Privacy Policy — Elitra Driver Platform

This policy covers the Elitra Driver platform — the operations management software used by transport operators, and this website. The drivers' mobile app has its own policy, available at app privacy.

The data controller is Lopes e Gago, Lda., reachable at [email protected].

• Commercial contact data — name, company, email and phone, collected when you request a demo or subscribe.
• Account data — backoffice user credentials and permissions.
• Operational data — bookings, clients, drivers, fleet and invoicing entered by the customer into the platform.
• Technical data — IP address, device type and access logs, for security and diagnostics.

With regard to the operational data the customer enters into the platform — in particular data about its own end clients and drivers — Elitra acts as a processor under Article 28 GDPR. The customer is the controller and determines the purposes. Elitra processes such data solely to provide the contracted service and in accordance with the customer's instructions.

Each organisation accesses only its own data. The platform is multi-tenant and isolation between organisations is enforced at the access layer.

• Provide, maintain and improve the contracted service;
• Manage subscription, billing and support;
• Respond to demo requests and commercial enquiries;
• Comply with legal obligations and ensure service security.

The platform relies on providers for server and database hosting, and integrates third-party services when the customer enables them, namely Moloni (invoicing) and Google Maps (geocoding and routing). These providers process data only to the extent necessary to deliver the service.

Data is not sold or rented to third parties.

Data is kept while the subscription is active. After termination, the customer's operational data is deleted or returned on request, except where the law requires longer retention.

Under the GDPR you have the right to access, rectify, erase, restrict and object to the processing of your data, as well as the right to portability. Exercise these rights via [email protected]. You also have the right to lodge a complaint with the Portuguese supervisory authority (CNPD).

Communication is encrypted in transit via HTTPS. Access is controlled through authentication and permission profiles defined by the customer.