Privacy policy

Preliminary version of October 11, 2026

Draft under review: highlighted passages are still to be confirmed.

Fleetago is transportation management software (a web portal and an iPhone app for drivers) published by Le Studio 7 Service Numérique Inc. (“Le Studio 7”). Trucking companies, such as Transport Michael Duff, use it to plan their trips, communicate with their drivers and keep their customers informed.

This policy explains what personal information is collected, why, who it is shared with, how long it is kept and how to exercise your rights, under Quebec’s Act respecting the protection of personal information in the private sector and applicable federal law.

1. Who is responsible for your information

The trucking company that gives you access to Fleetago is responsible for your personal information. Le Studio 7 acts on its behalf as the software provider: it hosts and processes this information only to provide the service, following the company’s instructions.

Person in charge of the protection of personal information at Transport Michael Duff: [TO CONFIRM: name and title], [TO CONFIRM: email].

For the Fleetago software: Le Studio 7 Service Numérique Inc., 164 Cowie Street, Suite 303, Granby, Quebec J2G 3V3, contact@lestudio7.ca.

2. The information we collect

Depending on your role:

  • Drivers: first and last name, mobile number, email, sign-in ID, truck number and home terminal, schedule and time off (entered by the company). Optional, added by you: profile photo and emergency contact.
  • Work performed: assigned trips, steps completed and their time (accepted, en route, arrived, loaded, delivered), reported issues, proofs of delivery (photos, documents), written and voice messages exchanged with the office.
  • Company staff (portal): name, email, role and actions taken in the portal (log).
  • Customers and consignees: names and contact details of the people to reach for a delivery, pickup and delivery addresses.
  • Technical information: the iPhone identifier for notifications, device model and app version, last sign-in date, and error logs used to fix the software.
  • On the web portal: software errors, sent automatically so they can be fixed. Only with your permission: a recording of your session (pages visited, clicks, what appears on screen). What you type in fields is masked and isn’t recorded.

The app does not collect:

  • your phone’s GPS location. If the company equips its trucks with a tracking device, the location comes from the truck, not from your phone;
  • your biometric data: Face ID is handled by the iPhone, and the app only receives an “accepted” or “refused” answer;
  • your contacts, your personal photos (except those you choose to send), or microphone audio outside of recording a voice message.

3. Why it is used

  • to organize and track trips, and estimate arrival times;
  • to notify you of new trips and messages (notifications, texts, emails);
  • to prove that a delivery was made and answer customers’ questions;
  • to keep customers informed of their shipment’s progress (delivery tracking);
  • to keep accounts secure and fix the software, for example by replaying a portal session where a problem occurred, if you allowed it;
  • to meet the company’s legal obligations (accounting, insurance, road safety).

Your information is never sold or used for advertising.

4. Your consent

The information needed for your work is collected as part of your relationship with the company. The profile photo, emergency contact, notifications and Face ID are optional: you can add, change or remove them at any time in the app (Profile) or in your iPhone settings.

Recording your portal sessions is optional. You are asked on your first visit, and you can withdraw your permission at any time in the portal (Settings › Privacy, or Preferences for customers). Software errors are sent without asking, because they are needed to run the service.

5. Who it is shared with

Your information is available to the company’s authorized staff, according to their role. It may also be shared:

  • with the company’s customers, for what concerns their shipment: trip progress, estimated arrival time, proof of delivery;
  • with the providers that run the service, only for that purpose: database and file hosting (Supabase, servers in Canada), website hosting (Vercel), sending texts (Twilio) and emails (Resend), iPhone notifications (Apple), maps and route calculation (Mapbox, Apple Maps), truck tracking (the company’s telematics provider), error monitoring and portal session recording (PostHog, servers in the European Union, and Sentry) and, if the company turned it on, archiving its documents in its own cloud storage (Google Drive, Microsoft OneDrive, Dropbox or Box);
  • with authorities, when required by law.

Some of these providers may process information outside Quebec or Canada, notably in the United States and the European Union. Before information is entrusted to them, an assessment is made to ensure adequate protection, and agreements govern its use. [TO CONFIRM: assessment completed for each provider]

If you choose to open directions in Google Maps or Waze, the address is sent to that app, under its own terms.

6. How long it is kept

  • Driver account and file: while access is active, then 1 year [TO CONFIRM].
  • Trips, steps and proofs of delivery: 6 years after delivery, for accounting and tax obligations [TO CONFIRM].
  • Written messages: 2 years [TO CONFIRM].
  • Voice messages: 7, 14 or 30 days depending on the company’s setting, then automatically deleted.
  • iPhone identifier for notifications: until you sign out of the app.
  • Technical and security logs: 1 year [TO CONFIRM].
  • Portal session recordings: 30 days [TO CONFIRM].

At the end of these periods, the information is destroyed or anonymized.

7. Security

Exchanges between the app, the portal and the servers are encrypted (HTTPS). Access to information is limited according to each person’s role. On the iPhone, the session is stored in Apple’s keychain, the app can be locked with Face ID, and data kept for offline use is erased when you sign out.

If a confidentiality incident presents a risk of serious injury, the people concerned and the Commission d’accès à l’information are notified, as required by law.

8. Your rights

You can ask:

  • to see the information about you and receive a copy, including in a structured, commonly used technological format;
  • to have it corrected if it is inaccurate, incomplete or ambiguous;
  • to withdraw your consent to an optional use;
  • to know how it was used or shared.

Write to the person in charge of the protection of personal information (section 1): you will receive an answer within 30 days. If you are not satisfied with the answer, you can file a complaint with Quebec’s Commission d’accès à l’information (cai.gouv.qc.ca).

9. Cookies (web portal)

The portal uses cookies for your sign-in session and your display preferences (language, appearance). A PostHog cookie also links errors to your visit, and to the recording of your session if you allowed it, to fix the software. No cookie is used for advertising or audience measurement.

10. Updates

This policy may be updated. The date of the current version is shown at the top of the page; you will be told in the app about any significant change.