Privacy Policy
FleetShift (“the App”) is operated by ChromaBlend Studios (“we”, “us”). This policy explains what data we process when you use FleetShift, why we process it, and your rights under applicable UK and EU data protection law (including UK GDPR / GDPR).
1. Who we are
Controller: ChromaBlend Studios.
Contact:
support@fleetshift.app
2. What we collect
Depending on your role and use of the App, we may process:
- Account data — name, email, organisation membership, role (driver or fleet manager).
- Vehicle & inspection data — plates, VINs (if provided), odometer readings, checklist results, defect notes, signatures, GPS at scan, timestamps.
- Media — camera-captured defect photos and signature images required for compliance evidence.
- Device & diagnostics — app version, crash/diagnostics signals, and connectivity state needed to operate offline sync.
- Billing metadata — subscription tier and status via Apple, Google, and RevenueCat (we do not store full payment card numbers).
3. Why we process data
- Provide vehicle walkarounds, fleet status, and grounding alerts.
- Maintain auditor-ready compliance records for your organisation.
- Authenticate users and enforce tenant isolation (org boundaries).
- Process subscriptions and enforce vehicle limits.
- Improve reliability and security of the service.
Legal bases typically include contract performance (providing the App to your organisation), legitimate interests (security, product integrity), and legal obligation where applicable.
4. Organisation (B2B) context
FleetShift is designed for organisations. Your employer or fleet operator may act as a controller for inspection records they generate through the App. We process such data to provide the service under their instructions where we act as a processor. Contact your organisation’s admin for workplace-specific policies.
5. Sharing
We use subprocessors necessary to run the product, which may include:
- Cloud backend and storage providers (e.g. Convex and related hosting).
- Authentication services.
- Mobile billing (Apple, Google, RevenueCat).
- Email/push delivery for alerts and transactional mail.
We do not sell personal data. We may disclose information if required by law or to protect rights, safety, and security.
6. International transfers
Data may be processed in the UK, EEA, or other regions where our providers operate. Where required, we use appropriate safeguards (such as standard contractual clauses).
7. Retention
We retain account and inspection data while your organisation’s account is active and as needed for compliance, dispute resolution, and legal requirements. Organisations may request export or deletion subject to legitimate retention needs.
8. Security
We apply technical and organisational measures appropriate to a fleet compliance product, including authentication, tenant isolation, and encrypted transport. No method of transmission or storage is perfectly secure.
9. Your rights
Subject to law, you may have rights to access, rectify, erase, restrict, or object to processing, and to data portability. You may lodge a complaint with your supervisory authority. Contact support@fleetshift.app to exercise rights. If you use FleetShift through an employer, we may redirect certain requests to that organisation.
10. Children
FleetShift is a workplace tool and is not directed at children under 16.
11. Changes
We may update this policy. Material changes will be reflected by the “Last updated” date and, where appropriate, in-app or email notice.
12. Contact
Privacy questions:
support@fleetshift.app
Support page: fleetshift.app/support