Privacy Policy

1. Information We Collect

Depending on how the Services are used, we may collect:

• Account & business data — company name, GSTIN/PAN, address, contact name, email, and mobile number provided during onboarding;
• Rider data uploaded by clients — name, phone, client rider IDs, and, where provided, bank account and PAN details for payout;
• Operational data — orders, delivery status, attendance/selfie check-ins, and GPS location captured only during an active shift;
• Usage & device data — log data, IP address, and basic device information for security and diagnostics.

2. Roles

For rider and customer personal data uploaded by a client, the client is the data controller and FleetOS acts as a processor, handling that data only to provide the Services and per the client’s instructions. For account data of the client’s own users, FleetOS acts as controller.

3. How We Use Information

We use information to operate and secure the Services, including to:

• Authenticate users and verify email/mobile via OTP;
• Ingest orders, dispatch riders, and provide live tracking;
• Compute payouts from client sheets and rate cards, and support TDS/compliance reporting;
• Provide support, prevent fraud and abuse, and maintain and improve the platform.

4. Sensitive Data & Minimisation

Bank account and PAN details are treated as sensitive. They are used solely for payout processing, masked in rider-facing views, never displayed in logs, and access is restricted to authorised roles. Rider GPS tracking hard-stops at shift end (selfie check-out) and is not collected outside active shifts.

5. Location Data

Live location is collected from the rider application only during an active delivery shift to enable dispatch and tracking, and stops when the shift ends. It is not used to track riders outside working hours.

6. Sharing & Disclosure

We do not sell personal data. We may share information with: infrastructure and communication providers (e.g. SMS/email) strictly to deliver the Services; the relevant client for their own data; and authorities where required by law. All processors are bound by appropriate confidentiality and security obligations.

7. Storage & Security

FleetOS is self-hosted on infrastructure we control. We apply encryption in transit, role-based access control, tenant isolation so one client cannot access another’s data, and masking of sensitive fields. No method of transmission or storage is completely secure, but we work to protect information using reasonable safeguards.

8. Data Retention

We retain information for as long as an account is active and as needed to provide the Services, comply with legal, tax, and payroll obligations, resolve disputes, and enforce agreements. On termination, clients may export their data for a reasonable period, after which it may be deleted or anonymised.

9. Your Rights

Subject to applicable law, individuals may request access to, correction of, or deletion of their personal data. Because much of the data is uploaded and controlled by clients, requests from riders or customers should be directed to the relevant client; we will support clients in responding to such requests.

To request deletion of a FleetOS Rider or dashboard account, use the account deletion page at https://fleetos.wheeley.in/delete-account or email support@wheeley.in. Verified requests are processed within 30 days, subject to legal retention (e.g. payout / TDS records).

10. Cookies & Sessions

We use strictly necessary cookies/local storage to keep you signed in and to remember basic preferences (such as theme). We do not use these for third-party advertising.

11. Changes to this Policy

We may update this Policy from time to time. The “Last updated” date reflects the current version; material changes will be communicated where reasonably practicable.

12. Contact

For privacy questions or requests, contact us at support@wheeley.in.