Privacy Policy

2.1 Information You Provide Directly

When you create an account or use the Platform we collect:

2.2 Information Collected Automatically

When you use the Platform we automatically collect:

• Usage data: pages visited, screens viewed, features used, time spent, and actions taken on the Platform.
• Device information: browser type, operating system, device type, and screen resolution.
• Location data: approximate location based on IP address and the radius you select when browsing blocks.
• Analytics data: collected via Vercel Analytics to understand how the Platform is used and where improvements can be made.

2.3 Payment Information

Payment card information is collected and processed directly by Stripe, our payment processor. People Fleet does not store your full card number, CVV, or expiration date on our servers. We receive and store only a tokenized reference to your payment method and transaction records. Dealership bank account and routing information is collected directly by Stripe during Connect onboarding and is never stored on People Fleet servers.

2.4 Financial Documents

Pre-approval and pre-qualification letters uploaded by vehicle buyers are stored securely in our encrypted file storage system. These documents are not shared with any dealership until a block has closed and the buyer locked a vehicle at that specific dealership. They are never shared with any third party beyond the assigned dealership.

Used Car Buyer’s Guides uploaded by dealerships for Used and Demo vehicle listings are stored securely and are accessible to buyers browsing those vehicles as required by applicable law.

4.1 With Dealerships

Car buyer personal information, including name, contact details, and financial documents, is NOT shared with a dealership until the block has fully closed and the buyer locked a vehicle at that specific dealership. Before that point dealerships only see anonymized interest counts and first name with last initial only.

4.2 With Service Providers

We share information with trusted third-party service providers who help us operate the Platform. These providers are contractually required to use your data only for the purpose of providing services to People Fleet and may not use it for their own purposes. Our current service providers include:

• Stripe: payment processing and escrow management.
• Supabase: database hosting, authentication, and file storage.
• Vercel: website hosting and analytics.
• OneSignal: push notification delivery.
• Cloudflare: content delivery and security.
• Email service provider (Resend or SendGrid): transactional email delivery.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal process such as a subpoena, court order, or government request. We may also disclose information where we believe disclosure is necessary to protect the rights, property, or safety of People Fleet, our users, or the public.

4.4 Business Transfers

If People Fleet is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and a prominent notice on the Platform before your information is transferred and becomes subject to a different privacy policy.

4.5 We Do Not Sell Your Data

People Fleet does not sell, rent, or trade your personal information to third parties for their marketing purposes.

4.6 Buyer Account Credit Privacy

Buyer account credit balances are personal financial information. People Fleet does not share a buyer’s account credit balance with dealerships at any point. Not during an active block, not after a block closes, not after a buyer is formally assigned to a dealership, and not in any future view or API response. This restriction is enforced at the database level via Row Level Security and is an explicit platform policy.

Dealerships receive only the information necessary to complete the vehicle sale: buyer name, contact details, pre-approval document, and vehicle lock details. Account credit balance is not part of that data set and is never transmitted to a dealership in any form.

7.1 Access & Correction

You have the right to access the personal information we hold about you and to request correction of any inaccurate information. You can update most of your profile information directly in your account settings. For other requests please contact support@peoplefleet.co.

7.2 Data Deletion

You may request deletion of your personal data by contacting support@peoplefleet.co. We will delete your account profile, preferences, and non-financial data within 30 days of your request. Financial records associated with completed transactions will be retained as required by law for a minimum of 7 years and cannot be deleted. We will notify you of exactly what was deleted and what was retained when processing your request.

7.3 Push Notification Opt-Out

You can withdraw consent for push notifications at any time through your device or browser settings. Withdrawing push notification consent will not affect your ability to use the Platform. You will continue to receive important notifications via email.

7.4 Email Opt-Out

You may opt out of non-transactional marketing emails by clicking the unsubscribe link in any marketing email. Please note that you cannot opt out of transactional emails related to your account activity, payments, and purchases as these are necessary for the operation of the Platform.

7.5 California Residents

If you are a California resident you may have additional rights under the California Consumer Privacy Act (CCPA) including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. As noted above People Fleet does not sell personal information. To exercise your CCPA rights please contact support@peoplefleet.co.