Privacy Policy

Last updated: 9 November 2026

1. Controller

Tim Fleischer (Fleetnode), Bonifatiusstraße 21, 97762 Hammelburg, Germany · hello@fleetnodehq.com

2. Hosting and delivery (Cloudflare)

This website and the client portal are hosted on Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you open a page, Cloudflare processes technical data such as your IP address, browser type, the page requested and the time of the request, in order to deliver the page securely and protect it against attacks. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in a secure, reliable website). Cloudflare is certified under the EU-U.S. Data Privacy Framework; we have concluded a data processing agreement with Cloudflare.

3. Sign-in to the client portal

To sign in, you enter your e-mail address and receive a one-time code by e-mail. The e-mail is sent via Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France), with whom we have concluded a data processing agreement. We process your e-mail address, the time of sign-in and a session identifier to identify you and show you only your own data. Legal basis: Art. 6 (1)(b) GDPR (performance of a contract or pre-contractual steps).

4. Sign-up, billing and invoices

When you sign up we collect your name, e-mail address, company, billing address, country, VAT identification number and — if provided — niche and phone number, as well as the number of accounts you book. We use this data to set up and provide the service, to contact you, to determine the correct VAT treatment and to issue invoices. Legal basis: Art. 6 (1)(b) GDPR; for invoices and tax records also Art. 6 (1)(c) GDPR in conjunction with German commercial and tax retention obligations (§ 147 AO, § 257 HGB: up to 10 years).

Where this data is stored: your full billing details are held by Cloudflare only for a few minutes until our own server in Germany has retrieved them; they are then deleted at Cloudflare. Invoices are created and archived on our server in Germany and are only made available to you for download for a short time when you request them in the portal.

VAT ID check: for business customers in other EU member states we verify the VAT identification number via the VAT Information Exchange System (VIES) of the European Commission and keep the result as proof. Legal basis: Art. 6 (1)(c) GDPR in conjunction with § 18e UStG and Art. 6 (1)(b) GDPR.

5. Payment (PayPal)

Subscriptions are paid via PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. When you subscribe, you enter your payment details directly with PayPal; we never see your card or bank details. We receive the subscription ID and status (e.g. active, cancelled) to unlock or pause your access. Legal basis: Art. 6 (1)(b) GDPR. PayPal's privacy statement: paypal.com/legalhub/privacy-full.

6. Operating your Instagram accounts

To provide the service, we operate the Instagram accounts you hand over to us on dedicated devices. In doing so we process the account names, content you provide (videos, images, captions), activity logs of each device session, and publicly available statistics of your accounts (views, likes, comments, followers). To retrieve these public statistics we use the service Apify (Apify Technologies s.r.o., Vodičkova 704/36, 110 00 Prague, Czech Republic). Legal basis: Art. 6 (1)(b) GDPR. Login credentials you give us are stored only on our own devices and are never published or shared.

Content you upload: videos, images and captions you upload in the client portal are stored temporarily in Cloudflare R2 (EU-US Data Privacy Framework) until our server in Germany retrieves them, usually within a few minutes; they are then deleted at Cloudflare. A small preview image is kept for up to 30 days so you can see your queue. Preview images of your published reels are shown in the portal.

How your Instagram login is transmitted: when you enter an Instagram password in the client portal, it is encrypted in your browser (RSA-OAEP 3072 bit + AES-256-GCM) with a key that only our server in Germany holds. Cloudflare only stores the encrypted data until our server retrieves it (usually within two minutes) and deletes it afterwards. You can remove a login at any time in the portal; we then delete it from our server.

7. Fonts

All fonts are hosted on our own server. No connection to third-party font services (e.g. Google Fonts) is made when you visit this website.

8. E-mail contact

If you write to us by e-mail, we process your message and contact details to answer your request. Legal basis: Art. 6 (1)(b) or (f) GDPR.

9. Cookies and local storage

We do not use tracking or advertising cookies. When you sign in, we set a technically necessary cookie (fn_session) that keeps you signed in to the portal for up to 30 days; it is deleted when you sign out. Legal basis: § 25 (2) No. 2 TDDDG and Art. 6 (1)(b) GDPR.

10. How long we keep data

We delete customer data when it is no longer needed for the service, at the latest 3 months after the end of the contract, unless statutory retention periods apply. Device activity logs are kept for a maximum of 12 months.

11. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21 GDPR). To exercise these rights, write to hello@fleetnodehq.com. You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority of your German federal state.