Privacy notice

What we collect

Account details: your company name, where it is based, fleet size, the name, work email and phone of the person who signed up, the vendors and cards you set up, and your reps' names and emails if you enter them.

Customer Data: the price files, statements and invoices you upload or forward to your fleet's address, as they arrived, and everything worked out from them (prices by site, comparisons, reviews, reports). Statements can carry drivers' names, unit numbers and where and when they fuelled.

Site analytics: which pages are visited, from which country and on what kind of device, through Vercel Web Analytics, which sets no cookies and does not identify you.

Usage records: sign-ins, pages opened, files read, emails sent and received, and the technical logs needed to run and secure the service. The drivers' page can use a phone's location to find nearby stops; that location stays in the browser and is not sent to us or stored.

Why we use it

To provide the service: read your files, show comparisons and stops, review statements, send the reports and alerts that are part of the service, and support you.

To run and protect the service: keep accounts secure, find and fix problems, enforce our terms, and meet legal obligations.

To improve the service: learn how a file layout is read so it is read the same way next time, and look at de-identified, aggregated usage that does not identify you, your drivers, your vendors' prices or your volumes.

We do not sell your files, your prices, your statements or your drivers' information, and we do not use them for advertising. One customer's data is never shown to another customer or to a vendor.

Partners. We may share market statistics with fuel partners after they have been aggregated and de-identified, so that neither you nor any vendor's pricing to you can be identified. If you opt in, we may introduce you to a partner by passing on your company name, the contact's name, work email and phone, where you are based and run, your fleet-size band, your volume band and the cards you carry, and a partner may pay us for the introduction. Under some privacy laws that counts as a sale or sharing of personal information. It only happens with your opt-in, and you can withdraw it at any time in setup or on the start page.

Who we share it with

Service providers who help us run the service, each receiving only what it needs and bound to keep it confidential: cloud hosting, file storage and site analytics, transactional email sending and receiving, card payment processing (Stripe, which holds card details we never see), mapping, routing and geocoding, and machine-reading models that read a file the first time its layout is seen.

Fuel partners, only as described under Partners above: aggregated, de-identified market statistics, and, with your opt-in, an introduction. Never your files, prices, statements or drivers' information.

Authorities, where the law requires it, and a successor to the service if the business changes hands, on the same terms.

How long we keep it

Customer Data and account details are kept while you have an account, so that each day's prices can be compared with the next and reports can be read back. You can ask for an export or deletion at any time, and when an account ends we delete within thirty days, except for routine backups overwritten in the ordinary course and records the law requires us to keep.

Usage and security logs are kept for a limited period and then deleted or de-identified.

A file dropped on the free read-out without an account is kept for thirty days so we can check how it was read, then deleted.

Your rights and your drivers

You can ask what personal information we hold, ask for it to be corrected or deleted, or object to a use, by emailing us. We answer within thirty days. If you are not satisfied you may complain to the privacy regulator where you are based.

Where Customer Data contains your drivers' or employees' personal information, you are responsible for telling them what you share with us and for having the right to do so. We process it on your instructions as your service provider.

The service is for businesses. We do not knowingly collect information from individuals under eighteen.

Security and where data is kept

Customer Data is stored in private storage, reached only by the service with signed credentials, and sent over encrypted connections. Sign-in and driver links are signed and can be revoked. Data is hosted with providers in North America. No system is perfectly secure; if we learn of unauthorised access to your data we will tell you without undue delay.

Changes and contact

This notice may change as the service does; the version date is shown above. Questions and requests go to hello@mrdiesel.app. Dory AI, a sole proprietorship registered in Nova Scotia, Canada, carrying on business as Mr.Diesel, is the operator of the service.