LiveDrive Data Processing Addendum

Version: v1.2026-04-25  ·  Effective on activation of the LiveDrive addon for a Fleet group.

1. Scope

This Data Processing Addendum (the "Addendum") supplements the AutoDrive Terms of Service (the "Terms") and applies whenever a Fleet customer ("Controller") activates the LiveDrive addon. While LiveDrive is active, AutoDrive ("Processor") processes the real-time location data of the Controller's enabled drivers ("Data Subjects") on the Controller's instructions, in addition to the processing already governed by the Terms and the AutoDrive Privacy Policy.

2. Roles

• Controller: the Fleet customer activating LiveDrive. The Controller determines the purposes and means of monitoring its drivers' location.
• Processor: AutoDrive (WrightsCS), acting only on the Controller's documented instructions.
• Data Subjects: drivers who have been enabled by the Controller and who have separately consented on-device.

3. Categories of personal data and processing

• Categories: approximate-to-fine-grained GPS coordinates, speed, heading, accuracy radius, device-derived timestamps, and identifiers linking each fix to a Data Subject and (when in progress) a vehicle.
• Purpose: showing the Controller's authorized administrators a real-time view of enabled drivers while broadcasting is active.
• Duration: the most recent position is retained for no more than five (5) minutes after receipt. AutoDrive does not retain a history of GPS fixes for LiveDrive. Audit records of toggles, acknowledgements, and revocations are retained for seven (7) years.

4. Controller obligations

The Controller represents and warrants, on activation and on each renewal, that it has and will maintain a lawful basis to monitor each enabled driver's location in every jurisdiction in which that driver operates. Lawful basis may include, depending on the jurisdiction: an explicit term in the employment contract, written notice to the driver, works-council or employee-representative approval, or another locally-required mechanism.

The Controller will not enable LiveDrive on a driver who has not received the Controller's own internal notice and any required local approval, in addition to the on-device consent that AutoDrive collects.

5. Processor obligations

• AutoDrive will process LiveDrive data only on the Controller's documented instructions, including with regard to transfers of personal data to a third country, unless required to do otherwise by applicable law.
• AutoDrive will ensure that personnel authorized to process LiveDrive data have committed themselves to confidentiality.
• AutoDrive will implement appropriate technical and organizational measures (encryption in transit, access controls, audit logging, single-row-per-driver storage with five-minute TTL) to protect LiveDrive data.
• AutoDrive will assist the Controller, by appropriate technical and organizational measures, with the fulfilment of the Controller's obligation to respond to requests for exercising data subject rights (access, rectification, erasure, restriction, portability, objection).
• AutoDrive will notify the Controller without undue delay, and in any event within seventy-two (72) hours, after becoming aware of a personal data breach affecting LiveDrive data.
• On termination of LiveDrive (cancellation, lapse, or revocation), AutoDrive will delete all live position data for the affected driver(s) immediately. Audit records will be retained for the period stated in §3.

6. Sub-processors

The Controller authorizes AutoDrive to engage the following sub-processors in connection with LiveDrive:

• Paddle.com Market Limited — payment processing for the LiveDrive subscription. Does not receive GPS data.
• OpenStreetMap Foundation — map tile rendering on the LiveDrive map. The Foundation receives only the bounding-box coordinates the Controller's admin is currently viewing, not driver identifiers.
• The Controller's chosen mobile-network provider(s) for transit of broadcasts.

AutoDrive will inform the Controller of any intended changes concerning the addition or replacement of sub-processors with at least thirty (30) days' notice and will give the Controller an opportunity to object.

7. International transfers

LiveDrive data is processed on AutoDrive's servers in the United States. Where the Controller is established in the European Economic Area, the United Kingdom, or Switzerland, transfers are made under the European Commission's Standard Contractual Clauses (Module 2: Controller-to-Processor), as updated from time to time, which are incorporated by reference.

8. Data subject rights

Each enabled driver may, at any time, revoke their consent and stop their broadcasts via the in-app revoke control. AutoDrive will, on revocation, immediately delete the driver's live position record and stop accepting further broadcasts from that driver until consent is re-recorded.

9. Audit

The Controller may, no more than once per year and on at least thirty (30) days' written notice, request a copy of AutoDrive's then-current LiveDrive audit log for its own group, an attestation of compliance with this Addendum, and copies of relevant security certifications, if any.

10. Liability

The liability of each party under this Addendum is subject to the limitations and exclusions of liability set out in the Terms. Nothing in this Addendum increases either party's liability under the Terms.

11. Termination and survival

This Addendum terminates automatically when the LiveDrive addon is canceled or otherwise lapses for the Controller's group. The provisions of §5 (deletion of live data, audit-record retention) and §3 (retention) survive termination.

See also: Terms of Service Privacy Policy Refund Policy