Privacy Policy
How we handle personal information across the Fleet platform.
Last updated: 30 June 2026
This document is a general template provided for information only and does not constitute legal advice. Please have it reviewed by qualified counsel before relying on it.
Fleet ("Fleet", "we", "us" or "our") provides a fleet-operations software platform delivered through our web application, driver mobile app and administration console (together, the "Services"). This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have.
This Policy applies to information we process as a controller about visitors to our website and the individuals who use the Services. Where we process customer data on behalf of a business customer, we act as a processor and handle that data according to our customer agreement and the customer's instructions.
1. Information we collect
We collect information you provide directly, information generated through your use of the Services, and information from third parties.
- Account and profile data — name, work email, phone number, company, role and login credentials.
- Operational data you enter — vehicles, drivers, employees, trips, invoices, documents, photos and related records.
- Billing data — plan, billing contact and tax identifiers such as GSTIN; card and payment details are handled by our payment processors and are not stored by us.
- Usage and device data — IP address, browser and device type, pages viewed, features used, and diagnostic logs.
- Location data — where you enable trip tracking, the driver app collects GPS location to record trip routes.
- SMS / toll-message data (mobile app, optional) — where you use FASTag toll capture, the app reads FASTag/NETC/bank toll-deduction messages to extract the toll amount, vehicle registration, plaza, balance and date. On Android this can scan the device inbox (with your permission); on iOS the app cannot access the inbox, so you share or paste an individual toll message into the app. We do not read or collect OTPs, personal messages or any SMS unrelated to tolls. See section 2 for details.
- Cookies and similar technologies — used to keep you signed in, remember preferences and measure usage.
2. SMS and FASTag toll messages (mobile app)
Our mobile app includes an optional FASTag toll-capture feature that turns FASTag/NETC toll-deduction messages into vehicle expense records. It is off by default and only runs when a signed-in user chooses to use it. There are two ways a toll message reaches the app, depending on the platform:
Android — with your consent, the app can read messages in the device inbox to find toll deductions. This uses the Android SMS (READ_SMS) permission, which the app requests at the moment you start a scan; you can decline or revoke it at any time in device settings.
iOS — Apple does not allow apps to read the Messages inbox, and our app does not attempt to. Instead, you choose an individual toll message and share it into the app from the Messages app (or paste it). Only the message you select is provided to the app.
In both cases, parsing happens on the device and the app processes only recognised toll messages (those from FASTag, NETC and bank toll senders) to extract the toll amount, vehicle registration number, toll plaza, available balance and transaction date. Only those extracted fields — together with the original toll message text, which is used to detect and skip duplicates — are sent to your Fleet account, where an authorised reviewer confirms them into expenses.
We do not read, transmit or store one-time passwords (OTPs), personal or financial messages, or any message unrelated to tolls. We never sell this data, share it with third parties for their own purposes, or use it for advertising or to build user profiles. Toll records are retained as part of your account data and handled under the retention and security practices described below.
You can stop using the feature at any time, and on Android you can withdraw the SMS permission in your device settings; doing so does not affect any other part of the Services.
3. How we use information
We use information to:
- provide, operate, secure and improve the Services;
- authenticate users and prevent fraud or abuse;
- process payments and send billing and transactional messages;
- respond to support requests and communicate about the Services;
- generate aggregated, de-identified analytics; and
- comply with legal, tax and regulatory obligations.
4. Legal bases for processing
Where applicable law (such as the EU/UK GDPR) requires a legal basis, we rely on the performance of a contract, our legitimate interests in operating and improving the Services, your consent (which you may withdraw), and compliance with legal obligations. For users in India, we process personal data in accordance with the Digital Personal Data Protection Act, 2023 and applicable rules.
7. Data retention
We retain personal data for as long as your account is active and as needed to provide the Services, and thereafter as required to meet legal, tax, accounting and dispute-resolution obligations. When data is no longer needed, we delete or anonymise it.
8. Security
We use technical and organisational measures designed to protect personal data, including encryption in transit, database-level tenant isolation, access controls and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. International transfers
We may process and store information in countries other than where you are located. Where we transfer personal data across borders, we use appropriate safeguards consistent with applicable law.
10. Your rights
Subject to applicable law, you may have the right to access, correct, update, port or delete your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us using the details below. If we process your data on behalf of a business customer, please direct your request to that customer.
11. Children's privacy
The Services are intended for business use and are not directed to children. We do not knowingly collect personal data from children.
12. Changes to this Policy
We may update this Policy from time to time. When we make material changes, we will revise the "last updated" date and, where appropriate, provide additional notice.
13. Contact us
If you have questions about this Policy or our privacy practices, contact us at support@zyptr.com, or by post at Fleet, 550, SRR Towers, JP Nagar 9th Phase, Bengaluru 560062, India.