Privacy Policy

1Who this policy covers

This Privacy Policy explains how [Your Company Name], LLC ("FuelCard", "we", "us") handles information when you visit yourdomain.com, create an account, use our dashboard or apps, or use a FuelCard card. It applies to business owners and beneficial owners, account Administrators, Drivers and other Cardholders, and website visitors.

Our customers are businesses. When a business adds a Driver, that business decides what the Driver's card can be used for and can see that Driver's transactions. Drivers with questions about how their employer uses this information should also contact their employer.

This policy is part of our Terms of Service.

2Information we collect

We may also receive information from identity verification, fraud prevention and credit reporting services, sanctions screening lists, and public business registries.

3How we use information

• Provide the Services — open and manage accounts, issue and ship cards, authorize and record transactions, apply your spending controls, and show reports.
• Verify identity and meet legal duties — perform Know Your Business and Know Your Customer checks, sanctions screening, and anti-money-laundering monitoring; respond to legal requests; keep required records.
• Prevent fraud and protect accounts — detect suspicious logins and transactions, send security codes, and investigate misuse.
• Communicate — send confirmations, alerts, statements, service updates, and responses to your questions. With your permission, we may also send product news; you can unsubscribe at any time.
• Improve the Services — troubleshoot, measure performance, and develop new features, using de-identified or aggregated data where possible.
• Enforce our agreements — collect amounts owed and protect the rights and safety of FuelCard, our customers and others.

4How we share information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share information only as follows:

• Program partners — Stripe, the Issuing Bank ([Issuing Bank Name], Member FDIC) and the Visa network, to issue cards, process transactions and comply with law.
• Service providers — hosting, email and SMS delivery, customer support, analytics and security vendors that process data on our behalf under contracts requiring confidentiality.
• Your company — Administrators of a business account can see the Drivers, cards and transactions on that account.
• Integrations you choose — accounting, fleet management or telematics tools you connect.
• Legal and safety — law enforcement, regulators or courts when required by law, or to protect rights, property or safety, including fraud prevention.
• Business transfers — a buyer or successor in a merger, acquisition, financing or sale of assets, subject to this policy.
• With consent — any other sharing you direct.

5Stripe & the issuing bank

Our card program is powered by Stripe Issuing and Stripe Connect. Business and owner verification is completed on pages hosted by Stripe, and Stripe processes that information as described in the Stripe Privacy Policy. Full card numbers, CVCs and PINs are handled within Stripe's PCI-DSS Level 1 certified environment; FuelCard does not store them on its own servers.

The Issuing Bank is subject to federal financial privacy laws, including the Gramm-Leach-Bliley Act, and may maintain its own privacy notice for the card program.

6Driver & vehicle data

Fleet fuel cards inherently record where and when fuel was purchased. Transaction location is collected from the merchant, not from a Driver's phone. If your company connects a telematics or GPS integration, we receive vehicle location and fuel data to match purchases to vehicles and flag mismatches, such as fuel bought far from the assigned vehicle.

Businesses are responsible for telling their Drivers that card and vehicle data is collected and for obtaining any consent required by law. We use Driver data only to provide the Services to that Driver's employer, to prevent fraud and to comply with law, never for advertising.

7Cookies & analytics

We use cookies and similar technologies that are:

• Essential — to keep you signed in, protect forms from forgery, and remember security settings. These cannot be turned off.
• Preferences — to remember choices such as language or table filters.
• Analytics — to understand how the Services are used and fix problems.

You can control cookies through your browser settings; blocking essential cookies may prevent sign-in. We honor Global Privacy Control signals where required by law.

8How we protect data

We use administrative, technical and physical safeguards designed to protect information, including:

• encryption in transit (TLS) and at rest for sensitive data;
• hashed passwords and optional two-factor authentication;
• role-based access so staff see only what they need;
• logging and monitoring for unusual activity;
• vendor review and confidentiality agreements.

No system is completely secure. If we learn of a breach affecting your personal information, we will notify you and regulators as required by law.

9How long we keep data

We keep information for as long as your account is open and afterward as needed to meet legal, tax, accounting, anti-money-laundering and dispute-resolution requirements. Financial and identity verification records are generally kept for at least five years after account closure, as required by the Bank Secrecy Act. When information is no longer needed, we delete or de-identify it.

10Your choices & rights

• Access and update — view and edit most account and Driver details in your dashboard.
• Request a copy or deletion — email [email protected]. Some data must be kept for legal reasons, and we will tell you if so.
• Marketing — click "unsubscribe" in any marketing email. You will still receive account and security messages.
• Text messages — reply STOP to opt out of non-essential texts.

We will verify your identity before acting on a request and will respond within the time required by law. If you are a Driver, we may refer your request to the business that issued your card.

11State privacy rights

Depending on where you live, such as California, Colorado, Connecticut, Virginia, Texas, Oregon and other states with comprehensive privacy laws, you may have the right to know what personal information we collect and how we use it, to access, correct or delete it, to obtain a portable copy, and to opt out of sale, targeted advertising and certain profiling. We do not sell personal information or use it for targeted advertising.

Many of these laws exempt information collected in a business-to-business context or governed by the Gramm-Leach-Bliley Act. Where a right applies, you or an authorized agent may exercise it by emailing [email protected]. We will not discriminate against you for exercising your rights. If we deny your request, you may appeal by replying to our decision.

12Children

The Services are for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

13Where data is stored

We are based in the United States and store and process information in the United States. The Services are intended for U.S. businesses.

14Changes to this policy

We may update this policy as our Services or the law change. We will post the new version here with a new "Last updated" date, and for material changes we will notify you by email or in the dashboard before they take effect.

15Contact us