Privacy Policy

1. Introduction

BuildFlow ("we", "our", or "us"), operator of the 4fleet chauffeur management platform, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web platform, the 4Fleet Driver mobile application, and related services.

Data Controller (GDPR / RODO): BuildFlow, a business registered in the Republic of Poland (NIP: 6711821792, REGON: 364919712), with registered office at ul. 1 Maja 13/1, 78-100 Kołobrzeg, Poland. For all data protection matters, contact support@4fleet.io.

2. Information We Collect

We collect information you provide directly to us, including:

• Account information (name, email, company name, phone number)
• Business data (vehicles, drivers, bookings, clients)
• Payment information (processed securely via Stripe)
• Communications (emails, support requests, in-app messages with dispatch)
• Usage data (how you interact with our platform)
• Photos you upload in the 4Fleet Driver app (trip proof photos, expense receipts)
• Location data collected by the 4Fleet Driver app during an active, driver-initiated sharing session (see Section 3)

3. Location Data (4Fleet Driver Mobile App)

The 4Fleet Driver app lets chauffeurs share their live location with their company's dispatch team during an active trip. Location collection works as follows:

• You start it: precise location is collected only during a sharing session that you start for a specific trip. It stops when the trip ends or when you turn sharing off.
• Background collection: while a sharing session is active, the app collects location data even when the app is closed or not in use, so your dispatcher can see the vehicle position for the duration of the job. Location is never collected outside an active sharing session.
• Purpose: real-time vehicle tracking for dispatch coordination during the trip. We do not use location data for advertising, and we never sell it.
• Who can see it: only the chauffeur company that operates your driver account (your dispatcher). Location is not shared with other third parties.
• Retention: location history is automatically deleted after 7 days.
• Your controls: you can stop sharing at any time in the app, and you can revoke the location permission in your device settings.

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Show your vehicle's live position to your company's dispatch team during an active trip (4Fleet Driver app)
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Provide AI-powered features (quotes, suggestions, analytics)
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent or unauthorized activity

5. Data Sharing

We do not sell your personal information. We may share your information with:

• Service providers: Companies that help us operate (Stripe for payments, Google for maps, and Anthropic for AI features)
• Business partners: With your consent, for partner network features
• Your company: if you use the 4Fleet Driver app, your trip, status, and location data is visible to the chauffeur company that operates your driver account
• Legal requirements: When required by law or to protect our rights

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• 256-bit SSL encryption for all data in transit
• Encrypted data storage at rest
• Regular security audits and monitoring
• Access controls and authentication requirements
• Daily automated backups

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Driver location history is automatically deleted after 7 days. You can request deletion of your data at any time, via account deletion in the app or by emailing support@4fleet.io. After account closure, we retain data for 30 days before permanent deletion, unless legally required to retain it longer.

8. Your Rights (GDPR)

If you are in the European Economic Area or the United Kingdom, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing of your data
• Data portability (export your data)
• Withdraw consent at any time

To exercise these rights, contact us at support@4fleet.io.

9. Cookies

We use essential cookies to operate our platform (authentication, preferences). We may use analytics cookies with your consent to understand how you use our service. You can control cookie preferences in your browser settings.

10. Third-Party Services

Our platform integrates with third-party services including Stripe (payments), Google Maps (routing), Firebase (authentication), and Anthropic (AI features). Each has their own privacy policy governing your data.

11. Google User Data and Limited Use

When you sign in with Google, 4fleet uses Google's OAuth to authenticate you. We request only the basic sign-in scopes needed to create and secure your account:

• email - your Google account email address, used to identify your 4fleet account and send account-related notifications.
• profile - your basic profile information (name, profile picture) to personalise your account.

4fleet does not access your Gmail or any Google mailbox. To send and receive mail in 4fleet you connect a mailbox directly over IMAP/SMTP (including Gmail using a Google App Password); those credentials are stored encrypted and are never shared with Google APIs.

We access Google Sign-In data only to authenticate your account, store it encrypted, never sell it, and never use it for advertising or to train generalised AI/ML models. You can disconnect Google Sign-In at any time in Settings, which revokes 4fleet's access.

Limited Use: 4fleet's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Continued use of our service after changes constitutes acceptance.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: