Privacy Policy

1. Scope and who we are

This Privacy Policy explains how CreekFleet (“CreekFleet,” “we,” “us,” or “our”) handles personal information in connection with creekfleet.com, the CreekFleet fleet-management platform, related applications, communications, customer support, demonstrations, consultations, and other services that link to this Policy (collectively, the “Services”).

CreekFleet provides software to rental and fleet businesses. When a CreekFleet business customer enters or processes information about its renters, drivers, employees, vehicles, or other individuals, that customer generally determines why and how the information is processed. In that context, CreekFleet acts as a service provider or processor on the customer’s behalf, and the customer’s own privacy notice and instructions apply. Questions about information submitted by a particular rental or fleet business should first be directed to that business.

2. Information we collect

Information you provide

• Account and profile information: name, business name, title, email address, telephone number, login credentials, team roles, and account preferences.
• Business and fleet information: locations, vehicle details, registration and maintenance records, rates, availability, reservations, agreements, inspections, damage records, mileage, fuel, toll, payment, and operational information.
• Renter and driver information: contact details, date of birth, driver-license information, identity-verification results, signatures, reservation details, uploaded documents, photographs, messages, and emergency-contact information when submitted through a customer account.
• Payment and transaction information: subscription details, billing address, transaction status, refunds, deposit authorizations, and limited payment-card information. Full payment-card numbers are generally collected and processed by our payment providers rather than stored by CreekFleet.
• Communications: consultation requests, support messages, survey responses, feedback, call or meeting details, and other information you send to us.

Information collected automatically

• Device and usage data: IP address, browser and device type, operating system, referring pages, pages or features used, dates and times, approximate location derived from IP address, identifiers, diagnostic data, and interaction logs.
• Cookies and similar technologies: information used to keep you signed in, remember preferences, understand site performance, prevent fraud, and measure communications. You may control cookies through browser settings, although disabling them may affect functionality.
• Vehicle and telematics data: when enabled by a customer and connected to a supported provider, precise vehicle location, routes, timestamps, speed, mileage, ignition state, diagnostic status, device health, geofence activity, and security alerts. Customers are responsible for providing legally required notices and obtaining legally required consents from drivers or other affected individuals.

Information from other sources

We may receive information from business customers, authorized account administrators, integrations, identity and fraud-prevention providers, payment processors, GPS or telematics providers, public sources, marketing partners, and service providers. We may combine this information with information collected through the Services.

3. How we use information

We use personal information to:

• provide, operate, maintain, personalize, and improve the Services;
• create and administer accounts, authenticate users, and apply access permissions;
• support reservations, fleet operations, inspections, maintenance, payments, reporting, tracking, and customer communications;
• process subscriptions, transactions, refunds, and billing inquiries;
• respond to consultations, support requests, feedback, and other communications;
• send service notices, security alerts, administrative messages, and, where permitted, marketing communications;
• monitor performance, troubleshoot problems, develop features, and analyze usage;
• detect, investigate, and prevent fraud, abuse, security incidents, and unlawful activity;
• enforce agreements, protect rights and safety, resolve disputes, and comply with law; and
• create aggregated or de-identified information that does not reasonably identify an individual.

4. How we disclose information

We may disclose personal information in the following circumstances:

• At a customer’s direction: to authorized users, locations, drivers, renters, business partners, or integrations selected by the customer.
• Service providers: to companies that provide cloud hosting, analytics, communications, customer support, identity verification, payment processing, security, professional services, and other functions for us under contractual restrictions.
• Third-party integrations: to services connected or enabled by an authorized user. The third party’s terms and privacy policy govern its independent handling of information.
• Legal and safety reasons: when we reasonably believe disclosure is necessary to comply with law or legal process; protect the rights, property, or safety of CreekFleet, customers, users, or others; enforce agreements; or investigate fraud, security, or unlawful activity.
• Business transactions: in connection with a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction, subject to appropriate safeguards.
• With consent: when you direct us or otherwise consent to the disclosure.

We do not sell personal information for money. We also do not knowingly share personal information for cross-context behavioral advertising. If our practices change, we will provide any notices and choices required by law.

5. Data retention

We retain personal information for as long as reasonably necessary to provide the Services, maintain business and transaction records, comply with legal, tax, accounting, and reporting obligations, resolve disputes, enforce agreements, prevent fraud, and protect the Services. Retention periods vary based on the type of information, the customer’s instructions and account settings, the sensitivity of the information, and applicable law. We may retain aggregated or de-identified information where it can no longer reasonably identify an individual.

6. Data security

We use administrative, technical, and physical safeguards designed to protect personal information, including access controls, authentication, encryption where appropriate, logging, monitoring, backups, and vendor-management practices. No system or transmission method is completely secure, and we cannot guarantee absolute security. Account holders are responsible for protecting credentials, configuring user permissions appropriately, and notifying us promptly of suspected unauthorized access.

7. Your choices and rights

• Account information: authorized users may review or update certain information through account settings or by contacting their account administrator.
• Marketing communications: you may unsubscribe using the link in a marketing email. We may continue sending transactional, security, or service-related messages.
• Cookies: you may control cookies through browser or device settings.
• Customer-controlled data: if your information was submitted by a CreekFleet business customer, contact that customer to exercise your rights. We will assist the customer as required by our agreement and applicable law.

8. U.S. state privacy rights

Depending on where you live and subject to legal exceptions, you may have rights to request access to, correction of, deletion of, or a portable copy of personal information; to obtain information about categories of information collected and disclosed; and to appeal a denied request. You may also have rights to opt out of certain sales, targeted advertising, or profiling. CreekFleet does not discriminate against individuals for exercising applicable privacy rights.

To submit a request, email privacy@creekfleet.com or use our contact page. We may need to verify your identity and authority before responding. An authorized agent may submit a request where permitted, but we may request proof of authorization and identity. If we deny an appealable request, our response will explain how to appeal.

California residents may request the categories and specific pieces of personal information collected, sources, purposes, and categories of recipients, subject to applicable exceptions. We do not offer financial incentives for personal information and do not knowingly sell or share the personal information of consumers under 16.

9. International data transfers

CreekFleet and its service providers may process information in the United States and other countries whose data-protection laws may differ from those where you live. Where required, we use appropriate contractual or legal safeguards for international transfers.

10. Children’s privacy

The Services are intended for businesses and adults and are not directed to children under 13. We do not knowingly collect personal information directly from children under 13. If you believe a child has provided information to us without appropriate authorization, contact us so we can take appropriate action.

11. Third-party websites and services

The Services may link to or integrate with third-party websites, applications, payment providers, mapping services, telematics platforms, and other services. CreekFleet does not control their independent privacy practices. Review their privacy policies before providing information or enabling an integration.

12. Changes to this Privacy Policy

We may update this Policy as our Services, practices, or legal obligations change. We will post the revised Policy with a new “Last updated” date and provide additional notice when required by law. Continued use of the Services after an update is subject to the revised Policy.

13. Contact us

For privacy questions or requests, contact: