Privacy Policy

1. Who we are

This website, the Konpax web platform (Drivr for carriers, Forwardr for freight forwarders), and the Konpax mobile app for drivers are operated by KONPAX TRANS SRL, registered in Romania (VAT RO28643200, Reg. J2011000447159, Aleea Trandafirilor, bl. 12, 130051 Târgoviște). You can reach us at hello@konpax.ai for any privacy-related question or request.

2. Scope

This policy covers three things: (a) the konpax.ai marketing website, (b) the Konpax web platform (Drivr and Forwardr) used by transport companies and their staff, and (c) the Konpax mobile app (Google Play package ai.konpax.app, formerly published as Drivr Mobile) used by drivers and office staff of those companies. For platform and app data, our customer (the transport company) is the data controller and KONPAX TRANS SRL acts as processor on its behalf, except for account and billing data, where we are the controller.

3. Website: contact form

When you submit our contact form we collect the details you provide: name, email address, company, phone number, fleet size, and your message. We use this data solely to respond to your request and to schedule a product demonstration. Basic technical data (IP address) is processed transiently for abuse prevention.

4. Web platform: Drivr and Forwardr

When your company uses the platform we process: account data (name, work email, role), operational transport data (loads, clients, carriers, vehicles, invoices, expenses), and the content of emails and documents your company connects or uploads so that our AI can extract transport orders, invoices, and related records from them. AI processing is performed via Anthropic as a subprocessor; email delivery via Brevo; Romanian fiscal invoicing via SmartBill where enabled by your company. Application data is hosted in the European Union (Hetzner, Germany); push notifications to mobile devices additionally transit the delivery infrastructure described in section 7.

5. Konpax mobile app

The Konpax mobile app is used by drivers, dispatchers and managers whose employer has a Konpax account. Accounts are created and managed by the employer: drivers activate theirs with an invite code and then sign in with their vehicle's licence plate, while office staff sign in with their work email address. The app processes:

• Location, including in the background. Location sharing is off until you turn it on. Once you enable it, the app collects your device's location — including when the app is closed or not in use — and shares it with your dispatcher to track transport progress and estimated arrival times. It keeps doing so while you remain signed in, whether or not a transport is currently in progress. Background collection is signalled by a persistent notification on your device, and stops as soon as you switch location sharing off in the app, log out, or withdraw the permission in your device settings. Before the permission is requested the app shows a screen explaining exactly what the location is used for, and declining it leaves the rest of the app fully usable.
• Camera and photos. Used only when you choose to scan or photograph transport documents (e.g. CMR consignment notes). Images are uploaded to your employer's account and are not used for anything else.
• Identity and device data. Your name, phone number and email address as entered by your employer, a device push token for dispatch notifications, and technical logs needed to keep the app working reliably.

Sign-in credentials are stored in your device's secure keystore. The app does not collect advertising identifiers and contains no third-party advertising or analytics SDKs.

6. Legal basis and retention

We process contact-form data on the basis of your consent and our legitimate interest in responding to your inquiry (GDPR Art. 6(1)(a) and (f)). Platform and app data is processed to perform the contract with your company (Art. 6(1)(b)) and under its instructions. We retain inquiry data as long as needed to handle your request; platform data is retained for as long as your company's account is active and deleted or returned when the contract ends. Driver location history is retained only as long as your employer needs it for transport records.

7. Sharing

We do not sell your data. We share it only with: the subprocessors named above (Hetzner for EU hosting, Anthropic for AI document processing, Brevo for email delivery, SmartBill for fiscal invoicing), each bound by data-processing agreements; the push-notification services required to deliver dispatch notifications to mobile devices (Expo, Google Firebase Cloud Messaging, Apple Push Notification service), which receive a device token and the notification content in transit; and users within your own company's account (e.g. a driver's location is visible to their dispatcher). Crash diagnostics from the mobile app are collected on our own self-hosted infrastructure and are not shared with any third party.

Transfers outside the EEA. Application data is stored in the European Union. Some of the processors above are established in the United States — Anthropic (AI document processing), Expo and Google (push delivery), and Apple (push delivery on iOS). Where personal data reaches them it is transferred under the European Commission's Standard Contractual Clauses, or under the EU–US Data Privacy Framework where the recipient is certified, together with the technical measures described in section 9.

8. Your rights, account and data deletion

Under the GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. Drivers: your account is created and managed by your employer, who is the controller of your transport records. You can request deletion of your driver account either through your employer or directly by emailing hello@konpax.ai from any device; we will coordinate the request with your employer, delete your account and any personal data not subject to your employer's legal retention obligations (e.g. consignment notes) within 30 days, and confirm the outcome to you. Everyone else: email hello@konpax.ai. Step-by-step instructions, and what we can and cannot delete, are on our account deletion page. You also have the right to lodge a complaint with the Romanian supervisory authority (ANSPDCP, www.dataprotection.ro).

9. How we protect data

All traffic between the app, the platform and our servers is encrypted in transit with TLS; the mobile app permits no unencrypted connections. Data at rest is stored on encrypted volumes in the European Union. Sign-in credentials are held in your device's secure keystore, never in ordinary app storage. Access to production data is restricted to the staff who need it and is logged. Each customer's data is isolated from every other customer's at the application layer.

10. Children

Our website, platform and mobile app are tools for professional road-transport work and are intended for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, write to hello@konpax.ai and we will delete it.

11. Cookies

This website sets only a functional cookie remembering your language preference. We do not use advertising or cross-site tracking cookies.

12. Changes

We will update this page when our data practices change and revise the date at the top. Material changes affecting platform customers are announced to account administrators.