Privacy Policy

1. Overview & Scope

Echelon provides an enterprise cloud software platform for passenger motorcoach, charter, shuttle, and transit operators. Our platform powers automated charter quoting, vehicle and driver dispatch optimization, FMCSA 49 CFR Part 395 Hours-of-Service (HOS) and Electronic Logging Device (ELD) compliance tracking, IFTA fuel tax reporting, and commercial billing workflows on echelonfleet.com.

When an enterprise motor carrier or fleet operator (a “Customer” or “Tenant”) provisions a workspace on Echelon, the Customer acts as the Data Controller (or “Business” under CCPA/CPRA) for the fleet, passenger, and driver records stored within its isolated tenant, and Echelon acts as the Data Processor (or “Service Provider”) governed by our Data Processing Addendum (DPA). For direct website visitors, account registrants, and demo workspace requestors on echelonfleet.com, Echelon acts as an independent Data Controller.

2. Categories of Data Collected

We collect and process only the minimum data necessary to operate the Echelon console, authenticate users, maintain regulatory records, and execute customer-authorized integrations:

• Account, Identity & Authentication Data: Full name, work email address, organization name, role-based access control (RBAC) permissions, bcrypt password hashes (for password-authenticated accounts), and OAuth 2.0 / OpenID Connect subject identifiers (sub, oid, tid) and verified email claims provided by Google or Microsoft Entra ID.
• Driver Qualification & Credential Metadata: Commercial Driver's License (CDL) class, state, endorsements (e.g., Passenger “P” endorsement), expiration dates, DOT medical examiner certificate status, and clearance badges (such as TWIC, DoD installation access, or airport tarmac security credentials) entered by the fleet operator for dispatch eligibility verification.
• FMCSA 49 CFR Part 395 ELD & Hours-of-Service (HOS) Logs: Duty status transitions (Off-Duty, Sleeper Berth, Driving, On-Duty Not Driving), 10-hour driving and 15-hour on-duty passenger-carrying rule counters (49 CFR § 395.5), 60/70-hour rolling cycle records, driver log certifications, co-driver assignments, and annotated audit trails of any supervisor edits.
• Fleet, Vehicle Telematics & Geospatial Route Data: Vehicle Identification Numbers (VINs), license plates, odometer and engine hour readings, real-time GPS coordinates, deadhead and charter route geometries, and geofenced airport / stadium / convention center ground transportation zones processed via Google Maps Platform APIs (Places, Routes, Distance Matrix, and Geocoding).
• Financial, Charter Billing & IFTA Tax Records: Charter quotes, trip orders, facility fee line items, customer invoices, payment status metadata synchronized with Stripe or Intuit QuickBooks Online, and state-by-state IFTA mileage and fuel purchase ledgers.
• Security, Audit & Technical Telemetry: IP addresses, TLS session metadata, browser user-agent strings, request timestamps, and immutable security audit logs recording authentication events and administrative actions.

5. Twilio 10DLC SMS / A2P Messaging & Driver Dispatch Notification Privacy

Echelon delivers transactional operational SMS notifications to commercial drivers, dispatch personnel, and charter group primary contacts (such as dispatch assignments, schedule changes, HOS approaching-limit alerts, and vehicle gate arrival notifications) via registered A2P 10DLC channels.

“No mobile information or SMS opt-in consent data will be shared with third parties or affiliates for marketing or promotional purposes. Drivers and contacts may opt out of SMS notifications at any time by replying STOP, or reply HELP for assistance.”

Message frequency varies based on active trip dispatches and safety alerts. Standard message and data rates may apply. All text messaging originator opt-in data and consent records are strictly excluded from any third-party sharing, except with our direct telecommunications carrier subprocessor (Twilio Inc.) solely for message transmission.

6. FMCSA ELD (49 CFR § 395.22 / § 395.30) & GPS Telematics Retention

Because commercial motorcoach carriers are subject to federal Department of Transportation (USDOT) and Federal Motor Carrier Safety Administration (FMCSA) recordkeeping mandates, Echelon enforces specialized retention and immutability controls on regulated operational records:

• ELD & HOS Record Integrity (49 CFR § 395.30): Original driver duty status records cannot be overwritten or erased. Any supervisory proposed edit requires driver certification and retains the original record alongside an immutable audit trail showing the timestamp, actor, and reason annotation.
• Statutory Retention Periods: ELD records of duty status (RODS) and supporting documents are retained for a minimum of six (6) months in accordance with 49 CFR § 395.8(k), Driver Vehicle Inspection Reports (DVIRs) for a minimum of three (3) months (49 CFR § 396.11), and IFTA fuel tax and distance records for four (4) years per International Fuel Tax Agreement audit requirements, unless the Customer configures a longer retention policy or exports and terminates its workspace.
• Demo Workspaces: Ephemeral demo workspaces created via /demo are isolated sandbox environments preloaded with public FMCSA census metadata and synthetic sample trips. You may purge your demo workspace at any time from the console.

7. CCPA/CPRA, GDPR, Data Subject Rights & Contact

Depending on your jurisdiction (including the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA), state privacy statutes in Virginia, Colorado, Connecticut, and Texas, and the EU/UK General Data Protection Regulation (GDPR)), you have the right to:

• Request access to and a portable copy of the personal data we hold about you;
• Request correction of inaccurate or incomplete personal information;
• Request deletion of your personal data (subject to mandatory FMCSA/DOT and tax statutory retention exceptions where applicable to commercial drivers);
• Object to or restrict certain processing, and withdraw OAuth or cookie consent at any time without affecting the lawfulness of prior processing;
• Be free from unlawful discrimination for exercising any privacy rights. Echelon does not “sell” or “share” personal information for cross-context behavioral advertising as defined under the CCPA/CPRA.

If your data is stored inside an enterprise Customer's fleet tenant (for example, as a driver or dispatcher employed by a motorcoach operator), please direct your request first to your employer (the Data Controller), or email us and we will coordinate with your organization's administrator in accordance with our Data Processing Addendum.