Privacy Policy

1. Overview

ValveRide, LLC ("ValveRide," "we," "us," or "our") operates ValveRide Flow, a diesel fuel optimization platform for owner-operators, small fleets, and larger fleets. This Privacy Policy describes how we collect, use, store, and protect information when you use our platform, website, or services.

2. Information We Collect

We collect information in the following ways:

• Account information: Name, email address, company name, and role when you create an account or request a demo.
• Fleet data: Truck profiles, driver information, fuel card numbers, dispatch records, and trip data provided by your organization.
• Driver mobile information: Mobile phone numbers and SMS opt-in/opt-out status, provided by an authorized fleet dispatcher and confirmed by the driver via SMS reply.
• Usage data: Log data, API request records, and platform activity associated with your account.
• Integration data: Webhook payloads, fuel transaction records, and telematics data transmitted to ValveRide Flow by your connected systems.
• Contact form submissions: Information you submit when requesting a demo or contacting us.
• Developer and AI assistant account information: The email address used to create a ValveRide Flow developer account, and the requests made through our API, MCP server, or an AI assistant app. See Section 7.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the ValveRide Flow platform and related services.
• Generate optimized fuel plans and compliance reports for your fleet.
• Deliver transactional SMS messages to enrolled drivers about fuel stops and dispatch information.
• Respond to inquiries, support requests, and demo requests.
• Send service communications, product updates, and billing information.
• Monitor and analyze platform usage to improve performance and reliability.
• Comply with legal obligations and enforce our Terms of Service.

4. Data Isolation and Multi-Tenancy

ValveRide Flow is built on a multi-tenant architecture. Each fleet's data is fully isolated at the database query layer. Your organization's data is never accessible to other tenants on the platform. All data is scoped to your tenant ID and access is enforced at every API layer.

5. Data Sharing

We do not sell your data. We do not share your fleet data with third parties for advertising purposes. We may share data with:

• Service providers: Infrastructure providers (Supabase, Vercel) that host and process data on our behalf under data processing agreements.
• API providers: HERE Maps and fuel pricing data providers used to generate route and pricing data. Only location and route data necessary for optimization is transmitted.
• SMS messaging carrier: Twilio, used solely to deliver transactional SMS messages to enrolled drivers. See Section 6 for details.
• Legal requirements: When required by law, regulation, or valid legal process.

6. SMS and Mobile Information

ValveRide Flow sends transactional SMS messages to commercial truck drivers who have been enrolled by their employing fleet and have replied YES to confirm enrollment. Mobile phone numbers and SMS opt-in consent data are subject to the following protections:

• No sharing for marketing: Mobile information is not shared with third parties or affiliates for marketing or promotional purposes. We do not sell driver mobile numbers under any circumstances.
• Limited use: Mobile information is used solely to deliver the transactional fuel and dispatch messages described in our SMS Opt-In policy.
• Carrier processing: SMS data flows through Twilio for the sole purpose of message delivery and is governed by Twilio's data processing terms.
• Frequency: Message frequency varies based on dispatch activity, typically 1 to 3 messages per dispatch. Standard message and data rates from the driver's mobile carrier may apply.
• Opt-out: A driver may opt out at any time by replying STOP. Full details are documented at valverideflow.com/sms-opt-in.

7. AI Assistant and Agent Integrations

ValveRide Flow is available as an app inside AI assistants, including the ChatGPT plugin directory, and as a Model Context Protocol (MCP) server that other AI clients and partner applications can call. This channel is separate from the fleet platform: it runs on a ValveRide Flow developer account, and it has no access to any fleet tenant's contract pricing, trips, drivers, or fleet records.

• What we receive: Only the fields defined in our published tool schemas. For a diesel market snapshot, the US states involved. For a fuel plan, the origin and destination and the truck details supplied with the request, such as tank capacity, fuel economy, current fuel level, and any discount or tax figures you choose to provide. An assistant may draw those values from your earlier conversation with it, but what reaches ValveRide is the fields themselves. We do not receive your chat history, conversation transcripts, or assistant memories.
• What we store: The email address on the developer account, the request and the plan or snapshot returned (a plan is retained so it can be updated mid-trip), and usage records for metered calls, as described in Section 2.
• What we do not do: We do not use these requests to train machine learning models, we do not sell them, and we do not attach them to any fleet tenant account.
• The assistant platform's own terms: The AI assistant you use, for example OpenAI, decides independently what it collects and shares inside its own product. Its handling of your conversation is governed by its privacy policy, not this one.
• Deletion: Email info@valveride.com to delete a developer account and its request records. Disconnecting the app inside the assistant revokes its access immediately.

8. Data Retention

We retain fleet data, fuel plans, and compliance records for the duration of your subscription and for a period of 12 months following contract termination, unless a shorter or longer period is required by law or agreed to in your contract. You may request deletion of your data at any time by contacting us.

9. Security

We implement industry-standard security practices including encryption in transit (TLS), encryption at rest, JWT-based authentication, role-based access control, and audit logging of sensitive operations. No system is completely secure, and we cannot guarantee absolute security, but we take reasonable and appropriate measures to protect your data.

10. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal data. To exercise these rights, contact us at info@valveride.com. We will respond within 30 days.

11. Cookies

Our website uses minimal session cookies required for authentication. We do not use tracking cookies or third-party advertising cookies. We do not use analytics services that track individual user behavior across sites.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active customers of material changes via email or in-platform notification. Continued use of the platform following notice of changes constitutes acceptance of the updated policy.

13. Contact

For privacy-related questions or requests, contact us at:
ValveRide, LLC
info@valveride.com