Privacy Policy

Saphyroo Pty Ltd ("Saphyroo") operates the Drive360 platform and the saphyroo.com website. We collect personal information to operate the service, support customers, and meet regulatory obligations.

What we collect

• Account information (name, email, role, employer).
• Operational telemetry from connected vehicles (location, sensor data).
• Compliance evidence (work diaries, inspections, vehicle documents).
• Support and product-usage logs needed to operate the service.

How we use it

• Deliver the contracted service to fleet operators.
• Meet legal and regulatory obligations (e.g. NHVR, FORS, PDPL evidence).
• Improve the product, using aggregated, de-identified usage data.

Data residency

Data stays in-region: Sydney for Australia / Asia-Pacific, London for the United Kingdom, and Riyadh for Saudi Arabia. We do not transfer personal information across regions unless explicitly authorised by the customer.

Your rights

You can request access, correction, or deletion of your personal information by emailing [email protected].

Account deletion

Drive360 is a business application provided by Saphyroo Pty Ltd to transport and logistics operators. Driver and staff accounts on Drive360 are issued and managed by the operator (your employer) under their contract with Saphyroo.

To request deletion of your Drive360 account and personal data, email [email protected] from the address associated with your Drive360 account, with the subject "Account deletion request - Drive360" and your full name. We will:

• confirm your identity within 2 business days
• notify the operator who manages your account so they can deprovision you
• delete your personal profile data (full name, email, phone, profile photo, biometric identifier hashes, login credentials, push token, and location history older than the regulatory retention window) within 30 days of confirmation

Records required by Australian Heavy Vehicle National Law and equivalent fleet and transport regulations are retained for three years from creation, in de-identified form where the law permits. This includes driver fatigue records, vehicle inspection records, incident reports, and route and GPS logs linked to a regulated vehicle. Operators are the data controllers for this information; questions about specific retained records should be directed to your operator's compliance officer.

Contact: [email protected] or [email protected].

This is a draft. Full policy lives in our DPA + with each customer's legal review.