Privacy Policy

Rarestep, Inc. trading as “Fleetio” (“Fleetio”, “we”, “us”, or “our”) has created this privacy policy (“Policy”) to inform you (“you” or “your”) of when and how your Personal Information is collected, used, disclosed and protected when you use our Service.

You acknowledge that this Policy is to be read in conjunction with our Terms of Service (available at https://www.fleetio.com/terms) or any other agreement entered into between you and us (“Agreement”), and that by accessing and using our websites, our apps, or services (collectively, “Service”) , you agree to be bound by the Agreement as well as this Policy.

We reserve the right to update and change this Policy from time to time and will provide notice to you by changing the “last updated” date above. All changes are prospective only. It is your obligation to be familiar with the most current version of the Policy. Continued use of the Service after any such changes shall constitute your acknowledgment of and consent to such changes. You can review the most current version of the Policy at any time at https://www.fleetio.com/legal/privacy. If we change the Policy in a material way, we will provide appropriate notice to you. If you are using the Service on behalf of a company or other legal entity, you represent and warrant that you have the authority to bind that company or other legal entity to this Policy, in such event, “You” will refer and apply to that company or other legal entity.

About Us

Fleetio is a company incorporated in the United States of America that provides its software as a service which enables its customers to track, analyze and improve their fleet operations

1. Notice at Collection of Personal Information

   1. We collect the categories of Personal Information identified below. As indicated in the chart, some of these categories we “sell” or “share” (as such terms are defined in California law) for marketing purposes to business partners and third parties, such as data analytics providers, advertising technology vendors, and social media platforms as described in this Policy. However, we do not “sell” or “share” Personal Information (as those terms are defined under California law) that we process on behalf of our Customers (as defined below). Further, we do not knowingly sell or share personal information about persons under the age of 16.

   2. The Business and Commercial Purposes for Which We Collect and Use Your Personal Information

      • To provide you with our Service

      • To process your payments and fulfill your orders

      • To enter into the Agreement with the organization you represent

      • To create, maintain, customize, and secure your account with us

      • To communicate with you, including to respond to your inquiries/requests and request feedback from you, and to send you important updates and messages about changes to our Service, this Policy, and/or other applicable terms and conditions

      • To review the usage and maintain the operation of our Service

      • To conduct analysis and develop and/or improve our products and Service

      • To monitor, protect, and maintain the security and integrity of our Service and our business, such as protecting against and preventing fraud, unauthorized transactions, claims and other liabilities

      • To comply with applicable laws and regulations and respond to lawful requests and communications from law enforcement and other government officials

      • To protect our rights, privacy, safety, property and/or those of others

      • To fulfill any other purpose for which you provide your Personal Information or as explained to you at the point of information collection

      • To provide you with customized content or targeted offers

      • To send you information, newsletters, and marketing/promotional material from us and, or on behalf of, our marketing partners and affiliates

   3. Retention

      • We will retain your Personal Information for as long as reasonably necessary to provide you with our Service that you request, for marketing purposes unless you opt out as described in our Policy, or otherwise where permitted or required in accordance with applicable law. We will retain and use your Personal Information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. What this means in practice will vary between different types of information, and when we consider our approach we take into account ongoing business or legal needs for the information, for example in relation to tax, health and safety, and potential or actual disputes or investigations.

2. What information do we process?

   1. We collect, use and disclose two types of information: Personal Information and Non-Personal Information.

   2. “Personal Information” is information that is directly associated with a specific person or entity, including but not limited to, names, email addresses, usernames, passwords, and payment information. When we process your Personal Information, we do so in accordance with this Policy.

   3. “Non-Personal Information” is information we collect or compile that by itself cannot be directly associated with a specific person or entity. We may compile “Non-Personal Information” into “Aggregate Data”. This Policy in no way restricts or limits our collection and use of Non-Personal Information and Aggregate Data, and we may share Non-Personal Information and Aggregate Data that we collect or compile with third parties for various purposes, including to help us better understand our customer needs and improve our Service, and for advertising and marketing purposes.

3. Whose personal information do we process?

   1. We collect and process your Personal Information when you are a visitor to our website (as well as any microsites and apps) (“Visitor”) or when you are a customer or user of our software (“Customer”).

   2. Our Service is not targeted at children nor do we allow children to use our Service. We will not knowingly process the Personal Information of children.

4. How do we collect your personal information?

   1. Most of the Personal Information we process about you is information that you knowingly provide to us (i.e., Personal Information that you provide directly to us). However, in some instances, we process Personal Information that we are able to infer about you based on other information you provide to us (such as supporting documents) or on our interactions with you, or Personal Information about you that we receive from a third party, which may include the following third-party sources:

      1. Our Business Partners, including companies that co-sponsor our promotions.

      2. Our Marketing/advertising and analytics partners, including online advertising networks and analytics providers.

      3. Social Media Platforms (note that the information we receive from such platforms is dependent upon their policies and your settings on the platforms).

      4. Other Companies that provide Personal Information to supplement what we already know about you, including data aggregators.

   2. We shall also automatically receive certain types of information when you interact with our Service through a variety of technologies, such as cookies, tags, SDKs or scripts.

   3. We may combine Personal Information that we receive from various sources. For example, we may combine Personal Information that we collect from you offline with Personal Information we collect from you through our Service. Similarly, we may combine Personal Information that we receive from third parties with Personal Information we already have about you. We use, disclose, and protect combined Personal Information as described in this Policy.

5. What personal information do we process?

   1. Visitor

      1. When you visit our website, we may collect your computer’s IP address, access times, your browser type and language, and referring website addresses. We may also collect information about the type of operating system you use, your account activity, and files or pages accessed or used by you. We use cookies to process information, which may include your Personal Information. Please refer to the “COOKIE POLICY” section below for more information about what cookies we use and why.

      2. We use session-replay services to analyze how you use our website. Session-replay services record a video replay of your interactions with our website, including clicks, mouse movements, scrolls, and typing. We use session-replay data to help us identify problems with our website and improve how it operates.

      3. When you as a Visitor contact us or ask us to contact you, for example, by you filling in your details on our websites using the “Contact Sales” function, we collect your Personal Information and use it to respond to your questions and contact you.

   2. Customer

      1. When you are a customer or prospective customer, we collect certain Personal Information about you such as your name, contact details and further information about the organization you represent.

6. Information Sharing and Disclosure

   1. We may disclose each category of your Personal Information to the following categories of recipients:

      1. Our Service Providers. We disclose your Personal Information to our service providers that provide business, professional, marketing, analytics, or technical support services to us, help us operate our business and the Service, or administer activities on our behalf. We require our service providers to only use your Personal Information in connection with providing services to Fleetio.

      2. Our Business Partners. We disclose your Personal Information to other companies with whom we partner to provide services or other offerings to you and carry out other related activities.For example, we may disclose your Personal Information to a third party that co - sponsors a promotion.

      3. Our Analytics Partners. We disclose your Personal Information to our partners that assist us in performing analytics and help us measure the effectiveness of our Service content and our marketing and advertising efforts.

      4. Our Marketing and Advertising Partners. We disclose your Personal Information to third parties for marketing and advertising purposes, including social media platforms, third - party advertising networks, and other parties that assist us in serving and optimizing our advertisements.

      5. Relevant Third Parties as Part of a Corporate Transaction. In the event of a reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock(including in connection with a bankruptcy or similar proceeding), we may disclose or transfer your Personal Information to certain third parties, such as the acquiring entity and its advisers.

      6. Other Third Parties. We will disclose your Personal Information to other third parties at your direction or with your consent. Additionally, we will disclose your Personal Information as we believe necessary or appropriate to: (a) comply with applicable law; (b) enforce our terms and conditions; (c) protect our operations; (d) protect our rights, privacy, safety, or property, and/or those of you or others; and (e) allow us to pursue available remedies or limit damages that we may sustain.

      7. We may disclose your Personal Information for other reasons that we will describe at the time of information collection or prior to disclosing your information.

   2. We reserve the right to share Non-Personal Information and Aggregate Data as described in this Policy.

   3. Certain disclosures may be considered “sales” or “shares” of Personal Information under applicable U.S. state privacy laws. Details on how to exercise your legal rights with respect to such “sales” or “shares” can be found in the “Your Privacy Choices and Rights” section below. However, as noted above in this Policy, we do not “sell” or share” Personal Information (as defined under applicable U.S. state privacy laws) that we process on behalf of our Customers.

7. Cross-Border Data Transfers

   1. Fleetio is headquartered and processes Personal Information in the United States of America (“US”). The US may have different data protection laws to the country where you reside. If you are required to execute a data processing agreement with us, please refer to our Data Processing Agreement (available here) which includes the European Union’s Standard Contractual Clauses.

8. Modifying your Personal Information

   1. If you are a registered user of our Service, you may review, update, correct or delete your Personal Information by logging into the Service and editing your profile.

9. Security: How do we Protect your Personal Information?

   1. We take technical, administrative, and physical steps to protect the information we collect from you to prevent loss, misuse and unauthorized access, disclosure, alteration, and destruction. However, no method of transmission over the Internet or method of electronic storage is 100% secure.

   2. Your account information and access to our Service is accessible only through the use of an individual username and password. You should keep your password confidential and do not disclose it to any other person. Please note that we will never ask you to disclose your password in an unsolicited phone call or email. You are responsible for all activities which are conducted using your account or password.

10. Communication, Direct Marketing, and Opt-Out of Targeted Advertising

    1. We may, from time to time, send you emails or communicate with you about updates to our Service, updated legal documents and for customer support purposes. Where such communication amounts to direct marketing, we shall only do so with your consent and in all other instances we communication with you because it is necessary for our legitimate business interests. Unless we are required by law to communicate with you (e.g., where we are required to notify you about data breaches), we will always give you the opportunity to unsubscribe from receiving our communication.

    2. If you would like to opt-out of targeted advertising, you may find additional information at www.aboutads.info, networkadvertising.org/choices, or youronlinechoices.eu (Europe only), otherwise no additional action is required.

11. Your Privacy Choices and Rights

    1. Depending on your U.S. state of residence, you may have certain rights in relation to your Personal Information, including:

       1. Right to Know: You may have the right to know what Personal Information we have collected about you, including the categories of sources from which the Personal Information is collected, the business or commercial purpose for collecting, selling, or sharing Personal Information, the categories of third parties to whom we disclose Personal Information, and the specific pieces of Personal Information we have collected about you. Please note that we may not be required to respond to your requests “to know” or access specific pieces of Personal Information more than twice in any 12-month period.

       2. Right to Data Portability: You may have the right to access your Personal Information in a portable format.

       3. Right to Delete: You may have the right to request that we delete Personal Information that we have collected from you, subject to certain exceptions.

       4. Right to Correct: You may have the right to correct inaccurate Personal Information that we may maintain about you, subject to appropriate verification.

       5. Right to Opt Out of Certain Types of Personal Information Uses and Disclosures: We use and disclose to third parties’ Personal Information for analytics and advertising purposes. Accordingly, you may have the right to opt out of the “sale” or "sharing” of your Personal Information, or the use and disclosure of your Personal Information for “targeted advertising” (as these terms are defined in applicable law).

       6. Please note that, where permitted under applicable law, we may decline a request if we are unable to verify your identity (or an agent’s authority to make the request) and confirm the Personal Information we maintain relates to you.

       7. If you are interested in exercising one or more of the rights outlined above, please click here to contact us at privacy@fleetio.com. You must put the statement “Your Privacy Rights” in the subject field of your email. We may take steps to verify your identity before responding to your request by asking you a series of questions about your previous interactions with us. Submitting a privacy rights request does not require you to create an account with us.

       8. We will not discriminate against you if you decide to exercise your privacy rights.

    2. Agent Requests

       1. Only you, or someone legally authorized to act on your behalf, may submit a request related to your Personal Information. You may also submit a request on behalf of your minor child.

       2. Depending on your U.S. state of residence, you may authorize someone to make a privacy rights request on your behalf (an authorized agent). Authorized agents will need to demonstrate that you’ve authorized them to act on your behalf. Fleetio retains the right to request confirmation directly from you confirming that the agent is authorized to make such a request, or to request additional information to confirm the agent’s identity.

    3. ^[Reserved.]

    4. Right to Appeal

       1. Depending on your U.S. state of residence, you may have the right to appeal a decision we have made in connection with your privacy rights request. To appeal a decision, please contact us at privacy@fleetio.com.

    5. Additional Notice to EEA, Switzerland, and UK Residents

       1. For residents of the European Economic Area, Switzerland, and United Kingdom, Fleetio is the controller responsible for processing your Personal Information (aside from Personal Information we process on behalf of our Customers).

    6. Legal Basis for Processing

       1. Applicable law in certain jurisdictions requires us to set out the “legal basis” that we rely on to collect and use your Personal Information. Where applicable, the legal bases upon which we rely on in order to collect and use your Personal Information are as follows:

    7. Consent

       1. We may collect, use, and disclose your Personal Information on the basis of the consent that you provide us at the point of information collection or disclosure. You have the right to revoke your consent at any time.

    8. Contractual Necessity

       1. We may collect and use certain Personal Information where it is either necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract. This may include Personal Information used to provide you with our products and related services and related transaction information.

    9. Compliance with a Legal Obligation

       1. We are subject to various legal requirements in the jurisdictions in which we operate, and we may use, disclose, and retain your Personal Information if necessary for us to comply with a legal obligation arising under an applicable law to which we are subject.

    10. Legitimate Interests

        1. We may collect and use your Personal Information to the extent necessary to carry out our legitimate interests (or those of a third party), provided that such interests do not outweigh your interests or fundamental rights and freedoms. For example, we may collect and use your Personal Information in reliance on a legitimate interest in managing our relationship with you; conducting and managing our business; providing you with customer support; conducting market research; developing and enhancing our services as well as our products; detecting and preventing fraud and other harmful activities; and monitoring and maintaining the security of our data, systems, and networks.

    11. Privacy Rights and Requests

        1. Under applicable law, you may have certain rights in relation to your Personal Information, including:

        2. Right to Access: You have the right to request access to, or copies (and transmission) of, the Personal Information we hold about you and the purposes for which we are using it.

        3. Right to Rectify: You have the right to correct inaccurate Personal Information that we have collected from and maintain about you, subject to appropriate verification.

        4. Right to Erase: You have the right to erase Personal Information pertaining to you, under certain conditions.We will assess any deletion request after verifying your identity and work to respond within one calendar month, and let you know if we need additional time.

        5. Right to Object: You have the right to object to processing the Personal Information we process, under certain conditions.

        6. Right to Restrict: You have the right to restrict the processing of your Personal Information, under certain conditions.

        7. Right to Data Portability: You have the right to receive the data we have collected from you. Under certain conditions, you may request that we transfer your Personal Information to another organization, or directly to you.

        8. Right to Lodge a Complaint: You have the right to file a complaint with the supervisory authority in your jurisdiction.

    12. At any time, you may request or assert any of the rights above by emailing us at privacy@fleetio.com. If you believe there has been a violation of your privacy rights, please contact us or the supervisory authority.

    13. You may also have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

    14. If you require measures beyond our Policy, please access our Data Processing Agreement (DPA) here.

    15. EU-U.S. Data Privacy Framework and UK Extension

    16. Fleetio complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF as set forth by the U.S. Department of Commerce. Fleetio has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

    17. In compliance with the EU-U.S. DPF Principles and the UK Extension to the EU-U.S. DPF, Fleetio commits to resolve complaints about our collection or use of your personal information. EU and UK individuals with inquiries or complaints regarding the policy governing our participation in the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF should first contact us at privacy@fleetio.com.

    18. In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, Fleetio commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visithttps://www.jamsadr.com/DPF-Dispute-Resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you.

    19. As set forth in the EU-U.S. DPF Principles and the UK Extension to the EU-U.S. DPF (https://www.dataprivacyframework.gov/), Fleetio is accountable for personal information that it receives and subsequently transfers to third parties acting as an agent on its behalf. If third parties that process personal information on our behalf do so in a manner that does not comply with the EU-U.S. DPF Principles and the UK Extension to the EU-U.S. DPF, we are liable, unless Fleetio proves that it is not responsible for the event giving rise to the damage.

    20. As set forth in the EU-U.S. DPF Principles and the UK Extension to the EU-U.S. DPF, binding arbitration will also be made available to address any complaints that have not been resolved through other mechanisms.

    21. Fleetio is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission.

12. Cookie Policy

    1. Please see our Cookie Policy here.

13. Questions and Contact Information

    1. If you have any questions or concerns about this Policy or the practices described herein, please contact us at privacy@fleetio.com or by mail to: Fleetio, 1900 2nd Ave. N., Suite 300, Birmingham, AL 35203, Attn: Security Department.

    2. Our representative under Article 27 of the GDPR can be contacted at Representation.Fleetio.Europe@dentons.com.