Privacy Policy

1. Information we collect — Web App

When you create an AFP Manager account and use the Web App, we collect:

• Account information: first and last name, email address, password (stored as a salted hash, never in plain text), and optionally your phone number, company name, and USDOT number.
• Login and security data: IP address, browser/device user-agent, and device identifiers, recorded on login and other account events (registration, login, failed login, logout, password reset, multi-factor authentication) for account security and audit purposes.
• Billing information: if you subscribe to a paid plan, our payment processor Stripe collects and stores your payment card details directly — we never receive or store your card number. We store only your Stripe customer/subscription identifiers, plan tier, subscription status, and whether a payment method is on file.
• Driver roster data (if you use "Sync with Relay"): if you choose to sync driver data from Amazon Relay through the Web App (using the Extension, described in Section 3), we save a copy of that data to our servers so it can power your dispatch dashboard. This includes driver first and last name, email, phone number, license number, license class/region/expiration, domicile, and Relay compliance status, plus any additional information you enter yourself within AFP Manager about a driver (for example, a nickname, pay rate, notes, or benefits-enrollment status).

2. Information we collect — Chrome Extension

The Extension adds a button to Amazon Relay's Trips/Upcoming pages that shows live Hours-of-Service (HOS) status for drivers, by connecting to your own Geotab account. The Extension handles the following data, and all of it is stored locally in your browser using chrome.storage.local — the Extension itself never sends this data to AFP Manager's servers.

• Geotab service-account credentials: the Geotab database name, email, and password you enter in the Extension's popup. These are stored locally in your browser and sent only to Geotab's own login API, to authenticate you with Geotab.
• Driver names and license numbers: fetched from Amazon Relay's and Geotab's own APIs using your existing sessions/credentials with those services, and cached locally in your browser so the Extension doesn't have to re-fetch them on every use.
• HOS/duty-status data: fetched fresh from Geotab each time you use the Extension. This data is never stored — it is held only in memory for that one action and discarded afterward.

Uninstalling the Extension, or clearing your browser's site data for the Extension, permanently deletes everything the Extension has stored locally, including your saved Geotab credentials.

3. How the Extension and Web App work together

If you use the Web App's "Sync with Relay" feature, the Web App retrieves the driver data the Extension has cached locally in your browser (see Section 2) and sends it to AFP Manager's servers, where it is saved as part of your driver roster (Section 1). This is a first-party feature of the Web App, distinct from the Extension itself — the Extension does not initiate this transfer or communicate with AFP Manager's servers on its own. You can use the Extension purely for its live HOS lookup on Amazon Relay's pages without ever using "Sync with Relay," in which case no driver data reaches our servers from the Extension at all.

4. How we use information

We use the information described above only to:

• Provide, operate, and maintain the Web App and Extension (for example, authenticating you, displaying your driver roster, and showing live HOS status).
• Secure your account and investigate suspicious activity (for example, using login/audit records).
• Process billing and manage subscriptions through Stripe.
• Respond to support requests and communicate with you about the Service.

We do not use your data for advertising, analytics or tracking, credit or lending decisions, or any purpose unrelated to providing the Service. We do not run any third-party advertising or web-analytics scripts on the Web App or within the Extension.

5. Data we do not collect

Neither the Web App nor the Extension collects health or medical data, financial or payment card information (see Section 1 on Stripe), personal communications (such as emails or messages), your location, your browsing or web history, or activity-tracking data such as clicks, keystrokes, or mouse movements.

6. How we share information

We do not sell your information, and we do not share it with third parties for their own marketing or advertising purposes. We share information only as follows:

• With services you explicitly connect to. The Extension sends your Geotab credentials only to Geotab's own login API, and reads driver/HOS data only from Amazon Relay's and Geotab's own APIs — using your own accounts and sessions with those services. AFP Manager does not control, and is not responsible for, how Amazon Relay or Geotab handle data once it reaches them; their own privacy policies apply to that data.
• With Stripe, our payment processor, solely to process subscription billing.
• With service providers who host our infrastructure and process data on our behalf, under confidentiality obligations, and solely to operate the Service.
• If required by law, such as in response to a valid legal request, or to protect the rights, property, or safety of AFP Manager, our users, or others.

7. Data retention

We retain account and driver roster data on our servers for as long as your account is active, or as needed to provide the Service, and delete it upon account closure or as required by law, except where retention is needed for legitimate business or legal purposes (for example, financial records). Data cached locally by the Extension remains on your device until you clear it or uninstall the Extension; HOS data is never persisted anywhere.

8. Security

We use industry-standard measures to protect your data, including password hashing, encrypted connections (HTTPS), and access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your choices

• You can access, correct, or request deletion of your account and driver roster data by contacting us (below) or, where available, directly within the Web App.
• You can remove all Extension-stored data at any time by uninstalling the Extension or clearing its local site data in your browser.
• You can stop using "Sync with Relay" at any time; doing so stops any further driver data from being sent to our servers.

10. Children's privacy

The Service is intended for business use by fleet operators and their staff, and is not directed to children under 16. We do not knowingly collect information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you directly.

12. Contact us

If you have questions about this Privacy Policy or how your data is handled, contact us at support@afpmanager.com or via our contact page.