Short version: FreshRide is a business tool for vehicle service providers. We collect only the information needed to operate the service. We do not sell, rent, or share your personal data with advertisers or third-party marketers — ever.
1. Who We Are
FreshRide is a vehicle intake and management platform operated by FreshRide ("we", "us", or "our"). The FreshRide mobile app (com.atolus.freshride) is available for Android and is designed exclusively for use by authorized staff of vehicle service providers and dealerships that have a subscription to the FreshRide platform.
For privacy-related questions, contact us at: hamilton@atolus.com
2. Scope of This Policy
This policy applies to the FreshRide Android/iOS mobile application and the associated backend services. It describes what data we collect, why we collect it, how it is stored, and your rights regarding that data.
This app is not intended for use by consumers or minors. Access requires an organizational account provided by your employer (a FreshRide subscriber). If you are not an authorized user of a subscribing organization, you may not use the app.
3. Data We Collect
| Category | Data collected | Purpose | Shared? |
|---|---|---|---|
| Identity | Name, email address, organizational role | Authentication & access control via Microsoft Azure AD | No never sold |
| Vehicle data | VIN numbers, make, model, year, trim, color | Vehicle intake record creation; VIN decoding via third-party API | VIN sent to external parties (see below) for decoding only |
| Photos | Vehicle photographs taken with the device camera | Documenting vehicle condition at intake | Stored in Microsoft Azure Blob Storage; not shared externally |
| Usage data | Actions taken within the app (services selected, intake timestamps) | Operational records for the subscribing organization | No |
| Device & app data | App version, environment (dev/prod), standard Android diagnostics | Troubleshooting and support | No |
We do not collect location data, contacts, calendar data, SMS/call logs, financial information, or browsing history.
4. How We Use Your Data
- Authentication: Your Microsoft account credentials are processed by Microsoft (Azure Active Directory / Entra ID) to verify your identity. FreshRide receives your name, email, and organizational role from Microsoft after you sign in. We do not handle your password.
- Vehicle intake workflow: VINs you enter or scan are sent to our backend and forwarded to VIN-decoding services externally (see below) solely to retrieve vehicle specification data. No personally identifiable information is sent to these services.
- Photo storage: Vehicle photos you capture are uploaded directly to Microsoft Azure Blob Storage using short-lived, single-use secure tokens (SAS URLs). Photos are associated with the vehicle record for your organization's operational use.
- Service operations: Intake records, service selections, and notes are stored in our database and are accessible only to authorized staff within your subscribing organization.
5. Data Sharing and Disclosure
We do not sell, rent, trade, or share your personal information with advertisers, data brokers, or any third party for marketing purposes.
Data is shared only in the following limited circumstances:
- Microsoft Azure (infrastructure): Authentication (Azure Entra ID) and photo storage (Azure Blob Storage) are provided by Microsoft. Data processed by these services is subject to Microsoft's Privacy Statement.
- VIN decoding APIs: Vehicle Identification Numbers are sent to Auto.dev and/or the NHTSA VPIC public API to retrieve vehicle specification data. No user-identifiable data is transmitted to these services.
- Your organization: All intake records are accessible to authorized administrators and staff within your subscribing organization in accordance with your organization's own access policies.
- Legal requirements: We may disclose information if required by law, court order, or to protect the safety and rights of FreshRide, its users, or the public.
6. Camera Permission
The app requests access to your device camera solely for two purposes:
- Scanning VIN barcodes from vehicle labels using ML Kit barcode recognition.
- Capturing photographs of vehicles as part of the intake documentation workflow.
Camera access is only active while you are in a scan or photo capture screen. Images are stored locally in the app cache temporarily and then uploaded to your organization's storage. No live video is recorded or transmitted.
7. Data Retention
Vehicle intake records, photos, and associated data are retained for as long as your organization's subscription is active and as required for business operations. Upon termination of a subscription, data retention and deletion is handled in accordance with the service agreement between FreshRide and the subscribing organization.
Authentication tokens are stored securely on-device using the Microsoft Authentication Library (MSAL) and are cleared when you sign out of the app.
8. Security
We take reasonable technical and organizational measures to protect your data:
- All network communication is encrypted using HTTPS/TLS.
- Photo uploads use short-lived SAS (Shared Access Signature) tokens that expire automatically.
- Authentication is delegated to Microsoft Azure AD — we do not store passwords.
- Access to backend data is restricted by role-based access control tied to your organizational membership.
No method of transmission over the internet is 100% secure. In the event of a data breach that affects your personal data, we will notify affected users and regulators as required by applicable law.
9. Your Rights
Depending on where you are located, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate data.
- Deletion: Request deletion of your personal data, subject to operational retention requirements.
- Objection: Object to certain types of data processing.
To exercise any of these rights, contact your organization's FreshRide administrator or email us directly at hamiltonjose@gmail.com. We will respond within 30 days.
10. Children's Privacy
FreshRide is a business-to-business application intended for use only by adults employed by subscribing organizations. We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has provided us with personal data, please contact us immediately.
11. Advertising
FreshRide does not display advertisements within the application and does not use advertising identifiers (such as Google Advertising ID) for any purpose.
12. Third-Party Services
The app uses the following third-party services. Each service has its own privacy policy:
- Microsoft Azure / Entra ID — Authentication and file storage
- Auto.dev — VIN decoding
- NHTSA VPIC — VIN decoding (fallback, U.S. government service)
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. For significant changes, we will provide notice through the application or by email to the contact on file for your organization. Your continued use of the app after changes are posted constitutes acceptance of the revised policy.
14. Contact Us
If you have questions, concerns, or requests related to this Privacy Policy, please contact:
FreshRide
Email: hamilton@atolus.com