Last updated: May 20, 2026

1. Introduction

Cubos Transport, VAT ID IT03211810308, operates the Cubos Transport website, Cubos Transport Dashboard and the Cubos Transport mobile app. This notice explains which personal data we process, for which purposes, on which legal bases, how long we retain it and which rights you can exercise.

2. Privacy roles

The privacy role changes depending on the context in which data is processed.

Cubos Transport acts as controller for the website, registration, free trial, billing, support, job applications and commercial communications.
For operational data uploaded or generated by customer companies in the Dashboard and Driver app, Cubos Transport normally acts as processor on behalf of the customer company.
The customer company remains controller for data about its employees, drivers, vehicles, customers, destinations and operational documents, including worker notices and any applicable employment-law requirements.

3. Information we collect

Personal and employment information

First name, last name, email, phone number and account credentials.
Role, assigned operating site, assigned vehicle, optional profile photo and language preferences.
Administrative or HR data when configured by the customer company, such as tax code, address, date and place of birth, contract type, hire date, hourly rate and emergency contacts.
Data about customers, destinations, carriers and recipients entered in orders and delivery notes.

Operational data

Precise vehicle GPS location during active shifts, including coordinates, speed, accuracy, timestamp and foreground/background status.
Shift start/end, breaks, odometer readings, refuelling, shift events and delivery status.
Orders, delivery notes, digital signatures, operational notes, delivery addresses, quantities, products and customer/carrier data.
Maintenance reports, incidents, photos, videos or attachments uploaded by users.
Offline queues and data temporarily stored on the device to synchronize operations when connectivity is unavailable.

Technical and device data

Device type, operating system, app version, language, IP address and technical security logs.
Push notification tokens and identifiers needed to send operational communications.
Cookies, consent preferences, analytics data and error diagnostics when enabled.

4. How we use information

We use data only to provide, protect and improve Cubos Transport and to allow customer companies to manage their operations.

Show active vehicles on the map and coordinate operating site, office and drivers during the shift.
Manage orders, deliveries, delivery notes, signatures, email sending, operational requests and documentation.
Manage shifts, operational attendance, assignments, vehicles, maintenance and notifications.
Provide navigation, route calculation and operational support during deliveries.
Manage accounts, payments, subscriptions, security, support and service communications.
Analyze website or product usage in aggregated form when permitted, without selling personal data.
Comply with legal, tax, accounting, contractual and security obligations.

5. Legal bases

We process personal data only when an applicable legal basis exists.

Contract or pre-contractual steps to create accounts, provide the platform, manage payments, support and requested services.
Legal obligations for billing, accounting, security, document retention and responses to competent authorities.
Legitimate interest for security, abuse prevention, service improvement, technical diagnostics and operational continuity.
Consent for non-essential cookies and analytics, marketing communications and other optional processing.
For worker data processed on behalf of a customer company, the legal basis is determined by the customer company as controller.

6. Data storage and security

We adopt technical and organizational measures proportionate to the risk of the processed data.

Hosting and database mainly provided by Supabase with infrastructure in the European Union.
Encryption in transit via TLS/SSL and role- and tenant-based access controls.
Authentication, tenant separation, access policies and limited administrative permissions.
Error monitoring, technical logs, backups and procedures to reduce unauthorized access, loss or alteration of data.

7. Data sharing

We do not sell personal data. Data is shared only when necessary to provide Cubos Transport or comply with applicable obligations.

With the customer company managing the account and authorized users in the same organization, based on configured roles.
With technical providers that process data on our behalf or on behalf of the customer company.
With advisors, authorities or third parties when required by law, contract or to protect rights and security.
With recipients indicated by the customer company, for example to send delivery notes or operational communications.

8. Providers and third-party services

Depending on the features used, Cubos Transport may rely on the following providers or integrated services.

Supabase for authentication, database, storage and backend functions.
Vercel for website hosting, technical analytics and performance when enabled.
Stripe for payments, subscriptions, invoices and billing portal.
Resend for transactional emails, delivery note sending and service communications.
Sentry for error monitoring, performance and application diagnostics.
PostHog for product analytics only where enabled and according to consent preferences.
Expo, Apple Push Notification service and Firebase Cloud Messaging for push notifications.
HERE, Mapbox and map/navigation services for geocoding, maps, routes and navigation.
Cloudflare Turnstile or equivalent services for anti-spam and form security when enabled.

9. Your GDPR rights

Within the limits provided by the GDPR, you can exercise the following rights:

Access - Request a copy of your personal data.
Rectification - Correct inaccurate or incomplete personal data.
Erasure - Request deletion of data when the conditions apply.
Portability - Receive data in a structured, machine-readable format.
Object - Object to processing based on legitimate interest or direct marketing.
Restriction - Request restriction of processing in certain cases.
Complaint - Lodge a complaint with the competent supervisory authority.

To exercise these rights, contact us at support@cubostransport.app.

10. Data retention

We retain data only for as long as necessary for the stated purposes, legal obligations or agreements with the customer company.

Account, profile and support data: for the duration of the relationship with Cubos Transport and for the period needed to manage contractual, tax or dispute obligations.
Operational data, orders, delivery notes and signatures: for the period required by the customer company and applicable document, tax or contractual obligations.
Detailed GPS data: only for operational, safety, delivery and reporting needs; the customer company should configure the shortest possible period. GPS and shift history may be retained for up to 2 years when necessary.
Analytics/cookie data: according to consent preferences and the cookie policy.
Job applications and CVs: for the time needed for recruitment and compatible future opportunities, unless deletion is requested.

11. GPS location data

Cubos Transport collects the precise GPS location of the vehicle through the driver’s device only during an active shift. Tracking is used to show the vehicle on the map, coordinate deliveries, support the driver, improve operational safety and document delivery status.

Tracking starts when the shift starts and stops automatically when the shift ends.
No location is collected outside a shift or when tracking is not active.
Collection may occur in foreground and background to keep the vehicle position updated even when the app is minimized or the screen is off.
The displayed data relates to the vehicle and operational shift; the driver’s identity can be inferred only by authorized users based on shift assignments.
Cubos Transport does not use GPS for automated disciplinary monitoring, automated productivity scoring or off-hours surveillance.
Access to the map and history must be limited to authorized company roles and proportionate to operational purposes.

If the customer company uses Cubos Transport with employees or contractors, it must provide its own worker notice, comply with remote-control rules and, where required, arrange union agreement or Labour Inspectorate authorization. A visible notice on the localized vehicle is also recommended.

12. Customer company responsibilities

Customer companies must use Cubos Transport proportionately and in compliance with applicable privacy and employment laws.

Inform drivers, employees and contractors about processed data, purposes, retention periods, authorized parties and rights.
Define a correct legal basis for GPS, shifts, HR data, delivery notes and data about their customers/destinations.
Limit dashboard and map access only to users with an operational need.
Do not use Cubos Transport for continuous surveillance, unlawful productivity control or undeclared disciplinary purposes.
Configure retention, roles and internal processes consistently with minimization, security and legal obligations.

13. Push notifications

We send push notifications for operational and service purposes, for example:

New assigned orders or delivery updates.
Approvals, rejections or updates of operational requests.
Company communications or important service notices.

You can disable push notifications in your device settings, but some operational communications may not arrive in real time.

14. Changes to this notice

We may update this notice to reflect changes to the product, providers, law or our processes. The updated version will be published on this page with the new update date.

15. Contact us

For questions about this notice or personal data processing you can contact us at:

Email: support@cubostransport.app

Privacy Policy