Privacy Notice

This notice covers Taylor's Fleet Services. "We" and "us" mean TayTech Innovations LLC, which provides it and is the controller of the information described under "What We Collect About You" below.

What We Collect About You

Your name, email address, and the business details you enter when setting up your fleet: business name, address and phone number. We also keep the ordinary records of an account, because they are what an audit trail is: our service logs note when you signed in and when you changed your password, email address or two-step sign-in, and your fleet's audit log records what you changed in the fleet. We record the internet address you accepted these documents from, at sign-up and each time you accept a new version. The addresses we count to limit repeated sign-in, sign-up, password-reset and email-confirmation attempts are deleted nightly once that count no longer needs them. If you turn on two-step sign-in, we keep the secret your authenticator app uses, so we can check your codes.

Visitors to Our Website

Our public website uses Google, Meta and Reddit advertising tags to measure visits and sign-ups and to show our ads to people who visited, never with your name, email address or any fleet's records; Cookie Choices at the foot of our pages, or a Global Privacy Control signal, turns them off.

The sign-up form uses Cloudflare Turnstile to tell people from automated sign-ups. Cloudflare sees your browser's signals and address for that check.

What We Hold on Your Behalf

Operating a fleet means this software holds records about your vehicles, your expenses, the people who clean and manage your cars, and the trips those vehicles are booked for. Some of that describes other people: your cleaners, and the guests who rent your cars.

For that data you are the controller and we are the processor. Your guests have no relationship with us. We process their information on your instructions in order to provide the service to you, and for nothing else. See the Data Processing Addendum.

Email You Forward to Us

If you use receipt forwarding, you send us copies of messages you choose to forward. We read messages from a published list of senders we can parse, and PayPal, Venmo, Discount Tire and America's Tire receipts that arrive even where that list does not show them. We also read the following, whether they arrive at your forwarding address or at the reply address on the mail we send for you:

• A reply to a cleaning request we emailed, found by the request number in its subject. One that does not answer the email we sent is not applied; its text is shown to you as an alert instead.
• Any other message from a cleaner you have added, or from a mechanic you have sent a task to. The first part of its text is shown to you as an alert. A mechanic's message, and a cleaner's that names one of their tasks, is also saved as a note on that task (for a mechanic, their latest task when it names none) and in your fleet's audit log.
• A message from the address of one of your fleet's owners or admins, which we check for the original sender of mail forwarded by hand. If that is one of the listed senders, it is read as their mail; if not, it is discarded and we keep only its sender address and subject line.

Anything from any other sender is discarded on arrival without its contents being read or stored; we keep only the sender address and subject line, for 45 days, so you can see that your forwarding rule is set up wrongly.

Because forwarding breaks the original message's cryptographic signature, we cannot prove a forwarded receipt genuinely came from the sender it names.

Gmail You Connect

If an owner or admin of your fleet presses Connect Gmail, you give us read-only access to that Gmail account through Google's own sign-in screen (the Google permission called "read your email"). We never see the account's password, and we cannot send, change or delete mail.

• What we read: we only ever ask Gmail for messages from the senders of the kinds of mail you switch on: Turo (turo.com), payment receipts (paypal.com and venmo.com) and mechanic invoices, which are InvoiceSimple (getinvoicesimple.com and invoicesimple.com) and, with them, tire receipts from Discount Tire (discounttire.com) and America's Tire (americastire.com) and GPS tracker receipts and orders from Qarhami (invoice+statements@qarhami.com and support@qarhami.com). Each kind has its own switch on the Mail settings, and under Advanced there each of those senders has its own switch too; a sender you switch off is never asked for. A connection made before the 2026-10-04 version of this notice reads Turo only until you switch the others on. We read first from the last 120 days and then new ones about every ten minutes. Each one is handled exactly as if you had forwarded it to us, as described under "Email You Forward to Us": the trip, payment or invoice details in it are recorded, and only its sender, subject and what we did with it are kept in your Recently Received list for 45 days. For a mechanic invoice we open the invoice link in the email on InvoiceSimple's site and keep a copy of that invoice page with the invoice, as we do for invoices you forward; InvoiceSimple may tell your mechanic the invoice was viewed. A message the search returns whose own sender line is not one of those senders is discarded once that line is checked; its contents are not read or kept. No other message in the mailbox is listed, opened or stored.
• What we store: the Gmail address you connected, Google's sign-in key for it (encrypted), which kinds of mail you switched on, when we last checked, and the date of the newest message read, so the next check starts there.
• How it is read: by our own rules. Mail read from Gmail, and the invoice pages it links to, are not sent to Anthropic or any other AI service, and we do not use them to train models or for advertising. The car an invoice from Gmail belongs to is worked out by our own rules only; when they cannot tell, the invoice waits for you to pick the car.
• Stopping it: Disconnect Gmail, on the Email Forwarding settings page or the Bring In Your Cars and Bookings page, asks Google to cancel our access and deletes the stored key at once. You can also remove our access in your Google Account under Security, Third-party apps. Trips already recorded stay in your fleet until you delete them or close the fleet.

Taylor's Fleet Services' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Who Else Sees It

We use these subprocessors:

• Fly.io: hosting, the database, and the encrypted disk it runs on
• Tigris: storage for the documents, photos and receipts you upload, and offsite backup storage. A nightly compressed copy of your fleet's database is written there and kept for thirty days. It is reached through Fly.io but operated by a separate company, so it is named here in its own right rather than folded into the line above.
• Mailgun: receives the mail you forward to your inbound address, and sends the mail this service sends on your behalf, including the cleaning requests that go to your contractors. Every forwarded message passes through it before we see it, and every message we send passes through it on the way out.
• Stripe: subscription payments
• Anthropic: reading text from photographs you supply, such as odometer readings; reading the text of receipts and invoices you upload, so the amount, the vendor and the car can be filled in for you; and reading the text of replies your cleaners send to a cleaning request so we can tell which cars they accepted; and, when a Google Drive cleaning folder's name does not clearly match one of your cars, working out which car it is. For that, the folder's name and your cars' details (year, make, model, trim, color and license plate) are sent. That means the body of a contractor's reply, the contents of a receipt, and your cars' plates are sent to Anthropic, not only your photographs.
• Google: reads the cleaning photos in the Google Drive folder you share with our Google service account; if you connect Gmail, the Turo, receipt and invoice messages in it, as described under "Gmail You Connect"; also Google's advertising tags on our public website, as described above
• Resend, and a second email provider: backup routes for alert emails, so an alert still arrives when the main mail route fails; the alert's text passes through them
• ntfy.sh: delivers phone alerts for a fleet that sets an ntfy topic, and our own alerts about running the service, which can name a fleet and, when a fleet signs up, the username of the person who created it; the alert's text passes through it. ntfy.sh is a public relay operated under its own published terms, not an agreement with us, and anyone who knows a topic's name can read what is sent to it
• Pushover: delivers our own alerts about running the service to our phone; the alert's text, which can name a fleet, passes through it. A customer fleet's own alerts never go through it
• OpenStreetMap: draws the map on a vehicle's page when you have connected telematics. Your browser loads the map from OpenStreetMap with the vehicle's last reported location in the request
• Cloudflare: the bot check on our sign-up form
• Meta and Reddit: advertising measurement on our public website, as described above
• Bouncie: the telematics account YOU connect, if you use one

Where you connect your own Google or Bouncie account, that data is in your account under your agreement with them, not ours.

We do not sell personal information, and we do not use your fleet's data to train models. The only information shared for advertising is the website visit information described under "Visitors to Our Website", and none once you opt out.

Telematics

If you record vehicle location, you are recording where someone else is driving. Several jurisdictions regulate that directly and the obligation to disclose it falls on you as well as on us. This feature is off unless you turn it on.

Where It Is Stored

In the United States, on Fly.io infrastructure. Storage volumes are encrypted at rest by the hosting provider and all traffic to the service is encrypted in transit.

Support Access

To help you, our support staff can open a read-only view of your fleet, seeing it as one of its members sees it (their role, cars, time zone and display settings), or as its admin. Nothing can be saved, sent or paid during it. We never see anyone's password or two-step codes and cannot sign in as anyone. A view stays open until support ends it. Each view's start and end, who opened it and whose view it was are recorded in your fleet's audit log, which is in your data export; your fleet's owners are emailed when one starts; and Settings shows the date of the latest one.

How Long We Keep It

For as long as your fleet exists. The one exception is your fleet's audit log (who changed what), whose entries are deleted after 13 months, except refunds and our support views, which are kept for as long as your fleet exists.

When you delete your fleet, its data is deleted from the live database immediately. Two things survive that, both for 30 days.

The first is one compressed recovery copy of the deleted fleet's records, written at the moment of deletion and held on the same encrypted-at-rest storage as everything else described above. It exists because deletion is self-service and a mistaken click would otherwise be unrecoverable: if you ask us within 30 days, we can put your fleet back. The files you uploaded are kept for the same 30 days so that a fleet put back gets them back too. The copy and the files are deleted automatically at the end of that window.

The second is our ordinary backups, which are taken nightly and each kept for 30 days, so deleted data ages out of the last backup containing it within 30 days. The one exception is a safeguard: if backups have been failing, the most recent good backup is kept until a newer one succeeds, so there is always one to restore from.

After that window nothing remains and we cannot recover it, with three exceptions. So that each car gets one free trial, we keep a one-way fingerprint of each car's VIN and of the Turo reservation numbers in forwarded booking emails (computed with a secret key; the VIN and reservation numbers themselves cannot be read back from it) and the number of the fleet that added it. We keep these for as long as we offer a free trial, and use them for nothing else.

So that nobody is emailed again after mail to them bounced or they reported it as spam, we keep that email address, with the reason the mail service gave, on the list of addresses this service does not send to. Our own alerts about running the service are kept too, and can name a fleet: for example, that it reached its daily email limit, or that we closed it.

A fleet that never subscribes, and that nobody signs in to for 60 days, is closed after a warning email, with the same 30-day recovery copy.

Your own account is separate from the fleet, because one person can work for several. When you delete your account (Settings, Delete My Account), it stops working at once. When you leave, are removed from, or close your last fleet, it no longer gives access to any fleet. Either way, 30 days later everything personal on it is overwritten: your name, email address, phone number, password and profile picture, along with every sign-in session and login record. An empty placeholder row survives so that other fleets you once worked for do not lose their own history of who did what, and it holds nothing that identifies you. If your address is on the list of addresses we do not send to, described above, it stays there. An account that never joins a fleet, for example because sign-up stopped before a fleet was created, is kept until you delete it (Settings, Delete My Account).

Discarded inbound email metadata is kept for 45 days, as described above.

Your Rights

Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, receive a copy in a portable form, or object to particular processing. Californian residents additionally have the rights described in the CCPA, including the right not to be discriminated against for exercising them. We do not sell personal information. To opt out of the advertising measurement on our website, use Cookie Choices at the foot of our pages or send a Global Privacy Control signal.

You can delete your own account inside the product (Settings, Delete My Account). A fleet's Owner or Admin can export its records, and the files uploaded to it, inside the product; the export is a machine-readable file that states, inside itself, exactly what it does and does not contain (see section 4 of the Terms). For a copy of your own account data, for anything else, or for a request about data we hold as your processor, write to the support address. We answer within 30 days.

If you are a renter or contractor of one of our customers, your relationship is with them: send your request to the fleet you dealt with, and we will assist them in answering it.

Contact

Questions about this document go to the support address shown on the sign-in page and in the in-app guide.