Privacy Notice

Arel projects, established in Israel, is the data controller for personal data processed through Fleetbook. This notice explains what we collect, why, and who we share it with.

## Personal data we collect - Account data — email address, password hash, sign-in provider, account creation date, language preference. - Fleet data you enter — vehicle make, model, year, registration plate, VIN, mileage or hours, service and test dates, insurance expiry, notes. - Documents you upload — files stored in your private vault, which may contain personal data such as names on insurance or registration papers. - Team data — email addresses of people you invite and their role. - Billing data — subscription status, plan, quantity and billing period. Card details are collected and stored by Paddle, never by us. - Technical data — IP address, browser type and error logs, used for security and diagnostics.

## Why we process it - To provide the Service and store your records (performance of a contract). - To take payment, prevent fraud and meet tax obligations (contract and legal obligation). - To send service-related messages such as reminders and account notices (contract and legitimate interests). - To keep the Service secure and diagnose failures (legitimate interests).

## Who we share data with - Paddle.com Market Ltd — our Merchant of Record and payment processor. Paddle receives your email, billing address, tax location and purchase details, and acts as an independent controller for payment and tax purposes. - Our hosting and database providers — database, authentication and encrypted file storage hosting. - Our content delivery provider — application hosting and content delivery. - Team members you invite — they can see the vehicle records and documents you share with them, according to the role you assign.

We do not sell personal data and we do not use it for third-party advertising.

## International transfers Our providers may process data outside your country. Transfers rely on Standard Contractual Clauses or an equivalent safeguard.

## Retention We keep account and fleet data for as long as your account exists. Deleting your account from the Account page permanently removes your records and uploaded files. Billing records are retained by Paddle for the period required by tax law.

## Your rights You may access, correct, export or delete your data, object to or restrict processing, and lodge a complaint with your data protection authority. Export and deletion are available self-service on the Account page; for anything else email arelrei1020@gmail.com.

## Cookies and local storage We use strictly necessary storage only: your sign-in session and your language preference. We do not use advertising or analytics cookies. Paddle sets its own cookies during checkout.

## Security Data is encrypted in transit and at rest. Documents are held in a private bucket reachable only through short-lived signed links, and database rules restrict every record to its owner and the team members they have authorised.

## Contact Arel projects — arelrei1020@gmail.com