Privacy Policy

1. Introduction

RouteWise Inc. ("RouteWise," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our transportation management platform and marketing website (collectively, the "Service").

This policy applies to all users of our Service, including administrators, drivers, monitors, and visitors to our marketing website at routewiseapp.com. By using the Service, you consent to the data practices described in this policy.

2. Data Collection

2.1 Information You Provide

We collect information that you voluntarily provide when using the Service:

• Account Information: Name, email address, password, company name, phone number, and billing details when you create an account
• Transportation Data: Student records (names, addresses, school assignments), driver information, vehicle details, route definitions, and operational data you enter into the platform
• Communication Data: Messages sent through contact forms, demo requests, and support communications
• Payment Information: Billing details processed securely through our payment processor, Stripe. We do not store credit card numbers on our servers

2.2 Information Collected Automatically

When you access the Service, we may automatically collect:

• Device Information: Browser type, operating system, device identifiers, and screen resolution
• Usage Data: Pages visited, features used, click patterns, and session duration
• Location Data: GPS coordinates from driver and monitor mobile devices during active route execution (with explicit consent)
• Log Data: IP addresses, access times, and referring URLs

2.3 Cookies and Tracking Technologies

We use cookies and similar technologies on our marketing website for analytics purposes. Analytics cookies (Google Analytics 4) are only activated after you provide explicit consent through our cookie consent banner. You may withdraw consent at any time.

3. How We Use Your Data

We use collected information for the following purposes:

• Providing, operating, and maintaining the transportation management platform
• Processing your account registration and managing your subscription
• Enabling real-time GPS tracking and route optimization for authorized users
• Generating operational reports and analytics dashboards for your organization
• Communicating with you about service updates, security alerts, and support responses
• Improving our Service through aggregated, anonymized usage analytics
• Detecting and preventing fraud, abuse, and unauthorized access
• Complying with legal obligations and enforcing our Terms of Service

4. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:

• Active Account Data: Retained for the duration of your subscription plus 90 days after account termination to allow for data export
• GPS and Location Data: Retained for 12 months from the date of collection, then automatically anonymized or deleted
• Contact and Demo Request Submissions: Retained for 24 months unless you request earlier deletion
• Billing Records: Retained for 7 years as required by tax and accounting regulations
• Audit Logs: Retained for 3 years for security and compliance purposes

After the retention period expires, data is securely deleted or anonymized so it can no longer be associated with an identifiable individual.

5. Third-Party Sharing

We do not sell your personal information. We may share your data with the following categories of third parties:

• Payment Processors: Stripe processes payment transactions on our behalf. Their use of your information is governed by Stripe's Privacy Policy
• Cloud Infrastructure: We host our services on secure cloud infrastructure providers (AWS) who process data on our behalf under strict contractual obligations
• Analytics Providers: Google Analytics 4 collects anonymized usage data on our marketing website, subject to your consent
• Email Services: We use email service providers to send transactional emails (welcome messages, password resets, notifications)
• Legal Requirements: We may disclose information when required by law, legal process, or government request, or to protect rights, property, or safety

All third-party processors are bound by data processing agreements that require them to protect your information and use it solely for the services they provide to us.

6. Your Privacy Rights

6.1 Rights Under GDPR (European Economic Area)

If you are located in the EEA, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

6.2 Rights Under CCPA (California Residents)

If you are a California resident, you have the following rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information collected about you
• Right to Delete: Request deletion of your personal information, subject to certain exceptions
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell personal data)
• Right to Non-Discrimination: You will not receive discriminatory treatment for exercising your privacy rights

6.3 Exercising Your Rights

To exercise any of these rights, please submit a request to privacy@routewiseapp.com or through the privacy settings in your account dashboard. We will respond to all legitimate requests within 30 days. We may need to verify your identity before processing certain requests.

7. Children's Privacy

While our platform manages student transportation records, student data is provided by authorized school administrators and transportation companies — not directly by children. We comply with FERPA (Family Educational Rights and Privacy Act) and COPPA (Children's Online Privacy Protection Act) requirements. We do not knowingly collect personal information directly from children under 13.

8. International Data Transfers

Your data may be transferred to and processed in the United States, where our servers are located. For transfers from the EEA, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection of your personal data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. For significant changes, we will also send a notification to your registered email address.

10. Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection Officer:

If you are in the EEA and believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority.