BevAgent

Privacy Policy

Last updated: June 9, 2026

BevAgent provides a driver companion app used by beverage distribution fleets. The app is an enterprise tool: a distributor (the driver's employer) deploys it so that delivery routes can be measured and analyzed. Drivers activate the app with a provisioning code issued by their employer through BevAgent.

This policy explains what the app collects, why, the choices drivers have, and how BevAgent and the distributor divide privacy responsibilities. In short: your employer decides why and how this data is collected; BevAgent processes it on your employer's behalf as a service provider.

Information we collect

Precise location. While a driver is on an active work shift, the app records the device's precise location to measure the delivery route. The app uses iOS region monitoring to detect when the device enters or leaves the distributor's warehouse area (a geofence); outside of active shifts, location signals are used only to detect the start of a shift and are not recorded or retained. Recorded location data is associated with the assigned driver's identity — the driver's name and employer-assigned ID — so the distributor can attribute routes to the correct driver.

Device and app health. The app reports basic device and connectivity status (for example, app version, battery and permission state, and whether data is syncing) so the distributor's administrator can confirm the app is working on each driver's device. If the driver allows notifications, the app also registers a device push token, used only to tell the driver that an app update is ready or that the app cannot record its route.

We do not collect contacts, photos, browsing history, or advertising identifiers.

How we use it

Location and health data are used solely to operate the service — to compute and analyze delivery routes for the distributor and to keep the fleet running. We do not use this data for advertising, we do not sell it or share it for cross-context behavioral advertising, and we do not use it to track drivers across other companies' apps or websites.

Who can access this data

Data collected by the app is made available to the distributor that deployed it. In addition:

• Our service providers. BevAgent uses a small number of vendors to operate the service — such as cloud hosting and infrastructure providers and mapping/routing providers — that process data on our behalf under contracts that limit their use of the data to providing services to us.
• Legal requirements. We may disclose data where required by law, such as in response to a subpoena, court order, or other lawful request, or where necessary to protect the safety, rights, or property of drivers, our customers, or BevAgent.

We do not disclose driver data to any other third parties for their own purposes.

Enterprise context: your employer's role

Because this is a fleet tool, the distributor that employs the driver determines why and how location is collected. Under California law, the distributor is the “business” responsible for this data, and BevAgent acts as its “service provider,” processing data only to provide the service and only on the distributor's documented instructions.

This means your employer is responsible for:

• Providing you notice of this data collection at or before the time it begins;
• Complying with any laws governing employee monitoring and workplace location tracking that apply to it; and
• Deciding how the data is used, how long it is kept, and responding to your privacy rights requests.

Where the app runs on company-owned devices, the distributor may also manage app configuration and device settings.

Data retention

Route and device health data are retained for the duration of BevAgent's service agreement with the distributor, plus up to 12 months, unless the distributor instructs earlier deletion or a longer period is required by law (for example, where records are subject to a legal hold or regulatory retention requirement). When data is deleted, it is removed from active systems promptly and from backups in the ordinary course.

Your choices on the device

Location collection requires the “Always” location permission, which the driver grants on first use. A driver can change or revoke this permission at any time in the device's iOS Settings; doing so will stop route recording and the app will no longer be able to measure shifts. Revoking the permission may affect your employer's delivery operations, so check with your employer before doing so.

Your California privacy rights (CCPA/CPRA)

Where the California Consumer Privacy Act (as amended by the CPRA) applies to your employer, you have rights with respect to the personal information described in this policy. Because your employer is the business and BevAgent is its service provider, rights requests are verified and decided by your employer; BevAgent assists your employer in fulfilling them.

Categories of personal information collected (in the preceding 12 months): identifiers (driver name and employer-assigned ID), precise geolocation, and device/internet activity (app and connectivity health). Precise geolocation is sensitive personal information under the CPRA. We collect it from the driver's device during active shifts, use it only for the business purposes described in “How we use it,” disclose it only as described in “Who can access this data,” and retain it as described in “Data retention.”

No sale or sharing. Neither BevAgent nor, to our knowledge in connection with this service, your employer sells your personal information or shares it for cross-context behavioral advertising (as “sell” and “share” are defined by the CCPA/CPRA).

Sensitive personal information. Precise geolocation is used only to provide the service requested by your employer and for other purposes permitted by the CCPA regulations. Because it is not used to infer characteristics about you or for any purpose beyond these permitted purposes, the right to limit the use of sensitive personal information does not apply to this processing.

Your rights. Subject to verification and to exceptions permitted by law, you have the right to: know and access the personal information collected about you, delete it, correct it, and opt out of any sale or sharing (not applicable here, as none occurs). Exercising a right will not result in discriminatory treatment. You may use an authorized agent to make a request on your behalf; your employer may require proof of the agent's authority.

How to submit a request. Submit requests to your employer (the distributor that deployed the app), which is responsible for verifying your identity against its driver records and responding within the timelines required by law (generally 45 days, extendable once by an additional 45 days with notice). You may also contact BevAgent using the details below; if you do, we will promptly forward your request to your employer and assist in fulfilling it on your employer's instructions.

Exceptions. Some requests may be denied in whole or in part where the law permits — for example, deletion requests may be declined where the data must be kept to comply with a legal obligation, to defend legal claims, or for other purposes the CCPA recognizes. If a request is denied, your employer will explain why.

Security

We protect driver data using administrative, technical, and physical safeguards appropriate to its sensitivity, including encryption of data in transit and at rest, role-based access controls, and logging of access to location data. No system is perfectly secure, but we design the service so that driver location data is accessible only to the deploying distributor and to BevAgent personnel who need it to operate the service.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the “Last updated” date above and notify distributors, who are responsible for informing their drivers. The current version will always be available at www.bevagent.ai/privacy.

Contact

Questions about this policy or requests regarding driver data: privacy@bevagent.ai.