Privacy Policy
This policy explains which personal data Nória Fleet processes, why, for how long and with whom it is shared. It also shows how you exercise your rights under the Brazilian General Data Protection Law (LGPD).
Source: https://noriafleet.com.br/en/privacy/2/
Who the controller is
The controller of the data described in this policy is [to be defined], CNPJ [to be defined], located at [to be defined].
Data protection officer: [to be defined], e-mail [to be defined]. General contact: [to be defined].
| Data | Role of Nória Fleet | Who the controller is |
|---|---|---|
| Account, profile, session, acceptances, requests, support reports, site contact, access logs | controller | [to be defined] |
| Data the customer company enters (vehicles, documents, maintenance, fuelings, expenses, checklists, photos, attachments) | processor (art. 5, VII) | the customer company |
| Company billing | controller of the local records; Stripe processes the payment | [to be defined] and Stripe |
What we process
| Feature | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form (site) | name, e-mail, subject, message, language, a code derived from the IP (salted hash, not the IP) | reply and prevent abuse | legitimate interest (art. 7, IX) |
| Anti-bot check (site) | what the browser sends to Cloudflare Turnstile on the form; the API does not send the IP to Cloudflare | prevent abuse | legitimate interest (art. 7, IX) |
| Account | name, e-mail, password hash, account status, e-mail confirmation date | provide the service and authenticate | performance of contract (art. 7, V) |
| Profile (optional) | phone, CPF, address, photo | identification and contact within the service | performance of contract (art. 7, V) |
| Session and security | session tokens, confirmation and password reset links (stored only as a hash) | keep the session and recover access | performance of contract; legitimate interest |
| Invitations | e-mail of the invited person, role, company, who invited | grant access to a company | performance of contract; the customer company's legitimate interest |
| Memberships | company, role, joining and leaving | access control and history | performance of contract (art. 7, V) |
| Support report | type, subject, description, page, language; browser data only if you tick the option | handle the report | performance of contract; browser data: consent (art. 7, I) |
| Acceptance of the terms | document, version, language, channel, instant, a code derived from the IP (salted hash) | prove the acceptance | regular exercise of rights (art. 7, VI) |
| Deletion request | dates and status of the request | prove it was handled | compliance with a legal obligation (art. 7, II) |
| Billing | company data, Stripe identifiers and status, amounts; the card never passes through Nória Fleet | charge the plan | performance of contract; tax obligation |
| Access logs | IP, date and time, route, browser (user agent), user identifier, masked e-mail | security and diagnostics | legal obligation and legitimate interest |
| Site usage measurement (only if you accept) | event type (page viewed, block viewed, button clicked, plans viewed, question opened, contact sent), which block, button or question, language, page, domain of the site you came from, date and time; no IP, no browser or device identifier and no link to an account | learn, in totals per period, which parts of the site are useful | consent (art. 7, I) |
For the site usage measurement, the IP of whoever sends the event reaches the API as in any request: it is used only in the server memory to limit the volume of submissions and may appear in the access logs, under their retention period. It is never stored with the event.
How long we keep it
| Data | Period |
|---|---|
| Contact message | 365 days from receipt; the copy in the team's mailbox is deleted by a monthly manual routine, within 12 months of receipt |
| Support report | 365 days; earlier, if you delete the account |
| Session, confirmation and password tokens | 30 days after they expire (the session expires in 7 days, the password link in 1 hour, the confirmation link in 24 hours) |
| Payment events received from Stripe | 90 days |
| Invitations | expire in 7 days; the e-mail is anonymised 180 days after expiry |
| Unconfirmed account | anonymised 30 days after sign-up |
| Account and profile | while the account exists; anonymised 7 days after the deletion request |
| Acceptances and deletion requests | kept as proof, without personal data after anonymisation |
| Billing | while the company exists and for the tax retention period |
| Site usage measurement | 90 days from the record; then deleted automatically |
| Access logs | for the log platform's retention period, to be defined |
Who we share it with
We do not sell or rent personal data. We use the processors below to provide the service. Data is only handed to authorities under a legal obligation or a court order. When you fill in an address, we query the public ViaCEP service from our server: it receives only the CEP you typed, with no IP, browser or identifier of yours, and we keep nothing it returns beyond the address you save.
| Processor | What for | Data |
|---|---|---|
| Stripe | payments | company billing data |
| Amazon Web Services (S3) | file storage | photos, logos, attachments and documents uploaded |
| Cloudflare (Turnstile) | anti-bot check on the site | browser data in the challenge |
| E-mail provider (SMTP) | account e-mails | e-mail, name and e-mail content |
| Log platform (when enabled) | access logs | IP, route, browser and user identifier |
| ViaCEP (public lookup) | fill in the address from the CEP | only the CEP typed |
International transfer
Stripe and Cloudflare process data outside Brazil. The region of the file storage, the e-mail provider and the log platform will be confirmed at deployment. When there is an international transfer, it relies on the applicable mechanisms of art. 33 of the LGPD, such as contractual clauses.
Cookies and local storage
We use no analytics, advertising or third-party tracking tools. On the site, we run our own usage measurement, described in "What we process", only if you accept it in the privacy notice; without your acceptance, or if you decline, nothing is measured. If we start using a third-party tool, we will ask for your consent before loading it. Every item below is strictly necessary or stores a choice of yours.
You can change your choice about the measurement at any time under "Privacy preferences", in the site footer, as easily as you accepted it. When you decline, the measurement stops at once. What was already recorded has no identifier linking the events to you, so we cannot find or delete it per person; it is deleted automatically after 90 days.
| Name | Where | Type | What for | Duration |
|---|---|---|---|---|
| nb_access | signed-in area | HttpOnly cookie | session | 15 minutes |
| nb_refresh | signed-in area | HttpOnly cookie | renew the session | 7 days |
| nb_expired | signed-in area | HttpOnly cookie | tell that the session expired | 10 seconds |
| nb_locale, nb_company, nb_sidebar, nb_onboarding | signed-in area | cookie | language, active company, collapsed menu, welcome skipped | 1 year |
| nb_locale | site | local storage | chosen language | until you clear it |
| nb_analytics_consent | site | local storage | remember whether you accepted or declined the usage measurement | until you clear it or change your choice |
| nb_theme | site and signed-in area | local storage | light or dark theme | until you clear it |
| form drafts and last choices (defect, document, expense, fueling, checklist) | signed-in area | local storage | not to lose what was typed and to remember the last choice | draft: until sent or 7 days without editing; all of it is removed on sign-out or on a deletion request |
Your rights
The LGPD (art. 18) grants you: confirmation that we process your data; access; correction; anonymisation, blocking or deletion of unnecessary data; portability; information on whom we share it with; withdrawal of consent; and a petition to the National Data Protection Authority (ANPD).
- In the signed-in area, under "My profile > Privacy": download your data or request account deletion.
- Under "My profile > Profile" and "My profile > Address": correct your data.
- On the site, under "Privacy preferences" (footer): accept or decline the usage measurement, or withdraw your acceptance.
- By e-mail to the data protection officer ([to be defined]) or through the contact form on the site.
We reply immediately, in a simplified format, or within 15 days, in a complete statement. Fleet data (vehicles, documents, maintenance, fuelings, expenses, checklists) belongs to the customer company, which is its controller: requests about it must be made to that company.
Account deletion
When you request deletion, your account is anonymised 7 days later. Until then you can cancel the request in the signed-in area, where the link in the e-mail confirming the request leads. After that date it cannot be undone.
If you are the last administrator of an active company, the deletion cannot be done until someone else takes over the administration or the company is deactivated: the signed-in area shows what is left to resolve. If this happens during the 7 days, the request is blocked, nothing is anonymised and you are told to resolve it and request again.
| Erased or anonymised | Kept (and why) |
|---|---|
| name, e-mail, CPF, phone, address, photo, password and language | records that you accepted the terms and requested deletion (proof, without personal data) |
| company memberships, sessions and notification preferences | fleet history (vehicles, maintenance, documents, fuelings, expenses, checklists), shown as "Removed user" (the customer company needs it) |
| support reports | billing and payments (they belong to the company and have a tax retention period) |
| your e-mail in received invitations | access logs, for the log platform's retention period |
| messages sent through the site's contact form with the account's e-mail, if it was confirmed (name, e-mail, subject and text) | what was typed on Stripe's payment page (such as e-mail and card), kept by Stripe |
| the code derived from the IP stored with the acceptances | system notices already generated, linked only to the account's identifier |
Security
- Passwords stored with argon2id, never as text.
- Traffic over HTTPS only (HSTS).
- HttpOnly session cookies.
- Tokens stored only as a hash.
- Vehicle documents in private storage, with authenticated download.
- Isolation between companies checked on every request.
- Attempt limits and logs with sensitive data masked.
Children and adolescents
Nória Fleet is a service for companies, intended for people over 18. We do not knowingly process data of children or adolescents.
Changes to this policy
Each version has a number and an effective date, and the version history is public on this page. When a change is relevant, we will ask for a new acceptance in the signed-in area before you continue.
Contact
Data protection officer: [to be defined], [to be defined]. General contact: [to be defined].
Versions of this document
- Version 2, in effect from November 23, 2026 (upcoming)
- Version 1, in effect since October 18, 2026 (current)