Privacy Policy

FleetKraft is a transport management service (the website and web app at fleetkraft.com, and the FleetKraft mobile app for drivers on Android and iPhone). It is provided by 1Shopindia, a sole proprietorship in India ("we", "us").

Questions or requests about privacy: info@fleetkraft.com.

Transport companies subscribe to FleetKraft and use it to run their business. For the information a company puts into FleetKraft about its staff, drivers, customers and deliveries, that company decides what is collected and why, and we process it on the company's behalf. If you are a driver, staff member, customer or delivery receiver of a company that uses FleetKraft, please contact that company first about your information; we will help them respond.

For our own customers' account and billing details, and for enquiries sent through our website, we decide how the information is used.

• Account details: name, email address, phone number, role and company. Passwords are stored only as a one-way hash (scrypt).
• Company details: business name, address, business number, logo, settings, depots and vehicles.
• Jobs and deliveries: sender and receiver names, addresses, phone numbers and emails, item details, notes, status history, proof-of-delivery photos and signatures.
• Driver work records: shifts, breaks, clock-in and clock-out photos, odometer readings, messages with dispatch (with any photos or videos sent in them), and labels scanned.
• Driver location: GPS position, but only while the driver is on duty (see below).
• Payroll: pay rates, hours, allowances, deductions, tax settings, payslips and bank details. Bank account numbers are encrypted (AES-256-GCM).
• Warehouse and billing records: stock, orders, rate cards, quotes and invoices created in FleetKraft.
• Subscription billing: handled by our payment provider, Razorpay. We do not receive or store card numbers, UPI IDs or bank account details used to pay. We keep a record of each payment (amount, period, method and Razorpay payment ID) for receipts and tax records.
• Device and technical data: a push-notification token for the driver app, and server logs (IP address, time, request) kept for security and troubleshooting.
• Website enquiries: what you send us through the contact or demo forms.

• The app shares the driver’s location with their company only between clock in and clock out. This includes when the app is closed or the phone is locked, so dispatch can see where vehicles are and customers can track their deliveries.
• While on duty the position is saved about once a minute, so the company can see the route driven on its live map; this history is kept for 30 days.
• Location is also recorded with clock-in, clock-out, pickup and delivery events.
• When the driver clocks out or signs out, location sharing stops. On Android a notification shows whenever on-duty location sharing is active.
• The driver can turn off location permission in the phone’s settings at any time; some features will then not work.
• Location is never used for advertising and is never sold.

The camera is used only to take the photos the company asks for (clock-in, clock-out and delivery), photos the driver chooses to send to the office in messages, and to scan parcel barcode labels. The app does not read the phone's photo library or use the microphone. Notifications tell drivers about new jobs and messages from their office.

• To provide FleetKraft: dispatch, tracking, proof of delivery, messaging, warehousing, invoicing and payroll.
• To send service emails and notifications, such as invitations, password resets, delivery updates, invoices, payslips and trial reminders.
• To bill subscriptions and prevent fraud.
• To keep the service secure, fix problems and improve it.
• To meet legal obligations, for example tax and accounting records.

We do not sell personal information, we do not use it for advertising, and we do not use advertising trackers.

On the public website only (the home, pricing, features, country, help and sign-up pages) we use Google Analytics to count visits and see which pages help people, with Google signals and ad personalisation turned off. It sets cookies and records pages viewed, the general location and the device type. It is never used inside the FleetKraft web app, the driver app, the customer portal or on tracking, invoice and support links. You can block it with your browser's cookie settings or Google's opt-out add-on (tools.google.com/dlpage/gaoptout).

Only with service providers that run parts of FleetKraft for us, under contracts that limit how they can use it:

• Google Cloud and Firebase: hosting, database, file storage and Android notifications (data stored in Sydney, Australia).
• Zoho Mail: sending emails.
• Razorpay: subscription payments (cards, and in India also UPI, netbanking and wallets).
• Expo and Apple Push Notification service: delivering app notifications.
• Google Analytics: visits to the public website pages (not the app).
• OpenStreetMap Nominatim or Google Maps: turning addresses into map positions for route planning.

Delivery receivers see a tracking page with the job status and, after delivery, the proof of delivery. We may also disclose information if the law requires it.

FleetKraft's data is stored with Google Cloud in Sydney, Australia. Our team in India and our service providers may access it from other countries where needed to provide the service. We protect it with the safeguards described here wherever it is accessed.

• While a company’s subscription is active, its data is kept so the company can use it.
• When a subscription is cancelled, the company’s data is deleted 6 months later, unless the law requires us to keep part of it longer.
• Database backups are kept for 7 days.
• A company can delete individual records, such as a driver or customer, at any time, or ask us to delete its account sooner.

All connections use HTTPS. Access inside a company is limited by user role. Passwords are hashed and bank account numbers are encrypted. No system is perfectly secure; if a data breach affects you, we will tell the affected company and, where the law requires, you and the regulator.

Depending on where you live, you can ask to see the personal information held about you, correct it, delete it, receive a copy, or object to some uses. This includes rights under the Australian Privacy Act 1988, Canada's PIPEDA, India's Digital Personal Data Protection Act 2023, and US state privacy laws such as California's.

Drivers and staff: ask your company, or email us at info@fleetkraft.com and we will pass the request to them. To delete a FleetKraft account, email us from the account's email address. We will respond within 30 days.

If you are not happy with our answer, you can complain to your local regulator, for example the Office of the Australian Information Commissioner, the Office of the Privacy Commissioner of Canada, or the Data Protection Board of India.

FleetKraft is a business service for working adults. It is not meant for children and we do not knowingly collect information from children.

We will post any change on this page and update the date at the top. If a change is significant, we will also tell company administrators by email.

1Shopindia, Shop No. 306, Third Floor, Block A, One World, Polytechnic Cross Road, Himmatnagar, Sabarkantha, Gujarat 383001, India. Email: info@fleetkraft.com