Privacy Policy

1. Introduction

FuelMaze Inc. ("Company," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our FuelMaze platform ("Service").

We are headquartered in Ontario, Canada. This Policy is designed to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), the California Consumer Privacy Act (CCPA), and other applicable privacy laws in Canada and the United States.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, company name, job title, and password.
• Business Data: Fuel pricing data, supplier information, terminal data, and cost calculations you upload or create.
• Communications: Information from emails and support inquiries you send to us.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, and actions taken within the Service.
• Device Information: Browser type, operating system, and device type.
• Log Data: IP address, access times, and error logs.

3. How We Use Your Information

The table below describes our purposes for processing your personal information and the legal basis for each:

4. Information Sharing

We do not sell your personal information.

We may share information with:

• Service Providers: Third parties who perform services on our behalf (e.g., hosting, email delivery).
• Legal Requirements: When required by law, subpoena, or legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.
• Your Organization: With other users in your tenant based on configured permissions.

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit using TLS
• Complete tenant data isolation (separate databases per customer)
• Role-based access controls
• Secure authentication with session management
• Comprehensive audit logging

6. Data Retention

• Active Accounts: Data is retained while your account remains active.
• After Cancellation: Data is deleted within 30 days of account cancellation.
• Audit Logs: Retained for up to 2 years for security and compliance purposes.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your personal data.
• Portability: Receive your data in a structured, machine-readable format.
• Withdraw Consent: Where processing is based on consent, you may withdraw it.

8. Canadian Privacy Rights (PIPEDA)

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have rights regarding your personal information:

• Access to information we hold about you
• Correction of inaccurate or incomplete information
• Withdrawal of consent (subject to legal restrictions)
• Filing a complaint with the Privacy Commissioner of Canada

9. U.S. State Privacy Rights

If you are a resident of California or another U.S. state with privacy legislation:

• CCPA/CPRA (California): Rights to know, delete, correct, and opt-out of sale.
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

We do not sell personal information and do not share it for cross-context behavioral advertising.

10. International Transfers

Your information may be processed in Canada and the United States where our servers and service providers operate. We ensure appropriate safeguards are in place for any data transfers.

11. Children's Privacy

Our Service is a B2B platform not intended for individuals under 18. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and by posting the updated policy with a new effective date.