Security & privacy at FleetLink

Fleet data is sensitive: where your people are, who your customers are, and how your business runs. This page explains, in plain language, how we protect it.

Your company's data is walled off

Every record belongs to exactly one company, and the database itself — not just the app — enforces that. A user from one company can never read or change another company's data, even if there were a bug elsewhere. We test this directly.

Only people you add can join

Drivers cannot sign up on their own. A dispatcher must add them first, and the email or phone must match. Everyone else is rejected, and email verification is required before access is granted. Deactivating a driver cuts their access immediately.

Drivers' location is theirs to see

• Location is collected only between Start shift and End shift, and the database refuses location writes outside a shift.
• A banner in the driver app shows whenever location is being shared.
• The live position is deleted when the shift ends; detailed history is deleted on a schedule set by your plan (30–365 days).

Customer tracking links are minimal and short-lived

Links use a 256-bit random token (we store only a one-way hash), expire automatically, can be revoked, and show only the driver's first name, vehicle, status and — while they are on the way — position and ETA. No phone numbers, notes or other customers.

Proof of delivery stays private

Photos and signatures live in private storage and are opened through short-lived signed links, only for people in your company.

Payments

Payments are processed by Stripe. We never see or store card numbers. Billing webhooks are cryptographically verified.

You control your data

Owners and admins can download a full export. Owners can permanently delete the company and everything in it from Settings.

Engineering practices

• Encrypted connections (HTTPS) everywhere; secrets never reach the browser.
• Automated tests for tenant isolation, sign-up rules and billing run on every change.
• Rate limiting on public endpoints and sign-up; audit trail for job changes.
• Error monitoring that strips cookies and request bodies.

Found a vulnerability or have a security question? Contact us and choose Security / privacy.