Saga Privacy Notice

At a glance

Most of your data in Saga is handled by Einride on behalf of your employer or the company you work for. That company decides why and how, and is your first contact.
For a few purposes Einride decides for itself: product analysis, investigating errors, defending against claims and sending reports to external recipients.
Your Company’s data stays in Saga while its account exists and is deleted when the Company asks or the contract ends.
If you drive for Einride itself, own or supplied by a staffing agency, Einride decides how your transport data is used (see the last group in the table); your agency stays responsible for your employment and pay.
Contact: your employer or principal for most questions, dataprotection@einride.tech for Einride’s own purposes.

1. Who is responsible for your personal data

When Einride acts as data processor: the data controller is your employer or, if you work as a sole proprietor, your principal (the “Company”). Einride processes your data on the Company’s behalf, under the Saga terms and data processing agreement. Please ask the Company if you have questions about this processing; we help the Company to answer you.

When Einride acts as data controller: for the purposes marked in the table, the Einride company that provides Saga to your Company is the controller. Einride AB, reg. no. 559074-8926, is the main controller; the contract with your Company names the local Einride company.

2. What we collect and where it comes from

Name and contact details: name, phone number, e-mail address, employer.
Login and device information: user ID, password (stored securely), IP address, device ID, browser settings, operating system.
How you use Saga: actions in the platform, errors, communication with support.
If you are a driver or work with a transport: driver name and ID, vehicle ID, the location of the vehicle, and transport planning data such as driving schedule, availability windows, breaks, driving and rest times, loading and unloading time.

We receive the data from you, from your Company, from the vehicle and from your use of Saga. You need to give the data required to create an account; without it you cannot use Saga.

3. Why we use your data, on what basis, and for how long

The table lists every purpose. Where we rely on legitimate interest, the interest is stated in the basis column. For the first group, the Company decides the legal basis and the retention; the periods shown are Einride’s defaults.

Purpose

What we do

Legal basis

Personal data

Kept for

Separate controllers (recipients)

Where Einride is data processor (on behalf of your Company)

Provide the Saga platform to the customer

We provide the platform to your Company: transport planning, user accounts, support, notifications, and presenting and backing up the data.

Decided by your Company

User ID, Name, Email address, IP address, Employer, Device ID, Phone number, Driver name and ID, Location data (GPS position of the vehicle), Driving and rest times, Vehicle ID

As instructed by the customer (the Company) in the data processing agreement: the data is kept while the customer’s account exists and is deleted when the customer asks or the contract ends. Einride’s target default for transport data is 3 months after the transport

None

Where Einride is data controller (Einride’s own purposes)

Conduct analyses to develop our products and services

We analyse how Saga is used so that we can improve our products and services.

Legitimate interest: the processing is necessary for our legitimate interest in analysing platform data to develop and improve our products and services.

User ID, Email address, Name, Job title, IP address, Employer, Location data, Driver ID, Phone number, Communication, Transport planning data

Deleted 3 months after the account is deleted

None

Investigate platform errors and vulnerabilities

We investigate errors and security problems on the platform.

Legitimate interest: the processing is necessary for our legitimate interest in investigating platform errors and vulnerabilities to keep the Saga platform secure and reliable.

User ID, Email address, Name, Job title, IP address

Deleted 12 months after the error or incident was logged (or resolved, whichever is later)

None

Distribute reports to external recipients

We send the reports that a Saga user has scheduled to the recipients they choose.

Legitimate interest: the processing is necessary for our legitimate interest, and that of our Saga users, in enabling the user-initiated distribution of reports to external recipients.

Email address

Until the Saga user removes the recipient or the account is deleted, then 3 months

None

Defend against legal claims relating to the platform

We keep a restricted record of events that may be needed to establish or defend legal claims about the platform.

Legitimate interest: the processing is necessary for our legitimate interest in defending Einride against legal claims relating to the Saga platform.

User ID, Email address, Name, Job title, IP address

Deleted 10 years after the event giving rise to the potential claim, restricted access

None

Where Einride runs the transport itself (drivers who drive for Einride, own or supplied by a staffing agency)

Plan and run our own transports

Plan, dispatch and carry out the transports that Einride runs itself with its own drivers and drivers supplied by staffing agencies, and follow up the work.

Legitimate interest: to plan and run our transports efficiently and safely

Name, Phone number, Driver ID, Vehicle and trip data, Position data, Hours worked, Telematics data

Deleted 12 months after the job; hours records follow the road-transport rules

Staffing agency that employs the driver (hours worked)

Meet road-transport rules (driving and rest times, working time, licences)

Meet the legal duties of a transport operator for drivers: download and keep tachograph data, keep working-time records and check driving licences and professional qualifications.

Legal obligation: road-transport and working-time law

Name, Driver card number, Tachograph data (driving, rest, vehicle), Working hours, Driving licence and qualification details

Deleted 2 years after the recording (tachograph copies must be kept at least 12 months; working-time records 2 years)

Road-transport inspection authorities (e.g. Transportstyrelsen, Polisen, ILT)

If you drive for Einride through a staffing agency: your agency is your employer and is responsible for your employment, pay and personnel data. Einride is a separate controller for the transport and road-transport data in the last group of the table. We check your identity when you start and receive your name, contact details, licence details and hours from your agency.

If you receive a report from Saga and did not expect it, contact us at dataprotection@einride.tech and we remove you.

4. Who receives your data

Service providers that work on Einride’s behalf are not named in this notice. They provide cloud hosting, login and access management, e-mail and SMS notifications, customer support tools and integration of order files. The full list of sub-processors for the Company’s data is published at documents.einride.tech/en/subprocessors.html. Other Einride Group companies may also process the data to provide Saga.

Separate controllers: your Company and other users in your Company’s Saga organisation, who see your data as the Company has set it up; and authorities where the law requires.

5. Transfers outside the EU/EEA

Einride companies in the USA and the UAE may access the data to support the service. These transfers follow our intra-group data transfer agreement, which includes the EU Commission’s standard contractual clauses. Providers outside the EU/EEA are used only with standard contractual clauses or when they are certified under the EU–US Data Privacy Framework.

6. Automated decisions

We do not use automated decision-making, including profiling, that has legal or similarly significant effects on you.

7. Your rights

Access to your personal data, and a copy of it.
Correction of data that is wrong or incomplete.
Erasure, or restriction of our use, in the cases the law allows.
Objection to processing based on our legitimate interest. We then stop unless we have compelling reasons.
Data portability for data you gave us and that we process by contract or consent.
For data we handle on behalf of your Company, contact your Company first; we help it to answer.

If you think we handle your data wrongly, you can complain to the data protection authority in your country. In Sweden this is the Swedish Authority for Privacy Protection (IMY, imy.se).

8. Contact and changes

E-mail: dataprotection@einride.tech. Post: Einride AB, Stadsgården 6, Stockholm, Sweden. We may update this notice; the date of the latest version is at the end of this page.

Last updated: 16 October 2026

Platform