In one paragraph: ROADTRUTH reads vehicle data from telematics accounts your fleet authorizes. It uses that data only to compute vehicle health scores and maintenance predictions for that fleet. It never receives driver health data, never sells data, keeps each fleet's data separate from every other fleet's, and deletes it when you disconnect and ask us to.
When a fleet connects a telematics account (Motive, Samsara, Geotab or another provider) through our authorization flow, gives us a read-only API token, or creates a read-only Geotab service user for us, we receive:
All telematics access is read-only.
Only to provide the Service to the fleet that owns the data: computing Vehicle Health Scores, generating and tracking maintenance predictions, sending the alerts the fleet has configured, billing, support, security, and validation reports for that fleet. We publish aggregate, de-identified statistics (for example our prediction precision) that never identify a fleet, vehicle or person.
Supabase (database), Netlify (hosting and server functions), Anthropic (AI analysis of vehicle cases; vehicle data only), Meta's WhatsApp Business Platform (service-record intake and alerts), Stripe (card payments in the US) and Paystack (card payments in Nigeria). The payment processors keep your card; we keep only a token, the card brand and its last four digits. Each receives only what its function needs, under a contract.
Data is stored in the United States, encrypted in transit and at rest. Telematics credentials and tokens are held on our servers only and never sent to the browser. Each fleet's data is reachable only by that fleet's authorized users, enforced on our servers and in the database. Authorization flows use signed, expiring state tokens.
We keep fleet data while the account is active. Raw telemetry is kept for 13 months and then summarized by day. Predictions and their outcomes are kept so that our published record stays accurate. To disconnect, revoke access in your telematics account or email us. On written request, we delete the fleet's stored data within 30 days, except records the law requires us to keep and de-identified prediction statistics.
Fleets may ask for a copy, correction or deletion of their data at any time. If you are a driver or other individual whose information is in a connected fleet's data, we process it on the fleet's behalf: please contact your fleet, or contact us and we will pass your request on and help them respond. California residents and residents of other states with privacy laws may have additional rights to know, correct and delete; we honor them through the fleet as its service provider.
We will post any changes on this page with a new effective date, and email paying customers about material changes. Questions or requests: joseph@josmolgroup.com · +1 915-478-8807.