1. Data We Collect
We collect personal data only for lawful purposes and to the extent necessary to provide our services. The categories of personal data we collect include:
1.1 Account & Identity Data
- Full name, email address, mobile number
- Company name, UEN (Unique Entity Number), business address
- Job title and role within your fleet operation
- Password (stored in hashed form — never in plaintext)
1.2 Fleet & Operational Data
- Vehicle registration numbers (VRN) and vehicle details
- Driver NRIC (last 4 characters + suffix), PHV licence numbers, expiry dates
- Trip logs, mileage, servicing records, and inspection dates
- TDVL (Taxi Driver's Vocational Licence) and insurance policy details
- Violation and demerit point records associated with registered vehicles
1.3 Billing & Payment Data
- Subscription plan, billing cycle, and invoicing history
- Payment card details (processed exclusively by Stripe — not stored on our servers)
- Singapore GST-registered status and GST registration number if applicable
1.4 Usage & Technical Data
- IP address, browser type, operating system, and device identifiers
- Pages visited, features used, session duration, and click-path analytics
- Error logs and crash reports for platform stability
- Cookies and similar tracking technologies (see our Cookie Policy)
1.5 Communications Data
- Support enquiries and correspondence via email or in-app chat
- SMS notification preferences and delivery receipts
- Feedback, survey responses, and product reviews
2. How We Use Your Data
We process personal data only for the purposes for which it was collected, or for purposes directly related thereto. Our primary purposes include:
2.1 Service Delivery
- Creating and managing your FleetTrust OS account
- Processing subscription payments and issuing invoices
- Sending automated alerts for licence expiries, inspection due dates, and road tax renewals
- Generating AI-powered fleet health summaries and compliance dashboards
2.2 Communications
- Transactional emails (account verification, password resets, invoices)
- SMS alerts for time-sensitive compliance reminders
- Product update notifications and release notes (opt-out available)
- Responding to support tickets and enquiries
2.3 Security & Compliance
- Detecting and preventing fraudulent access or abuse
- Maintaining audit trails for regulatory compliance
- Complying with directions from the Land Transport Authority (LTA) or other Singapore authorities
2.4 Analytics & Improvement
- Analysing aggregated, anonymised usage data to improve platform features
- Benchmarking fleet performance metrics (data is never sold to third parties)
- A/B testing new features with a subset of users (with notice)
3. Third-Party Services
FleetTrust OS integrates with carefully selected third-party processors. Each sub-processor is bound by a Data Processing Agreement and must meet standards equivalent to or higher than Singapore PDPA requirements.
Stripe (Stripe Inc.)
- Purpose:
- Payment processing and subscription billing
- Data:
- Card details, billing address, transaction history
- Location:
- United States (Standard Contractual Clauses apply)
Supabase
- Purpose:
- Primary database, authentication, and file storage
- Data:
- All account, fleet, and operational data
- Location:
- Singapore / AWS ap-southeast-1 (data residency in SG)
- Policy:
- https://supabase.com/privacy
Resend
- Purpose:
- Transactional email delivery
- Data:
- Email address, email content
- Location:
- United States (DPA in place)
Twilio
- Purpose:
- SMS alert delivery
- Data:
- Mobile number, message content
- Location:
- United States (DPA in place)
Google (Google LLC)
- Purpose:
- Analytics, Maps API (routing/location features)
- Data:
- Usage events, anonymised IP, location data
- Location:
- United States (Google Cloud DPA applies)
Vercel Inc.
- Purpose:
- Web hosting and edge delivery
- Data:
- Request logs, IP addresses
- Location:
- Global CDN (nearest edge node)
We do not sell, rent, or trade your personal data to any third party for marketing purposes.
4. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Singapore law.
| Data Category | Retention Period |
|---|---|
| Active account data | Duration of active subscription + 30 days post-cancellation |
| Billing & invoicing records | 7 years (IRAS / Income Tax Act requirement) |
| Fleet compliance records | 5 years (LTA regulatory recommendation) |
| Support communications | 3 years from resolution date |
| Usage / analytics logs | 13 months (rolling) |
| Security & audit logs | 2 years |
| Data after account deletion | Purged within 30 days, except where legally required |
Upon request, we can provide a confirmation of data deletion. Anonymised, aggregated statistical data may be retained indefinitely as it can no longer identify any individual.
5. Your Rights under the PDPA
Under the Singapore PDPA, you have the following rights in relation to your personal data held by FleetTrust OS:
Right of Access
You may request a copy of the personal data we hold about you and information about how it has been used or disclosed in the past year.
Right of Correction
You may request that we correct any inaccurate or incomplete personal data about you as soon as practicable.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
Right to Data Portability
Under the PDPA's data portability obligation (Part VIA), you may request that certain personal data be transmitted to another organisation in a machine-readable format.
Right to Opt Out of Marketing
You may unsubscribe from marketing communications at any time using the "unsubscribe" link in any email or by contacting our DPO.
Right to Lodge a Complaint
If you believe we have not handled your data in accordance with the PDPA, you may file a complaint with the Personal Data Protection Commission (PDPC) at pdpc.gov.sg.
To exercise any of these rights, please submit a written request to our Data Protection Officer. We will respond within 30 calendar days.
6. Contact Our Data Protection Officer
FleetTrust OS has appointed a Data Protection Officer (DPO) as required under the PDPA. If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to report a data concern, please contact:
Data Protection Officer
FleetTrust OS (AI Now Pte. Ltd.)
- Email:
- dpo@fleettrust.io
- General:
- hello@fleettrust.io
- Website:
- fleet.ainow.com.sg
- PDPC:
- www.pdpc.gov.sg
We may update this Privacy Policy from time to time. Material changes will be notified to registered users via email at least 14 days before taking effect. Continued use of FleetTrust OS after such notification constitutes acceptance of the updated policy.