Trust & Privacy
How we protect your data.
This page is maintained by Power Line Fleet to answer common security and privacy questions about our customer portal and service-order system. It describes the controls we have in place today and is not a third-party certification or independent audit.
Security controls
Authentication
Customer and admin portals require email/password sign-in. New accounts are provisioned by Power Line Fleet — public sign-up is disabled. Passwords are checked against the Have I Been Pwned breach database at the auth provider.
Role-Based Access
Admin actions are gated by a server-side role check stored in a dedicated roles table. Customers only see their own orders, vehicles, and invoices; fleet members only see records for their fleet.
Encryption in Transit
The website and customer portal are served over HTTPS. API calls between your browser and our backend use TLS provided by the hosting platform.
Data Storage
Customer records, work orders, and uploaded photos are stored in a managed Postgres database with row-level security policies enforced on every read and write. Order photos live in a private storage bucket and are served via short-lived signed URLs.
What data we collect
- Contact details you provide (name, email, phone, address).
- Vehicle details for the work being performed (VIN, plate, make/model).
- Service-order history, photos you upload, quotes, invoices, and payments.
- Standard server logs needed to operate and secure the application.
How we use it
We use this information to schedule work, communicate about your vehicle, produce quotes and invoices, and keep records required for warranty and regulatory purposes. We do not sell customer data.
Subprocessors
Our application is hosted on Lovable's managed platform, which provides the database, authentication, file storage, and edge runtime. Email notifications are sent through standard email infrastructure. Payment records are stored in our database; card processing, when used, is handled by the payment processor directly and we do not retain full card numbers.
Retention & deletion
We keep service-order records for as long as needed to support warranty, accounting, and tax obligations. To request a copy of your data, or to ask us to delete records that we are not legally required to retain, contact us at the address below.
Reporting a security issue
If you believe you have found a security vulnerability in our website or portal, please email us before disclosing it publicly so we can investigate and fix it.
Questions about your data?
Email service@powerlinefleet.com and we'll get back to you.
Last updated August 2026.