Privacy Policy

Bluestream provides fleet management software to vehicle operators. This policy covers bluestream.cx and the operator dashboard. Drivers using the mobile application should read the Driver Privacy Notice, which describes location recording specifically.

Only what you send us on purpose. There are three ways that happens.

• The contact form. Your company name, your name, your email address, and optionally a phone number, fleet size, and message. We use it to reply to you and to keep a record of the conversation.
• Creating an account. Your company name, your name, your email address, and a password. The password is stored only as a cryptographic hash; we cannot read it and neither can anyone else who obtains our database.
• Your IP address, briefly. Recorded when either form is submitted, purely to stop one source flooding us with automated submissions. It is deleted after seven days and is not linked to anything else.

This section matters more than the one above, so we have written it as plainly as we can.

• No analytics. No Google Analytics, no Plausible, no page-view counting of any kind. We do not know how many people visit this site or which pages they read.
• No advertising or tracking technology. No pixels, no remarketing tags, no embedded social widgets, no third-party fonts or scripts that report your visit elsewhere.
• No cookies. The site stores one value in your browser, which is whether you chose light or dark appearance. It never leaves your device and identifies nobody.
• No customer data on this site. No fleet, vehicle, driver, or route data from any customer appears anywhere on these public pages, in any form, including anonymised examples. Figures shown on the marketing pages are illustrative and invented.
• No selling or sharing. We do not sell personal information, and we do not share it with data brokers, advertisers, or anyone else for their own purposes.

Once you are a customer, your organisation's data belongs to you. That covers your vehicles, your drivers, fuel and odometer readings, recorded positions, and the findings we produce from them. We hold it to run the service for you.

Access is limited by the database itself rather than by the dashboard:

• You see only your own organisation. This is enforced by row-level security policies in the database, so it applies to every route in, not just the screens we built.
• Your administrators see your fleet. Every change they make to a vehicle or a driver account is written to an append-only audit log, recording who did it and when. Neither we nor they can edit or delete those entries.
• We can see your data when we need to. Bluestream staff hold an administrative account capable of reading customer records in order to provide support, investigate faults, and provision accounts. We do not pretend otherwise. Actions taken through that account are recorded in a separate log that we cannot alter.

Your data is stored and processed in the United States, and is encrypted in transit. If you operate outside the United States, using Bluestream means your data is transferred to and stored there.

A small number of specialist providers make that possible: one hosts the application, and one stores the data and handles sign-in. They act only on our instructions, may not use your data for their own purposes, and are bound by written agreements with us. A current list naming each of them is available to any customer on request.

We do not send email of any kind. That is why we cannot reset a forgotten password by email, and it is also why no mail provider holds a copy of anything of yours.

• Enquiries. Kept while we are in contact and for a reasonable period afterwards.
• Rate-limiting records. Seven days.
• Account and fleet data. Held for as long as your account is open. Vehicle position history is stored in monthly partitions and older ones are removed on a schedule we set with you.
• Audit logs. Retained for the life of the account. They are append-only by design and are not deleted when a user account is removed, because a record of what was done that can be erased by the person who did it is not a record.

You may ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Write to us and we will respond within thirty days.

If we change this policy in a way that materially affects you, we will tell customers directly rather than quietly changing the date at the top of this page.

Questions about this policy, or a request about your data: get in touch.