Privacy Policy
Effective date: June 2, 2026
1. Who We Are
FLTControl ("FLTControl", "we", "our", "us") operates a fleet management software-as-a-service platform accessible at https://fltcontrol.com. We provide fleet operators and ride-sharing organisations with tools to manage drivers, vehicles, earnings, invoices, and payments. This Privacy Policy explains how we collect, use, store, and protect personal data when you use our platform.
2. Data We Collect
We collect the following categories of personal data:
- Account data: name, email address, phone number, password (hashed), and role (organisation admin, staff, driver).
- Organisation data: organisation name, contact details, billing information.
- Driver data: full name, phone number, date of birth, driving licence number and expiry, medical certificate expiry, profile photo, and licence scan images.
- Vehicle data: registration number, make, model, year, and assignment history.
- Financial data: invoice amounts, payment history, wallet balances, withdrawal records, and bank or mobile money account details used for payouts.
- Trip and earnings data: trip counts, gross earnings, platform fees, and net earnings — sourced from connected third-party platforms such as Uber.
- Usage data: IP address, browser type, pages visited, and actions taken within the platform, collected automatically for security and improvement purposes.
3. How We Use Your Data
- To provide, operate, and improve the FLTControl platform and its features.
- To manage driver onboarding, invoicing, and wallet/payment flows.
- To sync earnings and trip data from connected platforms (e.g. Uber) on behalf of authorised fleet operators.
- To process payments and disbursements via our payment service providers.
- To send transactional notifications (invoice reminders, payment confirmations, compliance alerts) via email, SMS, or WhatsApp.
- To detect fraud, unauthorised access, and ensure platform security.
- To comply with applicable laws and regulations.
4. Third-Party Integrations
FLTControl integrates with third-party services to deliver its functionality. By using features that rely on these services, you consent to data being shared with them as described below:
Uber (Uber Technologies, Inc.)
Fleet operators may connect their Uber fleet account to FLTControl via OAuth 2.0. When connected, we access driver profile data, trip history, and earnings data from the Uber Fleet API on behalf of the authorised fleet operator. Access is limited to the scopes explicitly granted during authorisation and can be revoked at any time from the FLTControl settings page. Uber's own privacy policy governs how Uber processes your data:uber.com/legal/privacy-notice.
ShikaCreators (Payment Gateway)
We use ShikaCreators to process mobile money deposits and driver disbursements. Payment details (mobile number, bank account) are transmitted securely to ShikaCreators solely to execute the requested transaction.
Communication Providers
We may use email, SMS, or WhatsApp messaging providers to deliver notifications. Only the minimum necessary data (recipient address or phone number and message content) is shared with these providers.
5. Data Retention
We retain personal data for as long as your account is active or as needed to provide services. Financial records (invoices, payment history, wallet transactions) are retained for a minimum of seven (7) years to comply with accounting and regulatory requirements. You may request deletion of your account and associated data by contacting us at support@fltcontrol.com. Certain data may be retained in anonymised or aggregated form after deletion.
6. Data Security
We implement industry-standard technical and organisational measures to protect your data, including encrypted storage of sensitive credentials, HTTPS-only communication, role-based access controls, and audit logging. OAuth tokens (e.g. Uber access tokens) are stored in encrypted form and never exposed in client-side code or logs. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but commit to promptly notifying affected users of any confirmed data breach.
7. Your Rights
You have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data, subject to legal retention obligations.
- Withdraw consent for third-party integrations (e.g. disconnect Uber) at any time from your account settings.
- Lodge a complaint with the relevant data protection authority in your jurisdiction.
To exercise any of these rights, contact us at support@fltcontrol.com.
8. Cookies
FLTControl uses only essential session cookies required for authentication and security. We do not use advertising or tracking cookies. No cookie consent banner is required as we do not use non-essential cookies.
9. Children
FLTControl is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes via email or an in-platform notice at least 14 days before the change takes effect. Continued use of FLTControl after the effective date constitutes acceptance of the updated policy.
11. Contact
For any privacy-related questions or requests, please contact:
© 2026 FLTControl. All rights reserved.