Legal
Last updated October 28, 2026
This privacy notice explains how Initek Consulting, Inc. ("we," "us," or "our"), the company behind Fleet Integrations, collects, uses, shares, and protects ("processes") personal information in connection with:
Questions or concerns? Contact us at support@initekconsulting.com.
This summary highlights the main points. Use the table of contents below to find the details.
Who is responsible for my information? Fleet Integrations is used by bus and motorcoach operators ("Customers"). When a Customer loads or connects information about its drivers, passengers, vehicles, and trips, we process it on that Customer's behalf as its service provider. For information about our own website visitors, account users, and business contacts, we are responsible directly. See section 1.
What personal information do we process? Account and contact details, billing records, and usage data. On behalf of Customers we also process driver, vehicle, trip, and passenger data, including vehicle GPS location, hours-of-service status, work hours, and driving-safety events.
Do we process sensitive personal information? Yes, in two forms. We process precise geolocation (vehicle GPS location linked to the assigned driver, and locations shared through Bus SOS), and account login credentials. We use them only to provide the Services.
Do we sell personal information or use it for advertising? No. We do not sell personal information, share it for cross-context behavioral advertising, or serve ads.
Who do we share it with? The Customer the information belongs to; the service providers that host and operate the platform (listed in section 5); systems a Customer chooses to connect; and, for Bus SOS, other participating operators when a Customer asks for help.
Do you use AI? Yes. The optional Fleet Assistant and AI-written summaries send the relevant operational data to OpenAI to generate answers. See section 6.
How do I exercise my rights? If you are a driver or passenger, contact the operator you work for or traveled with first; we will help them respond. Anyone can also email us at support@initekconsulting.com.
In Short: For driver, passenger, vehicle, and trip data, the operator is in charge and we act on its instructions. For our own business contacts and website visitors, we are.
Customer Data. Our Customers are businesses, mostly bus and motorcoach operators. They load information into the Services or connect their own systems (such as telematics, booking and dispatch, payroll, and maintenance platforms) so the Services can use it. We call this "Customer Data." We process Customer Data as a service provider (or "processor") on the Customer's behalf, under our agreement with that Customer and its instructions. The Customer decides what is collected about its drivers, passengers, and vehicles and why. It is also responsible for giving any notices and obtaining any consents the law requires. If you are a driver, passenger, or group contact, the operator's own privacy notice applies to your information, and the operator is the right first contact for questions or requests. If you contact us instead, we will refer your request to the operator and help it respond.
Our own information. We decide how to use the information we collect for our own purposes. That includes information about website visitors, people who request a demo or contact us, Customer account users and billing contacts, and how the Services are used. This notice describes those practices directly.
Depending on the features a Customer uses and the systems it connects, Customer Data may include:
Most Customer Data comes from systems the Customer connects, at the Customer's direction (see section 5). We may also look up business contact details from public sources, such as company websites and professional profiles, when we follow up with a business that has shown interest in the Services. We do not buy personal information from data brokers.
We process precise geolocation (vehicle GPS linked to an assigned driver, and Bus SOS locations) and account login credentials. We use them only to provide and secure the Services, and never to infer characteristics about anyone. We do not ask for Social Security numbers, health information, biometric data, or racial or ethnic origin, and the Services are not designed to hold them.
In Short: To run the Services for our Customers, support and bill them, keep the platform secure, and improve it. Never for advertising.
We use Customer Data only to provide the Services to that Customer, as the Customer instructs, and for the security, support, and aggregated purposes above. We do not use Customer Data to market to drivers or passengers.
In Short: We process personal information when we have a valid legal reason to do so, such as performing a contract, our legitimate business interests, consent, or legal obligations.
If you are located in Canada: we process your personal information with your consent, which may be express or, where appropriate, implied. You may withdraw consent at any time by contacting us, subject to legal and contractual limits. Withdrawal does not affect processing that already took place, and it may mean we can no longer provide some Services. For Customer Data, the operator is responsible for obtaining any consent required from its drivers and passengers. In limited circumstances permitted by law, we may process personal information without consent. Examples include investigating fraud or a breach of an agreement, complying with a subpoena, warrant, or court order, and responding to an emergency that threatens someone's life, health, or security.
In Short: With the Customer the data belongs to, the service providers that run the platform, the systems a Customer connects, and other operators when a Bus SOS request is broadcast.
Customer Data is visible to the Customer's authorized users according to the roles the Customer assigns. Customer Data is kept separate for each Customer and is not visible to other Customers, except as described for Bus SOS below.
When a participating operator broadcasts a Bus SOS request, the incident location, vehicle details, request notes, and the requesting dispatcher's contact details are sent to other participating operators within the selected area so they can offer help. Participating operators' yard locations and company names appear on the public Bus SOS yard map. Once operators contact one another, any arrangement is directly between them.
Customers can create links that show a vehicle's or trip's live position to passengers or clients without a login. Anyone who has such a link can view what it shows until the link expires. Public forms, such as event-report and registration forms, send what you submit to the operator that published the form.
We use the following service providers to host and operate the Services. They may process personal information only on our instructions and for these purposes:
| Provider | Purpose |
|---|---|
| Amazon Web Services | Hosting, databases, and file storage (United States, Oregon region, with backup copies of user accounts and company settings in the Ohio region); delivery of text messages and email |
| OpenAI | Fleet Assistant answers and AI-written summaries (see section 6) |
| FullStory | Web application usage analytics and session recording |
| Datadog | Application logs, monitoring, and troubleshooting |
| Stripe | Invoicing and payment processing |
| Maps, address lookup, and routing | |
| Google Workspace | Email and support correspondence |
| Zoom | Video calls for onboarding and support |
| Heymarket | Text message delivery for certain Customers and features |
| Atlassian | Support and issue tracking |
| Slack, Microsoft Teams | Delivery of alerts to channels a Customer configures, and internal operations alerts |
At a Customer's direction, the Services exchange data with that Customer's own accounts at other providers. Examples include telematics providers (such as Samsara, Motive, Zonar, and Verizon Connect), booking and dispatch systems (such as The Bus Network, Coach Manager, Moovs, FASTTRAK, Saucon, and Tyler Technologies), payroll and HR systems (such as ADP, BambooHR, Paycom, and UKG), maintenance and expense systems (such as Fleetio, MaintainX, RTA, and Ramp), and tools such as Google Sheets and Jotform. Those providers handle the data under their own agreements with the Customer.
We do not sell personal information or share it for cross-context behavioral advertising. Mobile phone numbers and text-message opt-in information are never shared with third parties for their marketing purposes.
The Fleet Assistant answers questions about a Customer's operation, and the Services can write short operational summaries. To do this, the question and the relevant Customer Data are sent to OpenAI. That data can include trip, vehicle, and driver details such as names, hours, and safety events. Under OpenAI's API terms, data sent through its API is not used to train OpenAI's models. We store Fleet Assistant conversations so users can return to them, for the periods in our Data Retention Policy. A Customer may use its own OpenAI account for these features, or ask us to turn them off. AI-generated answers can be wrong and should be checked before you rely on them.
Our website (www.fleet-integrations.com) does not use advertising or analytics cookies.
The web application uses cookies and browser storage that are needed to keep you signed in and remember your settings. It also uses FullStory to record how the application is used, so we can find usability problems and fix bugs. Recordings capture page views, clicks, scrolling, and what is shown on screen, and are linked to the signed-in user's email address, company, and role. Password, API key, and other credential fields are never recorded. Screens that show personal contact details are masked: sign-in, user profiles and user management, driver contacts, Bus SOS and account registration forms, support ticket details, and Fleet Assistant conversations. Other screens, such as booking, trip, and driver lists, are recorded as displayed and may include names. Session recording also runs on some public pages, such as the passenger booking portal and public event forms. It does not run on view-only tracking maps or for our own staff. FullStory stores recordings in the United States and keeps them for 30 days. A Customer can ask us to turn session recording off for its users. We do not use these tools for advertising.
Do-not-track. Because we do not sell personal information or use it for targeted advertising, there is nothing for a do-not-track or Global Privacy Control signal to opt you out of. If that changes, we will honor those signals as the law requires.
The Services send text messages that Customers set up, such as alerts to dispatchers and drivers, trip notifications to passengers and group contacts, and Bus SOS messages. The Customer is responsible for having permission to text the numbers it adds. Reply STOP to any message to opt out. Our messaging providers record opt-outs per phone number, so replying STOP stops all messages from that Fleet Integrations number, including messages sent on behalf of other operators. Message and data rates may apply. For help, contact support@initekconsulting.com. We keep message records as described in section 9, and we never share phone numbers or opt-in information with third parties for their marketing.
In Short: We keep information only as long as it is needed to provide the Services, plus any period required by law.
Our Data Retention Policy sets out how long we keep each type of record. That includes trip and booking records, driver scorecards, messaging records, logs, account records, backups, and billing records. When a Customer's subscription ends, it may ask for a limited export of its data, for an additional fee. We then delete or de-identify Customer Data as described in that policy, except where we must keep it to meet legal obligations, resolve disputes, or enforce our agreements.
We use technical and organizational measures designed to protect personal information. These include encryption in transit (TLS) and at rest, salted password hashing, sign-in sessions that expire, role-based permissions, separation of each Customer's data, restricted administrative access, multi-factor authentication (MFA) required for our admin staff to sign in to Amazon Web Services, and logging and monitoring. No system is perfectly secure, so we cannot guarantee that information will never be accessed without authorization. If a security incident affects Customer Data, we will notify the affected Customer without undue delay and help it meet its own obligations.
The Services are hosted in the United States (Amazon Web Services, Oregon region, with backup copies of user accounts and company settings in the Ohio region), and some service providers listed in section 5 may process information in other locations. If you use the Services from Canada or another country, your information will be transferred to and processed in the United States, where the law may differ from where you live and where it may be accessible to courts and authorities under U.S. law.
The Services are built for businesses, and accounts are only for people 18 or older acting on behalf of a business. We do not knowingly collect personal information directly from children under 13. Passenger lists that an operator provides may include minors traveling on a trip, and we process that information only on the operator's behalf. Our integrations with student transportation systems are set up so that student records are not retrieved. If you believe we hold a child's information in error, contact support@initekconsulting.com.
In Short: Depending on where you live, you may have the right to access, correct, delete, or get a copy of your personal information, and to withdraw consent.
Depending on where you live, including Canada and many U.S. states, you may have the right to: request access to and a copy of your personal information; correct inaccurate information; request deletion; restrict or object to certain processing; data portability; and withdraw consent. We respond to requests as applicable law requires.
Drivers, passengers, and group contacts: your information is Customer Data controlled by the operator (see section 1). Please contact that operator. If you contact us, we will forward your request to the operator and help it respond.
Account users: you can review and update your profile in the web application, or ask your company's administrator. To close an account or make another request, email support@initekconsulting.com. We may keep some information as needed to prevent fraud, resolve disputes, enforce our agreements, or meet legal obligations.
In Short: Residents of states with comprehensive privacy laws, including California, may have additional rights. More information is provided below.
Residents of states with comprehensive privacy laws, including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, may have the rights described here, subject to the exemptions in each law.
In the past twelve (12) months we have collected the following categories of personal information, either directly or on behalf of our Customers:
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Name, postal address, phone number, email address, employee or reference ID, username, IP address | YES |
| B. Personal information as defined in the California Customer Records statute | Name, contact information, employment information | YES |
| C. Protected classification characteristics under state or federal law | Gender, age, date of birth, race and ethnicity, national origin, marital status | NO |
| D. Commercial information | Subscriptions, invoices, and payment history of business Customers | YES |
| E. Biometric information | Fingerprints, face or voice prints (passkey biometrics stay on your device) | NO |
| F. Internet or other similar network activity | Web application usage and session recordings, logs of pages and features used | YES |
| G. Geolocation data | Vehicle GPS location linked to an assigned driver; Bus SOS locations | YES |
| H. Audio, electronic, sensory, or similar information | Photos or files attached to event reports and support tickets; recordings of onboarding sessions | YES |
| I. Professional or employment-related information | Drivers' assignments, hours-of-service status, work hours, driving-safety events, coaching notes | YES |
| J. Education information | Student records and directory information | NO |
| K. Inferences drawn from collected personal information | Driver safety scores and performance scorecards | YES |
| L. Sensitive personal information | Precise geolocation; account login credentials | YES |
We keep each category for the periods described in section 9. Sources, purposes, and recipients are described in sections 2, 3, and 5.
In the past twelve months we have disclosed categories A, B, D, F, G, H, I, K, and L to the service providers in section 5 for the business purposes in section 3, under written contracts. We have not sold personal information or shared it for cross-context behavioral advertising, and we have no actual knowledge of selling or sharing the personal information of consumers under 16. We use sensitive personal information only to provide and secure the Services, so the "right to limit" does not apply.
Email support@initekconsulting.com or write to us at the address in section 16. If your request concerns Customer Data, we will refer it to the relevant operator, as described in section 1. You may use an authorized agent. We may ask the agent for written, signed proof of authority and may need to verify your identity directly.
We verify requests by matching the information you give us with information we already hold. We use information you provide for verification only for that purpose.
If we decline to act on your request, you may appeal by emailing support@initekconsulting.com. We will respond in writing with our reasons. If your appeal is denied, you may contact your state attorney general.
We do not disclose personal information to third parties for their own direct marketing purposes.
We update this notice when our practices or the law change. The "Last updated" date at the top shows the current version. We will notify Customers of material changes by email or in the Services before they take effect.
Questions, requests, and complaints can be sent to our Privacy Officer at support@initekconsulting.com or by mail:
Initek Consulting, Inc.
Attn: Privacy Officer
10272 Aviary Dr
San Diego, CA 92131
United States
Fleet Integrations