Privacy Policy

Effective October 24, 2026. Replaces the version dated August 5, 2024.

This Privacy Policy explains how Onramp Payments, Inc. and its affiliates (“ONRAMP,” “we,” “us” or “our”) collect, use, disclose and protect personal information, and the choices and rights you have. It applies when you visit onrampfleet.com (the “Website”), use the ONRAMP FuelPay mobile app (the “App”) or the ONRAMP rewards program (the “Rewards Program”), use our payment services as a driver or other user of a fleet’s account, communicate with us, or interact with us at events or by phone (together, the “Services”). It also serves as our notice at collection under California law.

Our portals for merchants and partners at onrampmerchants.com are covered by the privacy policy at legal.onrampmerchants.com/privacy. The Terms of Use and, for fleets, the Carrier Terms and Conditions also apply to the Services.

1. Fleets and the drivers who use their accounts

ONRAMP accounts are opened by fleets and other businesses (“Carriers”). A Carrier decides who may use its account, and receives information about purchases made on it. When we process personal information to provide services to a Carrier, such as reports of its drivers’ purchases, we do so under our agreement with the Carrier. You can contact your Carrier, or us, about information we hold for a Carrier, and we may pass your request to the Carrier. Carriers handle information under their policies, which may differ from this one.

2. Personal information we collect

Depending on how you use the Services, we collect the following categories of personal information:

• Identifiers and contact information: name, email address, phone number, mailing address, account and user IDs, driver identification number (DIN), and device identifiers.
• Account and sign-in information: username, password or PIN (stored in protected form), and one-time codes.
• Employment and vehicle information: the Carrier you drive for, your role, and vehicle, unit, trailer and odometer details your Carrier or you provide.
• Transaction and commercial information: purchases made with the App, including the merchant, site, pump, date and time, products, quantities, prices, discounts and authorization results, and your rewards activity.
• Financial information: bank account and payment details provided to open, fund or pay an account, which may include account and routing numbers.
• Identity verification and credit information: for a Carrier that is a sole proprietor or an individual business owner, information needed to verify identity and assess an application, such as date of birth, taxpayer identification number, government ID details and information from consumer reporting agencies, where the law allows.
• Location information: precise location from your device when you allow the App to use it, and the location of sites and pumps where you make purchases.
• Device and internet activity: IP address, browser and device type, operating system, app version, crash and diagnostic data, pages and screens viewed, links clicked, and the referring page, collected through cookies, pixels, software development kits and similar tools.
• Communications: messages, emails, calls and support requests you send us, recordings of calls where we tell you a call is recorded, and records of your text message opt-in and opt-out choices.
• Demographic information you choose to give us: such as date of birth or gender, for the Rewards Program.
• Job applicant information: if you apply for a job with us, your resume, work history, education, references and the information you provide in the application.
• Inferences: fraud and risk indicators, and preferences, that we derive from the information above.

Some of this information is “sensitive” under certain state laws: account sign-in credentials, financial account numbers, government identifiers and precise location. We use sensitive personal information only to provide the Services you request, to verify identity, to secure accounts, to prevent fraud and to comply with the law. We do not use or disclose it to infer characteristics about you. Where the law requires your consent before we process sensitive personal information, we ask for it first: the App asks for your device’s permission before it uses precise location, and you can withdraw that permission at any time in your device settings or by contacting us.

3. Where we get it

• From you, when you create an account, use the App or the Website, make a purchase, contact us or apply for a job.
• From your Carrier, which provides information to set up and manage its drivers, vehicles and account.
• From merchants, payment networks and processors, which send us information about purchases.
• From banks, payment and account-linking providers, identity verification and fraud prevention services, and consumer reporting agencies.
• Automatically, from your device and from cookies and similar tools.
• From public sources and business contact sources, such as government registries of motor carriers.

4. How we use it

• To provide the Services, including authorizing and processing purchases, applying discounts and rewards, and showing nearby sites.
• To open, manage and service accounts, and to provide reports and statements to Carriers.
• To verify identity, assess applications, manage credit and collect amounts owed.
• To detect, prevent and investigate fraud, unauthorized use and security incidents.
• To provide customer support and to send account, transaction, security and service messages.
• To send marketing about our products, where the law allows, and to measure how our Website and communications perform.
• To maintain, test, improve and develop the Services, including through analytics and de-identified or aggregated information.
• To consider job applications.
• To comply with the law, respond to legal requests, enforce our agreements, and protect the rights, property and safety of our users, our business partners, ONRAMP and others.

We may use automated tools, including scores from identity, fraud and consumer reporting services, to help evaluate applications and transactions. If an automated process contributes to a decision to decline an application from you as an individual, you may ask us for a human review by contacting us as described below.

5. How we disclose it

We disclose personal information to:

• Your Carrier, which receives information about purchases made on its account and about its authorized users.
• Merchants where you make purchases, as needed to complete and settle them.
• Service providers that work for us under contract, such as cloud hosting, payment processing, account linking, identity verification, fraud prevention, communications, customer support, analytics and professional services. Our contracts limit their use of the information to the services they provide to us.
• Banks, payment networks and other financial partners that support our accounts and payments.
• Consumer reporting agencies, when we assess an application from an individual business owner, where the law allows.
• Authorities and others when we believe it is required by law or legal process, or needed to prevent fraud or harm, or to protect our rights.
• A buyer or successor in a merger, acquisition, financing or sale of all or part of our business, subject to this Privacy Policy.
• Others with your consent or at your direction.

Account-linking services such as Plaid Inc. may collect information from your financial institution under the provider’s privacy policy when you or your Carrier connect a bank account.

6. We do not sell personal information

ONRAMP does not sell personal information, and does not share it for cross-context behavioral advertising or use it for targeted advertising as those terms are defined in state privacy laws. We have not done so in the past 12 months. We do not knowingly sell or share the personal information of anyone under 16. We do not disclose personal information to third parties for those third parties’ direct marketing purposes.

7. Cookies, analytics and browser signals

The Website uses cookies and similar tools to operate the site, remember choices, and measure visits and form submissions, including tools provided by HubSpot. You can block or delete cookies in your browser settings; some parts of the Website may then not work. We treat a Global Privacy Control signal from your browser as a request to opt out of the sale or sharing of personal information, which we do not do in any case. Because there is no common standard for “Do Not Track” signals, we do not respond to them differently.

8. Text or SMS messages

If you have opted in to receiving text or SMS messages related to your use of the Services, message frequency varies and message and data rates may apply. You can opt out at any time by replying “STOP” to any ONRAMP text message, and you can reply “HELP” for help. After you send “STOP” to us, we will send you one final SMS message to confirm that you have been unsubscribed, after which you will no longer receive SMS messages from us. Text messaging originator opt-in data and consent will not be shared, sold, rented or otherwise disclosed by us for marketing purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. See our SMS Terms for program details.

9. How long we keep it

We keep personal information for as long as we need it for the purposes in this Privacy Policy, and then delete or de-identify it. To decide how long, we consider how long an account is open, the period during which a purchase can be disputed, our obligations to Carriers, merchants and financial partners, tax, accounting and other legal record-keeping requirements, fraud prevention, and whether we need it to resolve a dispute or enforce our agreements. For example:

• Account and profile information is kept while the account is open and for a reasonable period afterwards.
• Transaction, payment and financial records are kept for as long as tax, accounting and other laws, payment network rules and our agreements with Carriers and merchants require, and while a purchase can still be disputed.
• Identity verification and application records are kept for as long as the law requires after an account closes.
• Website analytics data is kept for as long as it remains useful to understand how the Website is used.
• Records of your communication choices, such as text message opt-outs, are kept so we can honor them.
• Job applicant information is kept for the period employment laws require.

10. How we protect it

We use administrative, technical and physical safeguards designed to protect personal information, including encryption, access controls and monitoring, and we require our service providers to protect it. No system is completely secure. Please keep your password, PIN and device secure, and tell us right away if you think your account has been used without permission.

11. Your privacy rights

Wherever you live in the United States, you can ask us to:

• Access the personal information we hold about you, including the categories and specific pieces of information, its sources, our purposes, and the categories of recipients, and receive a copy in a portable format;
• Correct personal information that is inaccurate;
• Get a list of the specific third parties to which we have disclosed your personal information, where your state’s law provides that right;
• Delete personal information we collected from or about you, subject to the exceptions the law allows, such as completing transactions, preventing fraud and meeting legal obligations; and
• Opt out of the sale or sharing of personal information, targeted advertising, and profiling that produces legal or similarly significant effects. We do not engage in these activities, but you can still submit a request; and
• Limit our use of sensitive personal information to what is needed to provide the Services you request.

We will not discriminate against you for exercising these rights.

How to make a request. Email [email protected], call us toll free at (888) 835-4498, or, to delete your account, follow the steps at onrampfleet.com/delete-account. We will ask for information to confirm your identity, such as the email address or phone number on your account and details of recent activity, and will use it only for that purpose. If information was collected for a Carrier, we may also confirm the request with the Carrier.

Authorized agents. You may use an authorized agent to make a request. We may ask the agent for your signed permission, and ask you to confirm your identity with us directly, unless the agent holds a valid power of attorney.

Timing. We confirm receipt of a request within 10 business days and respond within 45 days. If we need more time, we will tell you, and may take up to a further 45 days where the law allows.

Appeals. If we decline your request, you may appeal by replying to our decision or by emailing [email protected] with “Privacy Appeal” in the subject line. We will respond to an appeal within 45 days, or within the time your state’s law requires if shorter, and explain our decision. If you are not satisfied with the outcome, you may contact the attorney general of your state.

12. Rewards Program notice of financial incentive

The Rewards Program gives eligible drivers rewards, such as discounts or points, based on purchases made with the App. To take part, you provide identifiers, contact information, and information about your purchases, and you may choose to provide demographic information. You join by enrolling in the App or as program materials describe, and you can leave at any time by contacting us at [email protected], after which you stop earning rewards. We estimate that the value of the personal information used in the Rewards Program is equal to the value of the rewards we provide, based on what it costs us to provide them. You may exercise your privacy rights whether or not you take part.

13. Children

The Services are intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

14. Additional state disclosures

• California. In the past 12 months we collected the categories of personal information listed in Section 2, from the sources in Section 3, for the purposes in Section 4. We disclosed identifiers, account information, employment and vehicle information, transaction and commercial information, financial information, identity verification information, location information, internet activity, communications and inferences for business purposes to the recipients described in Section 5. California residents may also request information about disclosures for direct marketing; we make none.
• Nevada. We do not sell covered information as Nevada law defines it. Nevada residents may still submit an opt-out request to [email protected].
• Washington and other states with consumer health data laws. We do not collect consumer health data.

15. Links to other sites

The Services may link to websites and services we do not control. Those websites and services follow their operators’ privacy policies.

16. Changes to this Privacy Policy

We may update this Privacy Policy. The current version is always at onrampfleet.com/privacy-policy with its effective date. If we make a material change, we will tell you on the Website, in the App or by email before it takes effect.

17. Contact us