Privacy
Draft for legal review. This describes what the software actually does today. It is not yet a reviewed legal document, and the operating company’s contact details and retention periods still have to be added before launch.
Who is responsible for what
Transport companies use MoogeFleet to run their business. A company decides what customer, recipient and driver details it enters and is responsible for having a lawful reason to hold them. MoogeFleet stores and processes that data on the company’s behalf. For its own users’ accounts (login email, name), MoogeFleet is responsible.
What we store
- Accounts: email, name, and a password hash handled by our authentication provider.
- Business records entered by companies: customers, contacts and addresses; shipments with sender and recipient names, phone numbers and delivery addresses; trips, vehicles, drivers; expenses, invoices and payments.
- Files: receipts, proof of payment and delivery documents uploaded by users. They are private and opened only through short-lived links.
- Driver location: only when a driver taps “Start sharing my location” on a trip that is in transit. Positions are sent while the driver’s screen is open and stop when the driver stops sharing or the trip ends.
- Activity log: who changed what and when, with the IP address and browser name of the request.
- Public tracking: looking up a tracking number shows only a status timeline, the destination city and the receiver’s first name after delivery. No phone numbers, street addresses, prices or internal notes are shown. To limit guessing, we keep a short-lived counter of lookups per network address.
Who can see it
Each company’s data is separated in the database itself, so one company cannot read another’s. Within a company, access depends on role: drivers see only their own trips and shipments, without prices or customer finances. A small number of MoogeFleet platform administrators can see company records to run the service, review subscription payments and give support.
Where it is hosted
The database and file storage run on Supabase in the EU (Frankfurt). The website is served by Vercel. Text messages, if a company turns them on, go through the delivery provider configured by the platform; no messages are sent unless a provider is connected.
Your choices
Ask the company that holds your data to correct or delete it. If you are an account holder you can ask us to delete your account. Contact details and retention periods: to be added before launch.