Privacy policy
Last updated: 12 September 2026
This policy describes how Divelofleet (“we”, “us”) processes personal and operational data for destination management companies (DMCs), tour operators, dispatchers, and drivers using our B2B airport-dispatch software in Puerto Plata, Dominican Republic. We do not sell passenger lists or driver location histories.
Who we are
Controller for the SaaS platform: Divelofleet, Puerto Plata, Dominican Republic. Email: info@divelofleet.com. Each customer organization remains the controller of passenger manifests it uploads; we process that data as a processor on the operator’s instructions.
Data we process
- Account data: name, work email, role, organization, phone.
- Operations data: bookings, passenger names on manifests, flight numbers, hotel stops, invoices, and voucher records.
- Device data: app version, push token, and coarse diagnostics needed to keep the driver and dispatcher apps working.
Precise and coarse geolocation
Driver GPS (precise location) is collected solely during active dispatches — while a run is DISPATCHED or IN_TRANSIT — so the operations board and airport pickup ETAs stay current. We also store a short trail of location breadcrumbs for on-time performance and incident review. We do not track drivers when they are off shift, and we do not use location data for advertising. Coarse location may be inferred from the assigned airport or hotel zone when a live fix is unavailable.
Camera usage
Camera access on the mobile apps is used exclusively for live QR code scanning of boarding passes and manifests. The camera stream is processed on device to read the code. We do not store raw passenger photographs, selfie images, or camera rolls.
Data storage and processing
Traffic is encrypted in transit (TLS). Application servers and the primary PostgreSQL database are hosted on Hetzner Cloud. Object backups and optional media files are stored in Amazon Web Services S3 under a dedicated prefix, encrypted at rest by the provider. Tenant records are scoped to the customer organization. QR boarding tokens are HMAC signatures; the signing secret is never exported to devices.
Retention
Location breadcrumbs are kept for dispatch SLA and incident review, then rotated. Invoices and fiscal records may be retained for the period required by Dominican tax and commercial law. Account profiles are deleted or anonymized when you request deletion, as described on the account deletion page.
Your rights (GDPR / CCPA)
If you are in the EEA, UK, or a similar jurisdiction, or if the California Consumer Privacy Act applies, you may request access to, correction of, or erasure of personal data we hold about you, and you may object to or restrict certain processing. You may also request a portable copy of account data. These rights can be limited where we must keep records for tax, fraud prevention, or legal claims. Submit requests at info@divelofleet.com or use the account deletion page. We will not discriminate against you for exercising these rights.
Children
Divelofleet is a B2B operations product. It is not directed at children under 16. Passenger names of minors may appear on a customer’s manifest solely to complete a booked transfer; we do not create child accounts.