Data Processing Addendum & Sub-processors

Roles

For data you upload about your drivers, employees, applicants, and trucks, you are the data controller and FleetsHub LLC is the data processor. FleetsHub processes personal data only to provide the service, comply with law, and as instructed by you through your use of the platform.

Categories of personal data processed

• Identity & contact: name, email, phone, address, date of birth.
• Driver/employment data: CDL number, license class, endorsements, MVR, employment history, DQ file documents.
• Medical: DOT medical examiner's certificate and expiration (limited to DOT-required information).
• Compliance data: drug/alcohol testing records, accident registry entries, inspection records.
• Account & usage: login data, IP address, device info, audit logs.
• Billing: handled by Stripe; FleetsHub does not store full card numbers.

Sub-processors

FleetsHub uses the following sub-processors to deliver the service. By using the platform you authorize their use.

• Supabase — managed database, authentication, and file storage hosting.
• Cloudflare — edge runtime, CDN, and DDoS protection.
• Stripe — payment processing.
• Resend (or successor email infrastructure provider) — transactional email delivery.
• Lovable — application platform and infrastructure.

We may add or replace sub-processors. Material changes will be communicated by email or in-app with reasonable notice.

Security measures

• Encryption in transit (TLS 1.2+) and at rest.
• Row-Level Security policies at the database layer scoping each carrier to its own data.
• Role-based access controls for staff and members.
• Audit logs for sensitive operations.
• Least-privilege access for FleetsHub personnel and contractors.

International transfers

Data is primarily stored and processed in the United States. By using the platform, users outside the U.S. consent to the transfer of their data to the U.S. for processing.

Data subject requests

If you receive a request from a data subject (driver, applicant, employee) to access, correct, export, or delete their data, contact privacy@fleetshub.com and we will assist you in fulfilling the request consistent with applicable law and our retention obligations.

Breach notification

If FleetsHub becomes aware of a confirmed breach of security leading to unlawful destruction, loss, alteration, or unauthorized disclosure of personal data we process on your behalf, we will notify you without undue delay and provide reasonably available information to support your own notification obligations.

Data retention and deletion

We retain your data while your account is active and for a reasonable period after cancellation. You may request export or deletion at any time by emailing privacy@fleetshub.com, subject to legal record-retention obligations.

Contact

Privacy & DPA questions: privacy@fleetshub.com.