (c) consent (for marketing communications and non-essential cookies), and (d) legal obligation (to comply with applicable laws).

3. Data Sharing & Disclosure

We do not sell your personal information as defined under the California Consumer Privacy Act (CCPA), the Colorado Privacy Act, the Virginia Consumer Data Protection Act, or comparable laws. We may share your information in the following circumstances:

• Service Providers & Sub-Processors: We share data with the third-party vendors listed in the table below. These providers are contractually obligated to protect your data and may only use it for the purposes we specify.
• Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.
• Legal Requirements: We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• With Your Consent: We may share your information with third parties when you have given us explicit consent to do so.
• Aggregated Data: We may share anonymized, aggregated data that cannot reasonably be used to identify you for research, industry benchmarking, and statistical analysis purposes.

3.1 Sub-Processors We Use

The following third parties process certain personal information on our behalf. Each is governed by its own privacy policy and contractual obligations to safeguard your data:

This list is updated when we add or remove a sub-processor. You may request the current list at any time by emailing privacy@fuelatlas.com.

4. Cookies & Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your interactions with the Service. For detailed information about the cookies we use and how to manage your preferences, please refer to our Cookie Policy.

We use the following categories of cookies: essential cookies (required for the Service to function), performance cookies (to analyze usage), functional cookies (to remember your preferences), and targeting cookies (for relevant advertising). You can manage your cookie preferences at any time through your browser settings or our cookie preference center.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Specific retention periods include:

• Account Data: Retained for the duration of your account plus thirty (30) days after account closure or subscription cancellation.
• Fleet Location & Telemetry Data: Retained for up to twenty-four (24) months from the date of collection, after which it is anonymized or deleted.
• Payment Records: Retained for seven (7) years as required for tax and financial reporting obligations.
• Usage & Analytics Data: Retained in identifiable form for up to twelve (12) months, after which it is aggregated and anonymized.
• Support Communications: Retained for up to three (3) years to provide ongoing service quality and resolve disputes.

Upon expiration of the applicable retention period, we will securely delete or anonymize your personal data. You may request early deletion of your data, subject to our legal obligations, by contacting us.

6. Your Rights

6.1 Rights Under the GDPR (EEA/UK Residents)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data, subject to certain legal exceptions.
• Right to Restrict Processing: You may request that we limit how we use your personal data in certain circumstances.
• Right to Data Portability: You may request to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to our processing of your personal data based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to file a complaint with your local data protection supervisory authority.

6.2 Rights Under the CCPA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected, the sources of collection, the business purposes for collection, and the categories of third parties with whom we share your information.
• Right to Delete: You may request the deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell your personal information. However, if this practice changes, you will have the right to opt out.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
• Right to Correct: You may request correction of inaccurate personal information that we maintain about you.
• Right to Limit Use of Sensitive Information: You may direct us to limit the use and disclosure of your sensitive personal information to purposes necessary to provide the Service.

To exercise any of these rights, please contact us at legal@fuelatlas.com or use the data request form in your account settings. We will respond to verifiable requests within thirty (30) days (GDPR) or forty-five (45) days (CCPA). You may also designate an authorized agent to make a request on your behalf.

7. Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256).
• Regular security assessments, penetration testing, and vulnerability scanning.
• Role-based access controls and the principle of least privilege for employee access to personal data.
• Multi-factor authentication and secure credential management for all internal systems.
• SOC 2 Type II compliance and regular third-party security audits.
• Incident response procedures and a dedicated security team to address potential breaches.

While we strive to protect your personal information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we are committed to notifying affected users and relevant authorities in the event of a data breach as required by applicable law.

8. Children's Privacy

The Service is not directed to individuals under the age of eighteen (18). We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected personal data from a child under 18, we will take immediate steps to delete such information. If you believe that a child under 18 has provided us with personal information, please contact us at legal@fuelatlas.com.

9. International Data Transfers

FuelAtlas is headquartered in the United States. If you access the Service from outside the United States, your personal data may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction.

Where we transfer personal data from the EEA or UK, we rely on the following safeguards:

• Standard Contractual Clauses (SCCs): We use EU-approved standard contractual clauses with our data processors to ensure adequate protection of transferred data.
• EU-U.S. Data Privacy Framework: Where applicable, we rely on the EU-U.S. Data Privacy Framework for transfers to certified U.S. organizations.
• Supplementary Measures: We implement additional technical and organizational measures, including encryption and access controls, to supplement the protections provided by the transfer mechanisms above.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. If we make material changes, we will provide prominent notice by email or through the Service at least thirty (30) days before the changes take effect. The "Last updated" date at the top of this policy indicates when the latest revisions were made.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data. Your continued use of the Service after any changes to this policy constitutes your acceptance of the updated terms.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For GDPR inquiries, you may also contact our EU representative: