Privacy Policy — Raseed Driver
This policy explains what information the Raseed Driver mobile app (“the app”) collects, why we collect it, who can see it, and the choices you have. The app lets drivers of a company fleet pay for fuel at partner stations using a rolling code on their phone and approve each fill.
In short: we collect what is needed to identify you, confirm that fills on your vehicle are really yours, and keep an accurate record for your employer. We do not sell your data, show ads, or use advertising or analytics trackers.
1. Who we are
Raseed is developed and operated by Cedars Software Solutions (CSS LTD), Liberty Tower, 9th Floor, Hamra, Beirut, Lebanon (“we”, “us”).
You use the app because your employer (the “fleet company”) has enrolled you as a driver. The fleet company decides who is enrolled, which vehicles you may fill, and your spending rules, and it can see the fill records described below. We process your information to provide the Raseed service to the fleet company and to you.
2. Information we collect
Information your employer gives us
- Your full name, mobile phone number, employee reference, preferred language and account status.
- The vehicles you are assigned to (plate, make, model, allowed fuel grade) and your spending limits and cost centres.
Information you give us in the app
- Sign-in details: your phone number and the one-time code we send by SMS, or your password if your account uses one. A 4-digit approval PIN if you set one. Passwords and PINs are stored only as secure hashes.
- Fill details: your approval or rejection of each fill, the odometer reading you enter, and the cost centre you choose.
- Odometer photos: a photo of your vehicle's odometer taken with your camera or chosen from your gallery, when you attach one to a fill.
- Off-network fills: fuel you record buying at a station outside the Raseed network: vehicle, station name, fuel grade, litres, amount, odometer reading and date.
Information collected automatically
- Transaction records: for every fill, the station, pump, time, fuel grade, litres, amount and price, and the status of the transaction.
- Device information: device platform (Android or iOS), model, operating-system version, app version, a device identifier (fingerprint) generated by the app, and a public cryptographic key created in your phone's secure hardware. This lets us bind your account to one phone, so a code copied to another device will not work.
- Notification token: a Firebase Cloud Messaging token that lets us send notifications to your phone.
- Usage and security logs: when your device last connected, your IP address and app/browser identifier on security-relevant requests, and security events such as an attempt to use your account from a different device.
Location
The current version of the app does not access your device's location. The fuel codes it produces carry no location. If a future version uses location to confirm that you are at the station when you fill, we will ask for your permission first and update this policy before that version is released. Any such location data would be used only for that check and kept for no longer than 90 days.
Biometrics
The app can ask you to confirm a fill with Face ID or your fingerprint. This check happens entirely on your phone using your device's built-in system. We never receive, store or have access to your face or fingerprint data. We only learn whether the confirmation succeeded.
3. Phone permissions
| Permission | Why the app asks |
|---|---|
| Internet | To talk to the Raseed service. |
| Face ID / fingerprint | To confirm it is you approving a fill. Processed on your phone only. |
| Camera and photos | Only when you choose to attach an odometer photo to a fill. |
| Notifications | To alert you about fills and your account. You can turn this off in your phone's settings. |
4. How we use your information
- To sign you in and keep your account bound to your enrolled phone.
- To generate fuel codes, show you each fill for approval, and complete the payment from your employer's prepaid wallet.
- To prevent fraud and misuse, for example a code used from another phone, or a fill you did not approve.
- To give your employer accurate records, reports and fuel-consumption checks for its vehicles.
- To send you notifications about fills and your account.
- To provide support, fix problems and keep the service secure.
- To meet our legal, accounting and audit obligations.
We process your information to perform the service your employer has contracted and that you use, for our legitimate interest in keeping payments secure and preventing fraud, and to comply with the law.
5. Who we share it with
We do not sell your personal information or share it for advertising. We share it only as follows:
- Your employer (fleet company): your profile, vehicle assignments, fill and off-network-fill records, odometer readings and photos, approvals, and security events on your account.
- Fuel stations where you fill: only what is needed to serve you: the vehicle's plate, make and model, the allowed fuel grade and fill limit, and your first name. Stations never see your phone number or your employer's balance.
- Service providers who run parts of the service for us under confidentiality obligations: cloud hosting and file storage (DigitalOcean), push notifications (Google Firebase Cloud Messaging), and an SMS provider that delivers sign-in codes.
- Legal reasons: when required by law, court order or a competent authority, or to protect the rights and safety of users, stations or us.
- Business transfer: if the Raseed service is sold or merged, your information may transfer to the new operator under this policy.
Our service providers may process data on servers outside Lebanon. Where they do, we rely on their contractual and security commitments to protect it.
6. What stays on your phone
- Your sign-in session and your device key, kept in the phone's secure storage (Android Keystore / iOS Keychain). The private key never leaves your phone.
- Your display preference (light or dark theme).
Signing out of the app clears the session and key material from your phone.
7. How long we keep it
- Transaction, payment and audit records, including odometer readings and photos attached to fills: 7 years, as required for financial and audit purposes.
- Location data, if a future version collects it: at most 90 days, after which it is deleted or kept only in aggregated form that does not identify you.
- Account and device information: while you are an enrolled driver, then for as long as needed to close records, resolve disputes and meet legal obligations.
- Notification tokens are replaced whenever your phone issues a new one and are removed when no longer valid.
8. Security
We protect your information with encrypted connections (HTTPS), encryption of sensitive fields such as notification tokens, hashed passwords and PINs, hardware-backed device keys, device-bound sign-in tokens, and access controls on who within Raseed and your employer can see what. No system is perfectly secure, but we work to protect your data and will act promptly if a breach affects you.
9. Your rights and choices
Subject to applicable law, including Lebanese Law No. 81 of 2018 on Electronic Transactions and Personal Data, you can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct information that is wrong or incomplete (much of your profile is managed by your employer, so we may pass the request to them);
- delete your information, subject to the records we must keep (see section 7);
- object to or limit certain processing.
You can also turn off notifications, or camera and photo access, in your phone's settings at any time. The app keeps working, but you will not be able to attach odometer photos without camera or photo access. To make a request, contact us using the details below. We may need to verify your identity first.
10. Deleting your account
Your driver account is created by your employer. To delete it:
- ask your fleet company to remove you as a driver, or
- email [email protected] with the subject “Raseed Driver account deletion” from, or mentioning, the phone number on your account.
We will deactivate your account, revoke your enrolled device, and delete your personal information within 30 days of confirming your request. The exception is transaction and audit records we are legally required to keep for 7 years, which remain restricted and are deleted when that period ends. Uninstalling the app alone does not delete your account.
11. Children
The app is for adult drivers employed or engaged by fleet companies. It is not intended for anyone under 18, and we do not knowingly collect information from children.
12. Changes to this policy
We may update this policy as the app changes. When we do, we will change the “Last updated” date above and, for significant changes, notify you in the app or through your employer before the change takes effect.
13. Contact us
Cedars Software SolutionsLiberty Tower, 9th Floor, Hamra, Beirut, Lebanon
Email: [email protected]
Phone: +961 81 224 002 (Monday–Saturday, 08:30–17:30)