Privacy Policy
In plain English
- We collect only what you put in, plus what we need to run the app: your email, license key, fleet data, files and short-lived server logs.
- We never see your card number. Stripe keeps it.
- Our site uses Google Analytics, the Meta Pixel and PostHog to count visits and measure our ads. They run only after you click Accept on the cookie banner. Sentry catches errors in the app. A content blocker stops all of them, and everything still works.
- We never sell your data. We do not use it to train AI.
- Benchmark sharing is off until you turn it on. If you do, rounded numbers for each car join a shared pool, and other hosts see them only in groups of at least ten. You can turn it off at any time and your contribution is deleted. See “Benchmark sharing” below.
- When you ask Ask IQ a question, a copy of that question's data goes to Anthropic, the maker of Claude, so it can answer. Your EIN and full VINs are removed first. It is not kept.
- You can download all your data or delete your account from Settings at any time.
- California (CCPA) and EU (GDPR) residents have extra rights. Email us to use them.
This summary is here to make the page easier to read. It is not the full text. If the two ever seem to differ, the full text below is what counts.
Fleconomy IQ is fleet economic intelligence software that helps vehicle owners and car-sharing hosts see what every vehicle really earns and run their fleet operations. This policy explains what data we collect, how we use it, and the choices you have. We've kept the language plain because privacy docs that nobody reads aren't privacy at all.
What we collect
Only the data you choose to put into the product, plus the minimum needed to run it.
- License key + email: when you sign up for a trial or paid plan
- Stripe customer ID: if you upgrade to a paid plan (we never see your card number — that stays at Stripe)
- Your fleet, trip, maintenance, claim, and tax data: stored encrypted in Supabase, accessible only by your license key
- Uploaded files (invoices, photos, receipts): stored in Supabase Storage, private to your license
- Server logs: IP, user agent, request paths — kept for ≤30 days for abuse prevention
Benchmark sharing (opt-in)
Your records stay in your account and are never mixed with another host's. The one exception is benchmark sharing, which is off until you turn it on in Settings and accept the Data Sharing Terms.
- Your CSV is still read in your browser. The file itself is never uploaded. Your trip rows sync to your own account as before, and nobody else can read them.
- What leaves, only if you opt in: for each car, rounded ranges for the market (metro area), vehicle class, average daily rate, utilization and net earnings per vehicle-day, plus make, model and year range. We work these out in your browser and send the ranges, not the underlying figures.
- What never leaves: your name, email or license key, VINs, plates, addresses, ZIP codes, coordinates, trip dates, guests, tax details, and cars you manage for another owner.
- How others see it: a server job groups the ranges by market and vehicle class into a separate table of group figures. A group is shown only when at least ten different accounts are in it and no one account supplies more than 30% of its cars. Otherwise it says “Not enough data yet”. A missing value is left out, never counted as zero.
- Who sees it: only accounts that have opted in. If you have not, you see no benchmark data. The Exit & Investor Suite adds percentile bands, a breakdown by vehicle class and the trend over time.
- We record your choice: the date you agreed and which version of the terms. We keep that record only while your account exists.
- Turning it off: your stored contribution is deleted right away, and the daily group figures are recalculated without you. Monthly snapshots already made cover at least ten accounts, carry no account identity and are not recalculated. Deleting your account does the same and removes the record of your choice.
Analytics and advertising
Our public pages — the homepage, blog, calculators and campaign landing pages — and the app itself can run the following third-party tags. Apart from Sentry, none of them runs until you click Accept on our cookie banner. If you click Reject, or never answer, they stay off. Once you accept, they set cookies and report your visit to the provider named:
- Google Analytics 4 — which pages you visit and how you arrived (search, ad, referral), so we can tell which content is worth writing
- Meta Pixel — page views, sign-ups and purchases, used to measure and target our Facebook and Instagram advertising. When you have accepted and you sign up or buy, our server also tells Meta about it directly. It sends a scrambled (SHA-256 hashed) copy of your email, never the plain address.
- TikTok Pixel and LinkedIn Insight Tag — page views, used to measure our ads on those sites. Only while we run ads there, and only after you accept.
- PostHog — product analytics: which features get used, so we can prioritize what to build
- Sentry — error monitoring in the app (no PII intentionally captured)
We do not sell this data, and we do not share it for anyone else's advertising. Any standard content blocker or browser tracking protection will stop all of the above, and the site and app work fully without them.
You can change your answer at any time:
What we don't do
- We don't sell your data to anyone, ever.
- We don't put your numbers in a shared pool unless you opt in (Settings → Data Sharing), and we don't show you benchmarks unless you do.
- We don't use your business data to train AI models. The Ask IQ assistant sends your current question's data snapshot to Anthropic, the company that makes Claude, so it can answer — that snapshot strips EIN and full VINs. It's not used for training and isn't retained. If you connect your own OpenRouter account instead, your question goes through OpenRouter to the same Claude models.
Third-party processors
To run the product, your data is processed by these services:
- Stripe — payment processing
- Supabase — database + file storage
- Resend — transactional email (license keys, trial verifications)
- Sentry — error monitoring (no PII intentionally captured)
- Google Analytics — website analytics (see “Analytics and advertising” above)
- Meta (Facebook) — advertising measurement
- PostHog — product analytics
- Anthropic (Claude) — only for Ask IQ questions you submit (per-question, not retained)
- OpenRouter — only if you choose to connect your own OpenRouter account for Ask IQ
- Railway — application hosting
Each has its own privacy practices. They're contractually bound not to use your data for their own purposes.
Your rights
- Export everything: Settings → Backup downloads your full data as JSON.
- Delete your account: Settings → ⛔ Delete Account erases everything in one click — license, fleet data, uploaded files, marketing-list entry. An active Stripe subscription cancels at period end so you keep paid-for access until natural expiry. If you'd rather have a human do it, email info@fleconomyiq.com. Reversible within 30 days from backups; permanent after.
- California residents (CCPA): you have the right to know, delete, and opt out of any sale (we don't sell). Same email gets you there.
- EU residents (GDPR): we don't actively market in the EU, but if you've signed up, the same rights apply. We're our own data controller.
Security
We use industry-standard practices: HTTPS everywhere, HMAC-signed session cookies, Row-Level Security in the database, signed-URL file access. See our Security page for the full picture. For deeper diligence (such as a security questionnaire or code review under NDA), email info@fleconomyiq.com.
Changes to this policy
We'll update the "Last updated" date above when we change anything material. Significant changes (new categories of data, new third-party processors) will be announced by email to active license holders.