DASWeb (“we”, “us”, “our”) provides a tool that pulls your bus duties from the DAS portal and keeps them in sync with your personal calendar. This Privacy Policy explains what personal data we collect, why we collect it, and how we look after it.
We only collect what we need to run the service, and we never sell or rent your data to anyone.
Who we are
DASWeb is an independent, unofficial application. It is not affiliated with, endorsed by, or connected to Trapeze Group or any bus operator. For any privacy question you can contact us at [email protected].
Information we collect
- Account details — your first and last name and email address, used to create and secure your account.
- Account password — stored only as a one-way hash; we can never see it.
- DAS credentials — your employee ID and DAS password. Your DAS password is encrypted at rest and is only ever used to sign in to DAS on your behalf to read your duties.
- Duty data — the duties, times, routes, locations, hours and rest/holiday markers we pull from DAS for you.
- Technical data — basic information such as your IP address and browser type, recorded for security and to keep the service running.
- Timing records — while you are driving a bus we can track, we record how it is running against its timetable: the stop, the time it was due, the time it was seen there, and whether that is early, on time or late. This comes from the same live feed as the tracking on your duty page, not from DAS and not from your operator.
- Activity records — a log of when you were last active and of the pages you asked for, along with the time, your IP address and browser. This records which page, never what was on it or what you typed into it, and never your passwords or DAS credentials. Sensitive values in a web address, such as a verification code or a signed link, are removed before anything is written down.
- Subscription data — if you take out DASWeb+, we store your Stripe customer and subscription identifiers, the status and dates of your subscription (including any trial), and the card brand and last four digits Stripe reports back to us. We never receive or store your full card number, expiry date or security code.
How we use your information
- To sign in to DAS on your behalf and fetch your upcoming duties.
- To keep an activity log, so that we can investigate a problem with your account, look into a suspicious sign-in, and support you when you get in touch.
- To show you your own timing, and to help us support you when something looks wrong with it.
- To display your duties and provide your subscribable calendar feed.
- To notify you when one of your duties changes.
- To keep the service secure, prevent abuse, and fix problems.
- To take your subscription payment, tell you when a payment fails, and know whether your account still has access.
The legal bases we rely on are explained in our GDPR & Your Data page.
How we store and protect your data
- Your DAS password is encrypted at rest; your account password is hashed.
- Your calendar feed uses a long, unguessable web address.
- All traffic is served over HTTPS, and access to our systems is restricted.
Your calendar feed
Your calendar link is private to you. Because calendar apps can’t log in, anyone who has the exact link could view your duties — so keep it to yourself. You can reset or remove it at any time from your account.
Payments
DASWeb+ payments are taken by Stripe, a payment processor. When you subscribe, you enter your card details on Stripe's own checkout pages — those details go straight to Stripe and never pass through DASWeb's systems.
We send Stripe your email address and name so it can identify the payment and send you a receipt. Stripe sends us back only what we need to know whether your subscription is active: its status, its dates, and the card brand and last four digits. Stripe handles your payment data as its own controller for some purposes, and its privacy policy explains what it does with it.
Sharing your data
We do not sell or share your personal data. We use a small number of trusted service providers purely to operate the service, and they may only process your data on our instructions:
- Our hosting and database provider — to run the service and store your data.
- Stripe — to take subscription payments, as described above.
We also connect to the DAS portal itself in order to read your duties on your behalf.
Who can see your records
Your activity and timing records are visible to DASWeb administrators — the people who run this service — so that they can answer a support question or look into something that has gone wrong with your account.
They are never shared with your employer, your garage or anyone at your operator, and they are not passed to anybody outside DASWeb. DASWeb is independent of your operator, and nothing recorded here is used for, or made available for, any assessment of your work.
How long we keep your data
We keep your account and credentials for as long as your account is active. If you clear your DAS credentials, we stop syncing and remove them. If you delete your account, we delete your personal data. We only store a rolling window of upcoming duties, not your full history.
Activity records are deleted automatically after 90 days, whether or not your account is still open.
Billing records are an exception. Where we have taken a payment from you, we and Stripe must keep the record of it for six years to meet UK tax and accounting law. That means a record of your payments can outlive your account, even after the rest of your personal data has been deleted. It is kept for that purpose alone.
Your rights
You can access, correct, export or delete your data, and object to or restrict certain processing. See GDPR & Your Data for the full list and how to exercise your rights.
Cookies
We use only essential cookies needed to keep you signed in and to protect against cross-site request forgery. We do not use advertising or third-party tracking cookies.
Children
DASWeb is intended for working adults and is not directed at children under 16.
Changes to this policy
We may update this policy from time to time. When we do, we’ll change the “Last updated” date above and, where appropriate, let you know.
Contact
Questions about your privacy? Email us at [email protected].