Privacy Policy

Last updated: April 1, 2025

1. Overview

FleetUp ("we", "our", "us") provides a web application and a Chrome browser extension that automates ride acceptance on the Uber platform for fleet operators. This Privacy Policy explains what data we collect, how we use it, and your rights.

2. What data we collect

Web application

  • Email address and company name provided at registration
  • Account credentials (passwords are hashed and never stored in plain text)
  • Auto-accept settings you configure (ride filters, thresholds)
  • Aggregated ride statistics generated by the automation worker

Chrome extension

  • Uber session cookies from the .uber.com domain — captured once after you log in to Uber, then transmitted directly to your FleetUp backend
  • The FleetUp API URL and your JWT access token, stored locally in chrome.storage.local on your device

3. How we use your data

  • To authenticate you and operate your account
  • To run the auto-accept worker on your behalf using the captured Uber session
  • To display ride statistics and earnings in your dashboard

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Chrome extension — data handling

The extension reads Uber session cookies exclusively from the .uber.com domain after you log in. These cookies are sent over HTTPS directly to the FleetUp backend URL that you configured. No cookie data is sent to any third-party server. The extension does not track your browsing history on any website other than uber.com.

5. Data storage and security

  • Data is stored in a PostgreSQL database hosted on Microsoft Azure (West Europe)
  • All communication between the extension, web app, and backend uses HTTPS/TLS
  • Passwords are hashed using bcrypt before storage
  • JWT tokens expire and are not stored server-side

6. Data retention

Your account data is retained for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us. Uber session cookies stored in the backend are overwritten each time you reconnect your Uber account.

7. Your rights

Under applicable law (including GDPR where relevant) you have the right to access, correct, export, or delete your personal data. To exercise these rights, contact us at the address below.

8. Contact

For any privacy-related questions or requests, contact us at: privacy@fleetup.app