Privacy Policy

1. Information We Collect

We collect information necessary to provide automated fuel audit and fleet expense surveillance:

• Account & Organization Data: Corporate entity name, contact person name, authorized business email, operational phone number, GSTIN, and account login password (stored using one-way cryptographic salted hashes).
• Fleet & Operational Datasets: Uploaded fuel statement CSVs, scanned slips, vehicle registration numbers, odometer readings, driver names, transaction times, and telematics sensor logs.
• Billing & Payment Information: Payment order identifiers, subscription tier status, and transaction settlement timestamps. Note: All credit card, debit card, UPI, and net banking details are handled directly by Razorpay under PCI-DSS Level 1 certification. FreightFlow never collects or stores raw credit card numbers or CVVs.
• Technical & Usage Metrics: IP addresses, browser types, session tokens, and security audit activity logs to detect brute-force attempts and enforce rate limiting.

2. Purpose & Legal Basis for Processing

We process your data strictly to execute our software agreement with you, specifically to:

• Analyze fuel consumption, compute distance-to-fuel ratios (KMPL), and flag anomalous billing transactions.
• Generate dispute dossiers, certified driver vouchers, and executive accounting reports.
• Process payments, manage credit quotas, and fulfill invoice delivery via Razorpay.
• Prevent fraudulent transactions and protect platform operational infrastructure.

3. Data Confidentiality & Strict Non-Disclosure

We do not sell, rent, or trade your fleet data. Your operational routes, fuel pricing, driver records, and vendor invoices are treated as confidential trade secrets. We never share your data with competing transport operators, oil companies, or third-party marketing brokers.

4. Data Security & Storage Architecture

We implement comprehensive organizational and technical security measures:

• Encryption in Transit: All HTTP traffic is protected by modern 256-bit TLS (Transport Layer Security) encryption.
• Database Isolation: Multi-tenant tenant-level query isolation ensures that your audit records are only accessible to authenticated members of your company.
• Automated Backups: Secure, encrypted off-site database backups with strict access authorization.

5. Your Rights: Export & Deletion

In accordance with applicable Indian data protection laws, you possess the right to:

• Access and download all historical audit reports and dispute memorandums.
• Request full deletion of your corporate account, audit history, and vehicle rosters by submitting an email to support@frieghtflow.co.in. Data will be purged within thirty (30) days of confirmation.

6. Grievance Officer & Statutory Contact

In compliance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the contact details of the designated Grievance Officer are provided below: