Legal

Privacy Policy

Effective: February 24, 2026
Elevera Studio
fleetelevera.com
1

Introduction

Who we are and what this policy covers

Elevera ("we", "us", or "our") operates the Fleet by Elevera web platform at fleetelevera.com and the Fleet Go mobile application (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

Short version

We collect data to run a fleet management platform. We don't sell your data. You can request deletion at any time.

2

Information We Collect

Personal data, usage data, location, and media

Personal Information

  • Name and email address
  • Phone number
  • Organization and role
  • Authentication credentials

Usage Data

  • Device type and OS
  • Unique device identifiers
  • Push notification tokens
  • App usage patterns
Data TypeSourcePurpose
Location (foreground)Fleet Go mobile appRecord where an incident occurred
Location (background, shift only)Fleet Go mobile appLive location to dispatcher during active shifts — opt-in per driver, 7-day retention
Camera / PhotosFleet Go mobile appInspection photos, damage docs, proof of delivery
QR scan dataFleet Go mobile appVehicle identification
Crash logsCrashlytics SDKBug detection and fixes

Short version

We collect only what we need to run fleet operations. Background location is collected only when your organization enables live tracking AND you explicitly opt in in the app — it stops automatically when your shift ends.

3

How We Use Your Information

The purposes for which we process your data

  • Provide, maintain, and improve the Service
  • Authenticate users and manage accounts
  • Process incident reports, inspections, and job records
  • Send push notifications for shifts, jobs, and incidents
  • Monitor usage to improve user experience
  • Detect, prevent, and address technical issues
4

Third-Party Services

External providers that process data on our behalf

ProviderRoleData Involved
SupabaseDatabase, auth, file storageAll user and operational data
Firebase Cloud MessagingPush notificationsDevice token, platform info
Firebase CrashlyticsCrash reportingDevice info, crash logs
VercelWeb hosting & built-in analyticsPage views, performance metrics (cookieless)
Google Tag Manager + Google Analytics 4Tag management & web analytics on marketing/auth pagesTruncated IP, page views, click & scroll events, device/browser info, anonymous identifiers via cookies

Google LLC (United States) is the processor for Google Tag Manager and Google Analytics 4 under the EU-U.S. Data Privacy Framework. See Google's privacy policy for details. Google Analytics 4 only loads on our marketing and authentication pages, never inside the authenticated Fleet workspace.

5

Cookies & Tracking Technologies

What we store on your device and how to control it

We use cookies and similar technologies to keep you signed in, remember your preferences, and — with your consent — measure how visitors discover and use our marketing pages. You can change your choices at any time using the "Manage preferences" link in the cookie banner.

Always on

Strictly necessary

Required for the Service to work — signing in, keeping your session, remembering your language, and protecting against abuse. These cannot be disabled.

Consent required

Analytics & preferences

Help us understand which pages are useful and which features people find. Only loaded after you accept them in the cookie banner.

CookieProviderPurposeLifetimeCategory
sb-*-auth-tokenSupabase (Elevera)Keeps you signed in to Fleet1 yearStrictly necessary
user_cacheEleveraCaches role and org for faster navigation5 minutesStrictly necessary
NEXT_LOCALEEleveraRemembers your selected language (en/de)1 yearStrictly necessary
Consent banner cookieConsent banner providerRemembers your cookie choices6–12 monthsStrictly necessary
_gaGoogle Analytics 4Distinguishes unique visitors2 yearsAnalytics (consent)
_ga_<container>Google Analytics 4Persists session state for GA42 yearsAnalytics (consent)
_gidGoogle Analytics 4Distinguishes users for 24 hours24 hoursAnalytics (consent)

How to manage your choices

  • Use the "Manage preferences" link in our cookie banner, or the Cookie preferences link in the site footer, to change your choices at any time.
  • Your browser also lets you block or delete cookies. Disabling strictly necessary cookies will break sign-in and core features.
  • You can opt out of Google Analytics on every site using Google's opt-out browser add-on.

Short version

Sign-in cookies always on. Analytics cookies only after you accept them. You can change your mind anytime via the cookie banner or the footer link.

6

Data Sharing

Who can see your data and when

We do not sell, trade, or rent your personal information to third parties. Your data is shared only with the third-party providers listed in Section 4, solely for the purpose of operating the Service.

Data within the Service is visible to authorized members of your organization based on their assigned role:

Owner
Full organization data
Dispatcher
Fleet operations data
Driver
Own shifts & jobs
Admin
System configuration

Short version

We never sell your data. Visibility within your organization is role-based and access-controlled.

7

Data Retention

How long we keep your information

We retain your personal information for as long as your account is active or as needed to provide the Service. Incident reports, inspection photos, and operational records are retained according to your organization's settings and requirements.

You may request deletion of your account and associated personal data at any time by contacting us at the address in Section 12. Operational records tied to your organization may be retained by the organization owner after account deletion.

8

Live Location Tracking

Real-time location sharing during active shifts (opt-in)

When your organization enables live location tracking and you explicitly consent in the Fleet Go mobile app, the app periodically transmits your GPS position, speed, and heading to your dispatcher during active shifts only.

AspectDetail
What is collectedGPS coordinates (lat/lng), accuracy, heading, speed, timestamp
WhenOnly during active shifts. Streaming starts on shift start and stops automatically on shift end.
RecipientsDispatchers and owners of the same organization. We do not share this data with any third party.
Retention7 days raw history. Then automatically deleted.
Legal basisConsent — Art. 6(1)(a) GDPR. You may withdraw consent at any time.
How to withdrawIn the mobile app: Profile → Privacy → Live location → Revoke. Your dispatcher map chip disappears immediately.
Organization opt-outYour organization owner can disable live tracking for the whole organization in Settings → Mobile app → Live location tracking.

For drivers in Germany, Austria, and Switzerland: live location tracking may be subject to works-council (Betriebsrat) co-determination under § 87 Abs. 1 Nr. 6 BetrVG. Your employer is responsible for compliance.

Short version

No background tracking unless your org turns it on AND you opt in. One tap revokes consent and removes you from the live map instantly.

8

Data Security

Technical and organizational measures we take

🔒
HTTPS everywhere
All data in transit is encrypted via TLS.
🔑
Secure token storage
Auth tokens use platform-secure storage on mobile.
🛡️
Row-level security
Database enforces per-role access at the query level.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

9

Your Rights

What you can request and how

Access

Request a copy of the personal data we hold about you.

Correction

Ask us to fix inaccurate or incomplete data.

Deletion

Request erasure of your personal data.

Portability

Receive your data in a portable, machine-readable format.

Withdraw Consent

Opt out of data processing where consent was the basis.

Objection

Object to processing of your data in certain circumstances.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

10

Children's Privacy

Age restrictions on the Service

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected such information, please contact us immediately so we can delete it.

11

Changes to This Policy

How we notify you of updates

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the effective date at the top. For significant changes, we may also send an in-app notification or email.

Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

12

Contact Us

Get in touch with questions or requests

Data Controller

Elevera Studio, obrt za računalno programiranje, vl. Petar Markota
Ulica Stjepana Draganića 9, 10000 Zagreb, Croatia
OIB 42932294974 · [email protected] · +385 99 833 4349

Full legal disclosure in our Impressum.

Email
[email protected]

We respond within 30 days for data-related requests.

Website
fleetelevera.com

Fleet management platform by Elevera Studio.

Privacy Policy | Fleet by Elevera