Privacy Policy
Last updated: 1 June 2026
1. Data Controller
Oxus Technologies Limited is the data controller for personal data processed through FleetMain. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and the Irish Data Protection Acts.
2. Data We Collect
We collect the following categories of personal data:
- Account data: Name, email address, organisation name
- Vehicle data: Registration numbers, vehicle details, expiry dates you enter
- Billing data: Payment information processed by Stripe (we do not store card numbers)
- Usage data: Log data, browser type, IP address, pages visited
- Communications: Emails you send to us
3. Legal Basis for Processing
We process your personal data on the following legal bases:
- Contract performance: To provide the FleetMain service you have subscribed to
- Legitimate interests: To improve our service, prevent fraud, and maintain security
- Consent: For optional cookies and marketing communications
- Legal obligation: Where required by Irish or EU law
4. How We Use Your Data
- To provide and maintain the FleetMain service
- To send compliance alert emails for your fleet vehicles
- To process payments and manage your subscription
- To send transactional emails (account confirmation, password reset)
- To respond to your support and enquiry messages
- To improve and develop new features
5. Third-Party Services
We use the following third-party processors:
- Supabase: Database and authentication (EU data residency)
- Stripe: Payment processing (PCI-DSS compliant)
- Resend: Transactional email delivery
- Vercel: Application hosting
Each processor operates under appropriate data processing agreements and GDPR-compliant safeguards.
6. Data Retention
We retain your account and vehicle data for as long as your account is active. Upon account deletion or termination, your data is retained for 30 days to allow export, then permanently deleted. Billing records may be retained for up to 7 years as required by Irish tax law.
7. Your Rights
Under GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate personal data
- Erasure: Request deletion of your personal data
- Portability: Receive your data in a machine-readable format
- Restriction: Restrict processing of your data
- Object: Object to processing based on legitimate interests
- Withdraw consent: Withdraw consent where processing is consent-based
To exercise any of these rights, contact us at privacy@fleetmain.ie.
8. Cookies
We use essential cookies required for authentication and session management. Optional analytics cookies are only set with your consent. See our Cookie Policy for full details.
9. Complaints
If you believe we have not complied with data protection law, you have the right to lodge a complaint with the Data Protection Commission (DPC) at www.dataprotection.ie.
10. Contact
Data protection enquiries: privacy@fleetmain.ie