Privacy Policy

1. Introduction

BuildFlow Angelika Kotarba ("we", "our", or "us"), operator of the 4fleet chauffeur management platform, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and related services.

Data Controller (GDPR / RODO): BuildFlow Angelika Kotarba, a sole proprietorship registered in the Republic of Poland (NIP: 6711821792, REGON: 364919712), with registered office at ul. 1 Maja 13/1, 78-100 Kołobrzeg, Poland. For all data protection matters, contact support@4fleet.io.

2. Information We Collect

We collect information you provide directly to us, including:

• Account information (name, email, company name, phone number)
• Business data (vehicles, drivers, bookings, clients)
• Payment information (processed securely via Stripe)
• Communications (emails, support requests)
• Usage data (how you interact with our platform)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Provide AI-powered features (quotes, suggestions, analytics)
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent or unauthorized activity

4. Data Sharing

We do not sell your personal information. We may share your information with:

• Service providers: Companies that help us operate (Stripe for payments, Google for maps, Anthropic for AI features)
• Business partners: With your consent, for partner network features
• Legal requirements: When required by law or to protect our rights

5. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• 256-bit SSL encryption for all data in transit
• Encrypted data storage at rest
• Regular security audits and monitoring
• Access controls and authentication requirements
• Daily automated backups

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. You can request deletion of your data at any time. After account closure, we retain data for 30 days before permanent deletion, unless legally required to retain it longer.

7. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing of your data
• Data portability (export your data)
• Withdraw consent at any time

To exercise these rights, contact us at support@4fleet.io.

8. Cookies

We use essential cookies to operate our platform (authentication, preferences). We may use analytics cookies with your consent to understand how you use our service. You can control cookie preferences in your browser settings.

9. Third-Party Services

Our platform integrates with third-party services including Stripe (payments), Google Maps (routing), Firebase (authentication), and Anthropic (AI features). Each has their own privacy policies governing your data.

10. Google User Data and Limited Use

When you sign in with Google, 4fleet uses Google's OAuth to authenticate you. We request only the basic sign-in scopes needed to create and secure your account:

• email - your Google account email address, used to identify your 4fleet account and send account-related notifications.
• profile - your basic profile information (name, profile picture) to personalise your account.

4fleet does not access your Gmail or any Google mailbox. To send and receive mail in 4fleet you connect a mailbox directly over IMAP/SMTP (including Gmail using a Google App Password); those credentials are stored encrypted and are never shared with Google APIs.

We access Google Sign-In data only to authenticate your account, store it encrypted, never sell it, and never use it for advertising or to train generalised AI/ML models. You can disconnect Google Sign-In at any time in Settings, which revokes 4fleet's access.

Limited Use: 4fleet's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Continued use of our service after changes constitutes acceptance.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: