Privacy notice

How we use your data

Last updated 28 September 2026

What we collect

This notice is public: you can read it before you register. We collect fleet account details, dispatch records, proof-of-delivery images, and — where a driver explicitly enables it — vehicle location and device-tracking health. Customer tracking links show delivery progress and may show an anonymous current truck position while a load is in transit, but not driver names, phone numbers, truck registration, or financial data. Anonymous page views (path, referrer, time on the page) are stored for our operator dashboard. Vercel Web Analytics, on the host that serves this site, also records page views. Neither is sold for advertising.

Why we use it

Data is used to plan and manage deliveries, provide customer updates, protect fleet assets, resolve operational disputes, and meet the fleet's own record-keeping obligations. It is not sold for advertising. When Vula is enabled for a fleet, an owner or manager question is classified by a language model. Fleet rows stay on Vulaway servers; the model does not receive trip, invoice or driver records. The assistant is off unless we switch it on.

Location controls and retention

  • Drivers see when location tracking is active and can see its status in the app.
  • Public customer links round live and destination coordinates to an approximate area.
  • Raw driver location events are removed after 90 days; truck position history after 30 days.
  • Last-known driver-app coordinates with no ping for 90 days are nulled. The row and dispatch flags stay; a three-month-old pin is no use to dispatch.
  • A fleet owner can erase a driver's name, contact, login and location traces on request. Proof of delivery, weighbridge tickets, invoices and dispatch records stay as the fleet's operational records. Job cards may still show the name that was saved when the load was planned.
  • WhatsApp Share and the dispatcher companion upload road, hold-up, fingerprint and capture time only. Message text, sender names and numbers from those groups are not collected on those paths. Group titles may sit on the companion handset for a day so the exact name can be tapped; they are not uploaded. A technical HTTP ingest token still stores a redacted copy of text you POST to it. Public SANRAL map pins and East Coast Radio bulletins are collected on a shared schedule even when no fleet has a page open. National WhatsApp groups stay off unless we enable them.
  • Customer tracking links expire after 10 days and can be disabled immediately by the fleet.
  • POD, invoices, and audit records follow the fleet's operational and legal retention needs.

Your fleet's responsibilities

Fleets must obtain a lawful basis and give drivers the notices required for their workforce and operating environment. Give customer tracking links only to the intended recipient and disable them when they are no longer needed. For a data request or to report a concern, contact your fleet administrator or support@vulaway.co.za.

Privacy requests: support@vulaway.co.za

Privacy and location data — Vulaway