Privacy Policy

Last updated: 17 September 2026

Operating entity: DwellPay is operated by Arongame OÜ, registry code 12798262, Harju maakond, Tallinn, Pirita tee 26f-11, 12011, Estonia.

This Privacy Policy explains what personal data DwellPay ("DwellPay", "we", "us") collects when a road transport carrier ("Organization", "Customer") uses the DwellPay platform (the Office web application and the Driver mobile application, together the "Service"), why we collect it, where it is stored, and the rights you have over it.

1. Who this policy covers

DwellPay is a business-to-business (B2B) SaaS platform. Our direct contractual relationship is with the Organization (a road transport carrier) that signs up for DwellPay. This policy covers personal data about:

Office users — employees of the Organization who sign in to the DwellPay Office web application (dispatchers, administrators, accounting staff).
Drivers — the Organization's drivers, whose devices are provisioned by the Organization to use the DwellPay Driver mobile application.
Organization contacts — names, emails, and business details the Organization enters about its own Customers and Facilities for the purpose of tracking detention claims.

If you are a Driver or Office user, your Organization (your employer) is generally the data controller for your personal data processed through the Service, and DwellPay acts as a data processor on the Organization's instructions. If you are the Organization itself, DwellPay is the data controller for your own account and billing data.

2. What we collect

Category	What it includes	Where it comes from
Account & authentication	Email address; sign-in is passwordless (a one-time code sent to your email) — DwellPay never stores a password for Office accounts.	Entered by the Office user at sign-up/sign-in.
Organization & business data	Organization name, legal name, country, VAT ID, default currency/timezone, billing email.	Entered by the Organization during onboarding.
Customer & Facility data	Names, addresses, and contact emails of the Organization's own customers and delivery/pickup facilities, entered by the Organization to track and claim detention charges against those customers.	Entered by Office users.
Vehicle & Driver records	Vehicle registration; Driver first/last name.	Entered by Office users when provisioning a Driver or Vehicle.
Location & evidence data	GPS coordinates and accuracy, captured from a Driver's device only at specific, explicit operational events (arriving at and departing a facility) — never as continuous or background location tracking. May include a photo the Driver deliberately captures as delivery/detention evidence.	Captured by the Driver app at the moment the Driver taps "Arrived" or "Departed".
Billing data	The Organization's subscription plan, trial/billing status, and payment details. Payment card details are collected and stored directly by our payment processor, Stripe — DwellPay never receives or stores full card numbers.	Entered by the Organization via Stripe's own secure checkout/billing portal.
Technical & usage data	IP address (used transiently for rate-limiting and abuse prevention), timestamps of actions taken in the Service, and standard web server/error logs.	Generated automatically by the Service.

3. Why we process this data

To provide the Service: authenticating users, recording Loads/Stops, calculating detention/waiting time against the Organization's own configured rules, generating detention claim documents, and delivering them by email.
To process payment for the Organization's subscription, via Stripe.
To secure the Service: preventing abuse of the sign-in and evidence-upload systems, and maintaining audit trails for financial claim documents.
To communicate with you: sign-in codes, team invitations, operational notices, and claim documents/emails you or your Organization requests be sent.

We do not use your personal data for advertising, do not build behavioral profiles, and do not sell personal data to third parties.

4. Where your data is stored

DwellPay's database, file storage, and document-rendering infrastructure are all located in the European Union (our database runs in an EU region operated by Neon, and evidence/claim documents are stored in an EU-jurisdiction-constrained bucket operated by Cloudflare). Email delivery is handled by Cloudflare's email infrastructure. Payment processing is handled by Stripe, which may process payment data outside the EU under its own applicable safeguards — see Stripe's Privacy Policy.

5. Who we share data with

We do not sell personal data. We share data only with the infrastructure providers necessary to run the Service, each acting as our sub-processor under their own data protection commitments:

Cloudflare — hosting, database connectivity, file storage, and transactional email delivery.
Neon — managed PostgreSQL database hosting (EU region).
Stripe — payment processing and subscription billing.

Detention claim documents and related correspondence are, by the nature of the Service, sent to the Organization's own Customers as part of the claims process the Organization itself initiates.

6. How long we keep data

We retain personal data for as long as the Organization's account remains active, and for a reasonable period afterward as required to meet legal, accounting, or financial-claim record-keeping obligations. Evidence and claim documents are retained as immutable records supporting the financial claims they document, consistent with standard commercial record-keeping practice.

7. Your rights

Depending on your location, you may have rights to access, correct, or request deletion of your personal data, or to object to certain processing. Because DwellPay processes most personal data on behalf of an Organization (your employer, if you are a Driver or Office user), we ask that you first contact your Organization; if you contact us directly at support@dwellpay.app, we will route your request appropriately and respond as required by applicable law (including the EU General Data Protection Regulation, where it applies).

8. Cookies

The DwellPay Office web application uses a single strictly-necessary session cookie to keep you signed in. It is not used for advertising or cross-site tracking, and it is not readable by any script running on the page (it is marked HttpOnly).

9. Children

The Service is a business tool intended for use by employees of transport companies and is not directed at, or knowingly used by, children.

10. Changes to this policy

We may update this policy as the Service evolves. We will update the "Last updated" date above when we do.

11. Contact us

Questions about this policy or your data can be sent to support@dwellpay.app.