Privacy Policy

1. Who we are

Drive AI is operated by Navahan Inc., a California corporation. Throughout this policy, "Drive AI," "we," "us," and "our" refer to Navahan Inc. and the Drive AI product.

You can reach us at hello@getdrive.ai for any privacy-related question or request.

2. Who this policy covers

This policy applies to three kinds of people whose information we may handle:

• Customers — the transportation companies that pay for Drive AI.
• Customer users — the people at our customers who log in and use the product.
• Drivers — employees of our customers whose information is processed through the platform on the customer's behalf.

Drivers do not typically have Drive AI accounts. When we process information about drivers, we do so on behalf of the customer who employs them. The customer is the "data controller" under applicable privacy laws; Drive AI is the "data processor" or "service provider." A driver who wants to access, correct, or delete information about themselves should contact their employer first.

3. Information we collect

Account information

Name, email address, phone number, password (stored hashed), and basic session metadata (IP address, browser type, timestamps of sign-ins). We use session metadata to keep your account secure and to detect suspicious activity.

Operational information

Information that you or your authorized integrations submit to the platform during normal use of the product. Depending on your plan and the integrations you connect, this may include:

• Professional performance records relating to drivers.
• Payroll, scheduling and hours information used for compliance and reconciliation.
• Incident, coaching, and employment documentation created or managed within the platform.

Location information

The Drive AI Driver mobile app collects precise device location, including while the app is in the background, from drivers who have turned the Route Intelligence feature on. Collection happens only during working hours on an active route. This is described in full in Section 8: Location data.

Photos

The Drive AI Driver mobile app lets drivers attach photos to a daily vehicle inspection report. A photo is captured with the device camera, or selected from the device photo library, only at the moment a driver adds one to a report. The app does not scan, index, or upload your photo library. Submitted photos are stored with the inspection report and are visible to the delivery company that employs you.

Automatic information

Application logs, error reports, and session cookies that are necessary to operate the product. We do not use third-party advertising or cross-site tracking cookies.

4. How we use information

We use the information we collect to:

• Provide, maintain, and improve the platform.
• Generate insights that help customers manage their operations.
• Generate drafted content and analysis using a third-party AI provider. We do not permit that provider to use Customer Data to train its models.
• Communicate with customers about the product, support, and updates.
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Comply with our legal obligations.

We do not sell personal information, and we do not use customer information to train AI models. Marketing emails are sent only to people who have explicitly subscribed and can be unsubscribed from at any time.

5. Service providers

We use a small set of trusted third-party service providers to operate Drive AI. Each accesses data only as necessary for the specific function it performs:

• Cloud infrastructure — hosting and data storage.
• AI inference — automated content generation and analysis features.
• Error monitoring — platform reliability and debugging.
• Payment processing — billing and subscription management.
• Communications — email and SMS delivery.

Each is bound by confidentiality and data-protection obligations comparable to the commitments we make in this policy. A current list of service providers is available to enterprise customers on request under a Data Processing Agreement.

6. Who we share information with

• The customer who employs you — if you are a driver. Drive AI is a tool used by your employer; the information we hold about you is your employer's record.
• Service providers, strictly to perform the functions we describe.
• Legal authorities, in response to a lawful subpoena, court order, or government request. We push back on overbroad requests and notify customers of requests for their data unless legally prohibited.
• Acquirers — if Drive AI is involved in a merger, acquisition, or sale of assets, information may be transferred. We will give notice before any such transfer takes effect.

We do not share information for advertising, marketing, or any commercial purpose outside of those described above.

7. Text messaging (SMS)

Drive AI sends SMS text messages to drivers who use the Drive AI mobile app or are enrolled by their employing delivery company (an "operator"). These messages are transactional and include one-time passcodes for logging into the app (two-factor authentication), payroll and timekeeping notifications, and operational messages from the driver's dispatcher. We do not send marketing or promotional text messages.

Consent to receive these messages is collected within the Drive AI mobile app when a driver enters their mobile number to sign in. A driver may opt out at any time by replying STOP to any message, and may resubscribe by replying START. Reply HELP for help, or contact us at hello@getdrive.ai. Message frequency varies, and message and data rates may apply.

Because login passcodes are delivered by text message, a driver who opts out will not be able to receive a passcode and so will not be able to sign in to the mobile app until they resubscribe. Opting out does not otherwise affect their employment or their records in the platform.

We do not sell, rent, or share mobile phone numbers or SMS consent with third parties. No mobile information is shared with third parties or affiliates for marketing or promotional purposes. Phone numbers are used only to deliver the messages described above and to match a driver to their operator's roster. We share them with our messaging provider solely to transmit these messages, and that provider is contractually barred from using them for any other purpose.

8. Location data (Drive AI Driver mobile app)

The Drive AI Driver mobile app collects location data from drivers in order to power a feature we call Route Intelligence. This section describes that collection in full.

What we collect

When Route Intelligence is active, the app records a stream of location points. Each point contains:

• Precise latitude and longitude of the device.
• Accuracy of the position reading, in meters.
• Speed and heading of travel, where the device reports them.
• The timestamp at which the point was recorded.

Points are sampled approximately every 10 seconds, and no more often than once per 20 meters of movement. We do not collect your messages, contacts, or photo library alongside these points. Photos are collected only when you attach one to a vehicle inspection report — see Section 3: Information we collect.

Collection in the background

This app collects location data to learn parking and building-entrance locations even when the app is closed or not in use. Delivery drivers keep their phone in a pocket or mount while walking packages to a door, so location must continue to be recorded when the app is not on screen. While background collection is running, the app displays a persistent notification on Android and the system location indicator on iOS, so it is always visible to you that collection is active.

When collection happens — and when it does not

Location is recorded only when all of the following are true at the same time:

• You have granted the app location permission at the operating-system level, including background location.
• You have separately turned on Route Intelligence inside the app on the consent screen. Location collection is off by default; granting an OS permission alone does not start it.
• You are on duty — that is, you have an active shift or assigned route for the current day.

We do not collect location on your personal time. When your route or shift ends, background collection stops automatically. Our servers additionally reject any location data submitted without a recorded consent, so collection cannot continue through a client-side error or a modified app.

If you are offline, points are held in the app's private storage on your own device and uploaded when connectivity returns. The device holds a limited buffer and discards the oldest points beyond it.

Why we collect it

We use location points solely to make delivery routes faster and safer for the drivers who run them. Specifically, we analyze them on our servers to:

• Learn where a vehicle can actually be parked at a given delivery address.
• Learn where the correct building entrance, gate, or mailroom is, and the walking path to it.
• Guide you to those spots on later visits to the same address.
• Measure route timing and stop duration so your employer can plan routes and staffing accurately.

We retain the raw points so that improvements to our analysis can be applied to past deliveries. We do not use location data for advertising, and we do not sell or rent it. We do not use it to train AI models.

Who sees it

Location data collected through the driver app belongs to the delivery company that employs you, in the same way as the rest of your work record. Authorized managers at that company can see it through the platform. We share it with our cloud infrastructure provider solely to host and process it, under contractual confidentiality and data-protection obligations. We do not share it with anyone else except as described in Section 6.

How to turn it off

You can stop location collection at any time, and doing so takes effect immediately:

• In the app — open Account and switch Route Intelligence off. Collection stops right away and we record the withdrawal of your consent.
• On Android — Settings → Apps → Drive AI Driver → Permissions → Location → Don't allow.
• On iOS — Settings → Drive AI Driver → Location → Never.

Revoking permission stops all further collection. The rest of the app — your schedule, messages, scorecard, and inspection reports — continues to work normally. To request deletion of location data already collected about you, contact your employer, or email us at hello@getdrive.ai and we will assist your employer in carrying out a verified request.

9. Data isolation

Drive AI is a multi-tenant platform. Each customer account is fully isolated at the application and data layers. No query, report, or data export crosses account boundaries. Any aggregated or benchmarking features use only de-identified statistical summaries that cannot identify individual accounts or drivers.

10. How we protect information

We use industry-standard security measures, including encryption in transit and at rest, regular backups, access controls, and isolation of each customer's data. No security system is perfect; if a security incident affects your information, we will notify affected customers in accordance with applicable law.

11. How long we keep information

We retain account information while your account is active and for a reasonable period after termination to allow recovery. Customer information is retained while your subscription is active; on termination, customers may export and request deletion.

Following account closure, we will delete identifiable information within 30 days of a written request, subject to any legal retention requirements. Application logs and error reports are retained for limited periods consistent with industry practice.

12. Your rights

If you are a customer user

You can update your profile, change your password, and export account information from inside the product. To delete your account, contact your administrator or email us.

If you are a driver

Your employer is the controller of the information we process about you. To exercise rights to access, correct, or delete that information, please contact your employer's HR or operations leader first. We will help your employer carry out any verified request.

California residents (CCPA / CPRA)

Under California law, you have the right to know what personal information we collect about you, to request that we delete it, to correct inaccuracies, and to opt out of any sale or sharing of personal information for cross-context behavioral advertising. We do not sell or share personal information in this sense, and we will not discriminate against you for exercising these rights. Drive AI processes information about drivers as a service provider on behalf of our customers — the customer (your employer) is the business responsible for honoring CCPA rights with respect to that information.

To exercise any of these rights, contact us at hello@getdrive.ai. We will respond within 30 days. California residents may designate an authorized agent to submit requests on their behalf.

European Economic Area / United Kingdom

Drive AI is operated in the United States and is intended for US-based customers. We do not currently target the EEA or UK markets. If you nevertheless believe we hold personal information about you and are subject to EU or UK data protection law, please contact us.

13. Children's privacy

Drive AI is built for commercial operations and is intended for users aged 18 and over. We do not knowingly collect information from anyone under the age of 16. If we learn that we have received such information, we will delete it.

14. Where your information is processed

Drive AI hosts customer information on infrastructure located in the United States. If you access the product from outside the United States, you understand that your information will be transferred to and processed in the United States.

15. Changes to this policy

We may update this policy from time to time. If we make a change that materially reduces your rights or expands how we use your information, we will give notice at least 30 days before the change takes effect, by email and via an in-product banner. Otherwise we will update the "Last updated" date at the top of this page.

16. How to contact us

For any privacy-related question or request, reach us at: