Privacy Policy

Fleetoz Solutions Pvt Ltd ("Fleetoz", "we", "us" or "our") is a subsidiary of Aurafox Solutions Pvt Ltd. We operate the Fleetoz platform — a corporate ground transport operating system used by businesses, fleet operators, car rental companies and travel platforms. Our registered office is in India. For privacy questions, contact manas@fleetoz.com.

This Privacy Policy applies to the Fleetoz web application, the following mobile applications for iOS and Android, APIs, and any related services (collectively, the "Services"):

• Carva passenger app — for passengers booking and tracking rides.
• CommutecGo Passenger app — for employee and commuter transport bookings.
• Fleetoz Hero vendor app — for fleet operators, car rental companies and vendors managing trips and vehicles.
• Fleetoz Driver app — for drivers accepting and fulfilling trips.
• Fleetoz web dashboard — for corporate administrators, travel desks and finance teams.

This policy explains how we collect, use, store, share and protect personal information when you use our Services or otherwise interact with us.

We collect the following categories of information, depending on how you use the Services:

• Account and profile information — name, email address, phone number, employer, job title, profile photo and credentials used to create or access an account.
• Booking and trip information — pickup and drop-off locations, trip dates and times, route data, vehicle and driver details, passenger names and any special instructions.
• Location data — real-time GPS location of vehicles during trips, with user consent where required by your device settings. Employees and admins may also share location for nearby pickup coordination.
• Device and usage data — device type, operating system, IP address, app version, crash logs, performance data and pages or features you interact with.
• Communications and support — messages sent through the app, support tickets, feedback, and records of calls or emails with our team.
• Payment and billing information — billing address, GST or tax identifiers, transaction history, and invoice details. We do not store full credit card numbers; payment processing is handled by regulated payment providers.
• Corporate account data — company name, employee lists, cost centres, approval workflows, and policy rules configured by your organisation.

We use the information we collect to:

• Provide, operate and maintain the Services, including booking, dispatch, tracking and billing;
• Verify trips, generate digital duty slips, process invoices and reconcile payments;
• Ensure safety and security, including SOS features, driver verification and fraud prevention;
• Communicate with you about bookings, updates, support and marketing (where permitted);
• Improve our products, analyse usage trends, and fix bugs and crashes;
• Comply with legal obligations, enforce our terms, and protect our rights.

We process personal information on the basis of performance of a contract, legitimate interests, consent (where required), and compliance with legal obligations. For example, trip location data is processed to fulfil the transport contract; analytics and crash reporting are processed on the basis of legitimate interest in improving service reliability.

We do not sell personal information. We share information only with the parties described below, and under appropriate confidentiality and security obligations:

• Within your organisation — employees, travel desks, finance teams and administrators authorised by your employer can view relevant trip and billing data.
• Transport providers — fleet operators, car rental companies and drivers receive trip details needed to fulfil a booking.
• Service providers — we use third-party services for hosting, analytics, crash reporting, email delivery, maps, and payment processing. Current subprocessors include Google Analytics for usage analytics. A complete list is available on request.
• Legal and regulatory authorities — when required by law, court order, or to protect safety, rights or property.

Our primary data hosting and processing infrastructure is located in India. Some subprocessors may process data in other countries. Where personal information is transferred outside its country of origin, we rely on appropriate safeguards such as standard contractual clauses, adequacy decisions, or other lawful transfer mechanisms.

We implement technical and organisational measures designed to protect personal information from unauthorised access, alteration, disclosure or destruction. These include encryption in transit using TLS, access controls, role-based permissions, audit logging, and regular security reviews. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain personal information for as long as necessary to provide the Services, fulfil the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce agreements. When information is no longer needed, we delete or anonymise it in accordance with our retention schedule. Billing and trip records are typically retained for the period required by applicable tax and accounting laws.

Depending on your location, you may have rights to access, correct, update, delete, restrict, or port your personal information, or to object to certain processing. To exercise these rights, contact manas@fleetoz.com. We will respond within the timeframe required by applicable law and may need to verify your identity before acting on a request.

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us and we will delete it promptly.

Our website and applications use cookies and similar technologies to operate the Services, remember preferences, understand usage, and improve performance. You can manage cookie preferences through your browser or device settings. Analytics cookies help us understand how users interact with the Services and are not used to identify you personally.

This policy is designed to meet the privacy disclosure requirements of the Apple App Store and Google Play Store, including the Google Play Data safety section and Apple's App Store privacy details. We review the data types and purposes we declare in the stores whenever the app or its data practices change.

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised effective date. We encourage you to review this page periodically. Continued use of the Services after changes constitutes acceptance of the revised policy.

If you have questions, concerns, or requests about this Privacy Policy or our data practices, please contact:

Fleetoz Solutions Pvt Ltd
A subsidiary of Aurafox Solutions Pvt Ltd
Email: manas@fleetoz.com
Locations: Pune · Dubai