Privacy Policy
This policy explains how FleetOps Pro ("FleetOps", "we", "us") collects, uses, shares and protects personal data when you visit www.fleetops-pro.com or use the FleetOps Pro application (the "Service"). We process personal data in line with the Kingdom of Saudi Arabia's Personal Data Protection Law (PDPL) and its Implementing Regulations.
1. Who we are
FleetOps Pro is a fleet operations management platform serving businesses in Saudi Arabia. For questions about this policy or your personal data, contact us at privacy@fleetops-pro.com.
2. Our role vs. our customers' role
FleetOps Pro is used by businesses ("Customers") to manage their vehicles, drivers and staff.
- Customer workspace data (vehicles, drivers, transfers, cost centers, GPS positions, users a Customer invites): the Customer decides what is entered and why, and is the controller. We process it on the Customer's behalf as a processor, under their instructions. If you are a driver or employee of a Customer, please direct requests about your data to that company first; we will assist them.
- Account, website and enquiry data (your sign-up details, sales enquiries, website use): we are the controller.
3. Data we collect
| Category | Examples | Source |
|---|---|---|
| Account & identity | Name, work email, company name, role, hashed password, phone (optional) | You, or your company admin when inviting you |
| Fleet & operational | Vehicle details and plates, assignments, transfers, maintenance, compliance documents, cost centers | Customer users |
| Location | Vehicle GPS positions, only when a Customer connects a GPS provider | Customer's GPS integration |
| Activity & audit | Actions taken in the app (who changed what and when) | Generated by the Service |
| Enquiries | Details sent through our contact or workspace request forms | You |
| Technical | IP address, browser type, device, request logs | Automatically, via our hosting providers |
We do not intentionally collect sensitive data as defined under the PDPL (e.g. health, religious, genetic or credit data). Please do not upload it to the Service.
Payments: online billing is not yet active. When it launches, card payments will be handled by a licensed payment processor; we will not store full card numbers, and this policy will be updated before it goes live.
4. How we use it
- Create and run your account and workspace, and authenticate you securely
- Provide the Service's features: fleet tracking, transfers, maintenance, compliance alerts, reporting
- Send service emails: sign-up confirmation, sign-in links, password resets, invitations, important account notices
- Respond to enquiries and support requests
- Keep the Service secure: preventing fraud and abuse, keeping audit logs, diagnosing errors
- Meet legal and regulatory obligations
We do not sell personal data, and we do not use Customer workspace data for advertising.
5. Legal basis
We process personal data where it is necessary to perform our agreement with you or your company; where it is needed to meet a legal obligation; where it serves our legitimate interests (such as securing the Service), provided those interests do not override your rights; or with your consent, which you can withdraw at any time.
6. Who we share it with
We share data only with service providers that help us run the Service, under contracts that require them to protect it:
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication and server functions |
| Vercel | Website and application hosting |
| Resend and Zoho Mail | Sending and receiving email |
| FormSubmit | Delivering contact and workspace request forms to our inbox |
| GPS providers chosen by the Customer | Supplying vehicle positions, only where the Customer connects one |
We may also disclose data where required by law, by a court or competent authority in the Kingdom, or to protect the rights and safety of our users or the public. If FleetOps Pro is involved in a merger or acquisition, data may transfer to the successor, which will remain bound by this policy.
7. International transfers
Where personal data is transferred outside the Kingdom, we do so in line with the PDPL's transfer rules: we limit transfers to what is necessary to provide the Service, rely on providers with recognised security certifications, and use contractual safeguards to keep the protection of your data at the level required by Saudi law.
8. How long we keep it
- Workspace data: for as long as the Customer's account is active. After closure, deleted within 90 days, except where we must keep it longer by law.
- Audit logs: retained with the workspace to support accountability and security.
- Enquiries: up to 24 months after our last contact.
- Technical logs: short-term, according to our hosting providers' retention periods.
9. Security
We use encryption in transit (HTTPS), encrypted storage, hashed passwords, and strict per-company data isolation enforced at the database level, so one Customer cannot access another's data. Role-based access controls limit what each user can see and change, and key actions are recorded in an audit log. No system is completely secure, but if a data breach affects your personal data, we will notify the relevant authority and affected people as the PDPL requires.
10. Your rights
Under the PDPL, you have the right to:
- Be informed about how your data is collected and used (this policy)
- Access your personal data and obtain a copy in a readable format
- Correct data that is inaccurate, incomplete or out of date
- Delete data we no longer need, subject to legal retention requirements
- Withdraw consent where processing relies on it
To exercise these rights, email privacy@fleetops-pro.com. We may need to verify your identity, and we will respond within the period set by the PDPL. If your data sits in a Customer's workspace, we will refer your request to that company or act on its instructions.
11. Cookies & local storage
We do not use advertising or third-party tracking cookies. The application uses your browser's local storage only to keep you signed in and remember basic preferences. Clearing your browser data will sign you out.
12. Children
The Service is for businesses and is not directed at anyone under 18. We do not knowingly collect personal data from children.
13. Changes to this policy
We may update this policy as the Service changes (for example, when online billing launches). We will post the new version here with an updated date and, for significant changes, notify account holders by email.
14. Contact & complaints
Questions or concerns: privacy@fleetops-pro.com. If you are not satisfied with our response, you may file a complaint with the Saudi Data & AI Authority (SDAIA), the competent authority under the PDPL.