Privacy Policy

1. Who We Are

Stolos360 Manager is a fleet operations platform designed for fleet managers and operators. It enables the creation and management of bookings, assignment of drivers and vehicles, real-time dispatch monitoring, and partnership channel management.

For the purposes of applicable data protection law, Stolos360 is the data controller responsible for your personal data.

2. Information We Collect

We collect the following categories of personal information when you use the App:

Account & Identity Data

• Full name and email address (used for login and account identification)
• User role and permissions (e.g., fleet manager, operator)
• Authentication credentials (managed securely via Firebase Authentication)

Operational Data

• Booking details: pick-up/drop-off locations, dates, times, passenger counts, notes
• Driver profiles: names, contact information, assigned vehicles
• Vehicle information: type, registration, capacity
• Assignment and dispatch records
• Price schema configurations and financial records
• Voucher and payment data associated with bookings

Communication Data

• Push notification tokens (for operational alerts and booking updates)
• In-app notifications and booking change request history
• Channel and partner booking communication logs

Technical Data

• Device type, operating system, and version
• App version and session identifiers
• Crash reports and error logs (via Sentry)
• IP address and approximate location (inferred from network)

Passenger / Customer Data (Processed on behalf of operators)

• Passenger full name, email address, and phone number
• Pick-up and drop-off addresses
• Special requirements or notes entered by the operator

3. How We Use Your Information

4. Sharing Your Information

We do not sell your personal data. We share data only in the following circumstances:

• Service providers: Firebase (Google) for authentication and database services; Sentry for error monitoring; Expo / EAS for build and push notification delivery.
• Partner operators: Booking data is shared with partner channels and operators as required to fulfill the transportation service.
• Assigned drivers: Relevant booking details are shared with the driver assigned to a booking through the companion Stolos360 Driver application.
• Legal requirements: We may disclose data when required by law, court order, or to protect the rights and safety of users or the public.

5. Data Retention

We retain personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Booking records are retained for a minimum of 3 years to comply with transport and financial recordkeeping obligations. Account data is deleted within 30 days of account termination upon written request.

6. Data Security

We implement industry-standard security measures including:

• TLS encryption for all data in transit between the App and our servers
• Firebase Security Rules enforcing role-based access control
• Secure token-based authentication with short-lived session tokens
• Error monitoring that automatically strips sensitive fields before transmission
• Regular security reviews and dependency audits

Despite our efforts, no method of electronic transmission or storage is 100% secure. We will notify affected users promptly in the event of a data breach that poses a risk to their rights.

7. Push Notifications

The App requests permission to send push notifications for operational purposes such as new booking assignments, status changes, and dispatch alerts. You may disable push notifications at any time through your device settings. Note that disabling notifications may affect operational responsiveness.

8. Location Data

The Stolos360 Manager application does not request or collect precise GPS location data from your device. Pick-up and drop-off location data entered during booking creation is address-based and entered manually by the operator.

9. Children's Privacy

The App is intended exclusively for professional use by fleet managers and operators aged 18 or older. We do not knowingly collect personal data from individuals under 18 years of age.

10. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data, subject to legal retention requirements.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, please contact us using the details in Section 12. We will respond within 30 days.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through an in-app notification or by email prior to the change taking effect. Continued use of the App after the effective date of a revised policy constitutes your acceptance of the changes. The "Last updated" date at the top of this page reflects the most recent revision.