Privacy Policy

1. Information We Collect

Grand Fleet Logistics LLC ("Grand Fleet", "we", "us") collects the following categories of personal information:

• Account information: name, email address, phone number, profile photo
• Booking information: pickup and drop-off addresses, scheduled time, vehicle preference, flight number
• Payment information: billing address, last four digits of card (full card data is processed by Stripe and never stored on our servers)
• Location data: real-time GPS coordinates during active trips (drivers only), pickup/drop-off coordinates
• Device information: device type, operating system, push notification token
• Usage data: app interactions, trip history, preferences, ratings

2. How We Use Your Information

• To match passengers with drivers and fulfill bookings
• To process payments and issue invoices
• To send booking confirmations, status updates, and receipts
• To monitor driver proximity and dispatch eligible drivers
• To calculate fares and apply dynamic pricing
• To conduct four-way fiduciary audits on completed trips
• To improve service quality and driver scoring
• To comply with legal obligations

3. Location Data

Passengers: We collect your pickup and drop-off location to fulfill your booking. We do not continuously track passenger location outside of active trips.

Drivers: We collect real-time GPS location during active sessions to enable proximity-based dispatch and live trip tracking. Location data is processed via HERE Maps and stored in our append-only location archive for audit purposes. Background location access is used only when the driver app is active and the driver is set online.

4. Payment Processing

All payment card data is processed by Stripe, Inc. Grand Fleet never stores, transmits, or logs raw card numbers, CVVs, or magnetic stripe data. Stripe is a PCI-DSS Level 1 certified payment processor. We store only the Stripe payment intent ID and last four digits for display purposes.

5. Data Sharing

We share your information only with:

• Stripe: payment processing
• HERE Maps: real-time GPS tracking and geofencing
• Supabase: secure cloud database and authentication
• Sentry: error monitoring (anonymized)
• n8n: workflow automation for notifications and invoicing

We do not sell your personal information to third parties.

6. Data Retention

We retain account data for the duration of your account and up to 7 years after closure for tax and audit compliance. Trip GPS data is retained for 3 years. Payment records are retained for 7 years per IRS requirements. You may request deletion of non-legally-required data at any time.

7. Your Rights

Depending on your jurisdiction, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your personal information (subject to legal retention requirements)
• Opt out of non-essential communications
• Lodge a complaint with a supervisory authority (GDPR users)

To exercise these rights, contact us at privacy@grandfleets.com.

8. Security

We implement industry-standard security measures including TLS 1.2+ for all data in transit, row-level security on all database tables, httpOnly cookie authentication, and immutable audit logging on all payment and booking events. We conduct regular security audits against OWASP Top 10.

9. Children's Privacy

Grand Fleet services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors.

10. Changes to This Policy

We may update this policy periodically. We will notify you of material changes via email or in-app notification at least 30 days before they take effect.

11. Contact

Grand Fleet Logistics LLC
Atlanta, Georgia, USA
privacy@grandfleets.com
legal@grandfleets.com