Privacy Policy

1. Who we are

This website, the Drivr / Forwardr platform, and the Drivr Mobile application are operated by KONPAX TRANS SRL, registered in Romania (VAT RO28643200, Reg. J15/447/2011, Aleea Trandafirilor 12, 130051 Targoviste). You can reach us at hello@konpax.ai for any privacy-related question or request.

2. Scope

This policy covers three things: (a) the konpax.ai marketing website, (b) the Drivr and Forwardr web platform used by transport companies and their staff, and (c) the Drivr Mobile app used by drivers of those companies. For platform and app data, our customer (the transport company) is the data controller and KONPAX TRANS SRL acts as processor on its behalf, except for account and billing data, where we are the controller.

3. Website: contact form

When you submit our contact form we collect the details you provide: name, email address, company, phone number, fleet size, and your message. We use this data solely to respond to your request and to schedule a product demonstration. Basic technical data (IP address) is processed transiently for abuse prevention.

4. Platform: Drivr and Forwardr

When your company uses the platform we process: account data (name, work email, role), operational transport data (loads, clients, carriers, vehicles, invoices, expenses), and the content of emails and documents your company connects or uploads so that our AI can extract transport orders, invoices, and related records from them. AI processing is performed via Anthropic as a subprocessor; email delivery via Brevo; Romanian fiscal invoicing via SmartBill where enabled by your company. Application data is hosted in the European Union (Hetzner, Germany); push notifications to mobile devices additionally transit the delivery infrastructure described in section 7.

5. Drivr Mobile app

The Drivr Mobile app is used by drivers whose employer has a Drivr account. Accounts are created and managed by the employer; drivers sign in with an activation code. The app processes:

• Location, including in the background. While you are signed in and assigned to an active transport, the app collects your device's location — including when the app is closed or not in use — and shares it with your dispatcher to track transport progress and estimated arrival times. Background collection runs only while an active transport is in progress, is signalled by a persistent notification on your device, and stops when you complete the transport or log out. You can also disable location permissions at any time in your device settings.
• Camera and photos. Used only when you choose to scan or photograph transport documents (e.g. CMR consignment notes). Images are uploaded to your employer's account and are not used for anything else.
• Identity and device data. Your name and phone number as entered by your employer, a device push token for dispatch notifications, and technical logs needed to keep the app working reliably.

Sign-in credentials are stored in your device's secure keystore. The app does not collect advertising identifiers and contains no third-party advertising or analytics SDKs.

6. Legal basis and retention

We process contact-form data on the basis of your consent and our legitimate interest in responding to your inquiry (GDPR Art. 6(1)(a) and (f)). Platform and app data is processed to perform the contract with your company (Art. 6(1)(b)) and under its instructions. We retain inquiry data as long as needed to handle your request; platform data is retained for as long as your company's account is active and deleted or returned when the contract ends. Driver location history is retained only as long as your employer needs it for transport records.

7. Sharing

We do not sell your data. We share it only with: the subprocessors named above (Hetzner for EU hosting, Anthropic for AI document processing, Brevo for email delivery, SmartBill for fiscal invoicing), each bound by data-processing agreements; the push-notification services required to deliver dispatch notifications to mobile devices (Expo, Google Firebase Cloud Messaging, Apple Push Notification service), which receive a device token and the notification content in transit; and users within your own company's account (e.g. a driver's location is visible to their dispatcher). Crash diagnostics from the mobile app are collected on our own self-hosted infrastructure and are not shared with any third party.

8. Your rights, account and data deletion

Under the GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. Drivers: your account is created and managed by your employer, who is the controller of your transport records. You can request deletion of your driver account either through your employer or directly by emailing hello@konpax.ai from any device; we will coordinate the request with your employer, delete your account and any personal data not subject to your employer's legal retention obligations (e.g. consignment notes) within 30 days, and confirm the outcome to you. Everyone else: email hello@konpax.ai. You also have the right to lodge a complaint with the Romanian supervisory authority (ANSPDCP, www.dataprotection.ro).

9. Cookies

This website sets only a functional cookie remembering your language preference. We do not use advertising or cross-site tracking cookies.

10. Changes

We will update this page when our data practices change and revise the date at the top. Material changes affecting platform customers are announced to account administrators.