Privacy Policy

1. Who we are

Drive AI is operated by Navahan Inc., a California corporation. Throughout this policy, "Drive AI," "we," "us," and "our" refer to Navahan Inc. and the Drive AI product.

You can reach us at hello@getdrive.ai for any privacy-related question or request.

2. Who this policy covers

This policy applies to three kinds of people whose information we may handle:

• Customers — the transportation companies that pay for Drive AI.
• Customer users — the people at our customers who log in and use the product.
• Drivers — employees of our customers whose information is processed through the platform on the customer's behalf.

Drivers do not typically have Drive AI accounts. When we process information about drivers, we do so on behalf of the customer who employs them. The customer is the "data controller" under applicable privacy laws; Drive AI is the "data processor" or "service provider." A driver who wants to access, correct, or delete information about themselves should contact their employer first.

3. Information we collect

Account information

Name, email address, phone number, password (stored hashed), and basic session metadata (IP address, browser type, timestamps of sign-ins). We use session metadata to keep your account secure and to detect suspicious activity.

Operational information

Information that you or your authorized integrations submit to the platform during normal use of the product. Depending on your plan and the integrations you connect, this may include:

• Professional performance records relating to drivers.
• Payroll, scheduling and hours information used for compliance and reconciliation.
• Incident, coaching, and employment documentation created or managed within the platform.

Automatic information

Application logs, error reports, and session cookies that are necessary to operate the product. We do not use third-party advertising or cross-site tracking cookies.

4. How we use information

We use the information we collect to:

• Provide, maintain, and improve the platform.
• Generate insights that help customers manage their operations.
• Generate drafted content and analysis using a third-party AI provider. We do not permit that provider to use Customer Data to train its models.
• Communicate with customers about the product, support, and updates.
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Comply with our legal obligations.

We do not sell personal information, and we do not use customer information to train AI models. Marketing emails are sent only to people who have explicitly subscribed and can be unsubscribed from at any time.

5. Service providers

We use a small set of trusted third-party service providers to operate Drive AI. Each accesses data only as necessary for the specific function it performs:

• Cloud infrastructure — hosting and data storage.
• AI inference — automated content generation and analysis features.
• Error monitoring — platform reliability and debugging.
• Payment processing — billing and subscription management.
• Communications — email and SMS delivery.

Each is bound by confidentiality and data-protection obligations comparable to the commitments we make in this policy. A current list of service providers is available to enterprise customers on request under a Data Processing Agreement.

6. Who we share information with

• The customer who employs you — if you are a driver. Drive AI is a tool used by your employer; the information we hold about you is your employer's record.
• Service providers, strictly to perform the functions we describe.
• Legal authorities, in response to a lawful subpoena, court order, or government request. We push back on overbroad requests and notify customers of requests for their data unless legally prohibited.
• Acquirers — if Drive AI is involved in a merger, acquisition, or sale of assets, information may be transferred. We will give notice before any such transfer takes effect.

We do not share information for advertising, marketing, or any commercial purpose outside of those described above.

7. Text messaging (SMS)

Drive AI sends SMS text messages to drivers who use the Drive AI mobile app or are enrolled by their employing delivery company (an "operator"). These messages are transactional and include one-time passcodes for logging into the app (two-factor authentication), payroll and timekeeping notifications, and operational messages from the driver's dispatcher. We do not send marketing or promotional text messages.

Consent to receive these messages is collected within the Drive AI mobile app when a driver enters their mobile number to sign in. A driver may opt out at any time by replying STOP to any message, and may resubscribe by replying START. Reply HELP for help, or contact us at hello@getdrive.ai. Message frequency varies, and message and data rates may apply.

Because login passcodes are delivered by text message, a driver who opts out will not be able to receive a passcode and so will not be able to sign in to the mobile app until they resubscribe. Opting out does not otherwise affect their employment or their records in the platform.

We do not sell, rent, or share mobile phone numbers or SMS consent with third parties. No mobile information is shared with third parties or affiliates for marketing or promotional purposes. Phone numbers are used only to deliver the messages described above and to match a driver to their operator's roster. We share them with our messaging provider solely to transmit these messages, and that provider is contractually barred from using them for any other purpose.

8. Data isolation

Drive AI is a multi-tenant platform. Each customer account is fully isolated at the application and data layers. No query, report, or data export crosses account boundaries. Any aggregated or benchmarking features use only de-identified statistical summaries that cannot identify individual accounts or drivers.

9. How we protect information

We use industry-standard security measures, including encryption in transit and at rest, regular backups, access controls, and isolation of each customer's data. No security system is perfect; if a security incident affects your information, we will notify affected customers in accordance with applicable law.

10. How long we keep information

We retain account information while your account is active and for a reasonable period after termination to allow recovery. Customer information is retained while your subscription is active; on termination, customers may export and request deletion.

Following account closure, we will delete identifiable information within 30 days of a written request, subject to any legal retention requirements. Application logs and error reports are retained for limited periods consistent with industry practice.

11. Your rights

If you are a customer user

You can update your profile, change your password, and export account information from inside the product. To delete your account, contact your administrator or email us.

If you are a driver

Your employer is the controller of the information we process about you. To exercise rights to access, correct, or delete that information, please contact your employer's HR or operations leader first. We will help your employer carry out any verified request.

California residents (CCPA / CPRA)

Under California law, you have the right to know what personal information we collect about you, to request that we delete it, to correct inaccuracies, and to opt out of any sale or sharing of personal information for cross-context behavioral advertising. We do not sell or share personal information in this sense, and we will not discriminate against you for exercising these rights. Drive AI processes information about drivers as a service provider on behalf of our customers — the customer (your employer) is the business responsible for honoring CCPA rights with respect to that information.

To exercise any of these rights, contact us at hello@getdrive.ai. We will respond within 30 days. California residents may designate an authorized agent to submit requests on their behalf.

European Economic Area / United Kingdom

Drive AI is operated in the United States and is intended for US-based customers. We do not currently target the EEA or UK markets. If you nevertheless believe we hold personal information about you and are subject to EU or UK data protection law, please contact us.

12. Children's privacy

Drive AI is built for commercial operations and is intended for users aged 18 and over. We do not knowingly collect information from anyone under the age of 16. If we learn that we have received such information, we will delete it.

13. Where your information is processed

Drive AI hosts customer information on infrastructure located in the United States. If you access the product from outside the United States, you understand that your information will be transferred to and processed in the United States.

14. Changes to this policy

We may update this policy from time to time. If we make a change that materially reduces your rights or expands how we use your information, we will give notice at least 30 days before the change takes effect, by email and via an in-product banner. Otherwise we will update the "Last updated" date at the top of this page.

15. How to contact us

For any privacy-related question or request, reach us at: