Privacy Policy
Last updated: 19 August 2026
TeamWheels ("TeamWheels", “we”, “us”) provides an employee carpooling and commute management app delivered inside Microsoft Teams and Microsoft 365 Copilot. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over it.
It covers two different situations:
- This website (
teamwheelsapp.com) — marketing pages, blog, demo requests and contact forms. Here TeamWheels acts as the data controller. - The TeamWheels app — the carpooling service your organization installs in Microsoft Teams. Here your employer is the data controller and TeamWheels acts as a data processor on their instructions, under a data processing agreement. If you are an employee using the app, your employer’s own privacy notice applies first; contact them to exercise your rights. Section 3 describes the app in full.
1. Who we are
TeamWheels operates this website. The TeamWheels app for Microsoft Teams and Microsoft 365 Copilot is published by Hmz-digital.
- Website and commercial enquiries: contact@teamwheels.fr
- Privacy questions and requests about the app: hamza@teamwheelsapp.com
2. Data we collect
2.1 When you use this website
| Data | Where it comes from | Why we collect it |
|---|---|---|
| Name, business email, company, job title, phone number, message | Demo request and contact forms you fill in | To answer your request, schedule a demo, and follow up commercially |
| IP address, approximate country/region | Automatic, via IP geolocation | To show prices and content relevant to your region, and to protect the site against abuse |
| Pages viewed, referrer, device and browser type, session behaviour | Automatic, via analytics cookies and similar technologies | To measure audience, improve the site, and measure our advertising |
| Chat messages | Our live-chat widget, if you start a conversation | To answer your questions |
We do not ask for special categories of data (health, religion, political opinions, etc.) and ask you not to include them in free-text fields.
2.2 When your organization installs the TeamWheels app
Data processed through the app is processed on your employer’s behalf, under a data processing agreement. Section 3 sets out exactly what the app collects, where it is stored, who processes it, and how it is erased.
3. The TeamWheels app for Microsoft Teams and Microsoft 365 Copilot
This section describes how the TeamWheels application (“the app”), published by Hmz-digital, processes personal data when your organization installs it from the Microsoft marketplace.
What the app collects. When you use TeamWheels, we process: your display name and Microsoft Teams user identifiers (including your Microsoft Entra object ID and tenant ID); the trip details you enter (departure and destination places, dates, times, seats); your carpool interactions (join requests, acceptances, cancellations); conversation references needed to send you notifications; your language preference; and any feedback you submit on the app’s replies (stored with a hashed user identifier). The app does not access your calendar, files, email, or contacts.
Where it is stored. All app data is stored in Microsoft Azure (Azure Table Storage) in the France Central region, in the European Union, encrypted at rest and in transit.
AI processing. TeamWheels is an AI-assisted agent. To understand your messages, the conversation context is processed by Azure OpenAI Service within our Azure subscription. Your messages are not used to train AI models. AI-generated replies are labeled as such in the app, and no trip is ever created, changed, or cancelled without your explicit confirmation via a button.
Processors. We rely solely on Microsoft Azure services (hosting, storage, Azure OpenAI, Azure Maps for place lookups). We do not sell personal data, use it for advertising, or share it with any other third party.
Retention and erasure. App data is retained while the app remains installed in your organization. You or your administrator can request deletion of all data related to a user or tenant at any time by contacting hamza@teamwheelsapp.com ; erasure is performed within 30 days. Data breaches are notified in accordance with GDPR Article 33 (within 72 hours of confirmation).
Contact. For any privacy question or request regarding the TeamWheels app: hamza@teamwheelsapp.com .
4. Why we use your data, and on what legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Replying to demo requests and contact messages | Steps taken at your request prior to a contract (Art. 6(1)(b)) |
| Sending commercial information about TeamWheels to business contacts | Our legitimate interest in promoting our B2B services (Art. 6(1)(f)), or your consent where required |
| Providing, maintaining, and securing the app | Performance of the contract with your employer (Art. 6(1)(b)), TeamWheels acting as processor |
| Analytics, advertising measurement, and non-essential cookies | Your consent (Art. 6(1)(a)) |
| Preventing fraud, abuse, and security incidents | Our legitimate interest in protecting our service (Art. 6(1)(f)) |
| Meeting accounting, tax, and legal obligations | Legal obligation (Art. 6(1)(c)) |
5. Cookies and similar technologies
This section concerns this website only. The app does not use advertising or analytics cookies.
Strictly necessary cookies keep the site working (language preference, consent choice, security). They are always active.
Measurement and advertising technologies are loaded only in line with your consent choice, and include:
- Google Analytics 4 and Google Tag Manager — audience measurement.
- Google Ads — conversion measurement for our campaigns.
- Microsoft Advertising (UET) and the LinkedIn Insight Tag — advertising measurement and audiences. Advertising storage is set to denied by default and upgraded only after you accept.
- Microsoft Clarity — anonymised session statistics used to improve page usability.
- Crisp — the live-chat widget.
- IP geolocation (ipapi.co) — approximate country detection to localise content.
You can withdraw consent at any time by clearing cookies for this site in your browser and making a new choice, and you can block cookies entirely in your browser settings. Blocking non-essential cookies does not affect access to the site.
6. Who we share data with
We do not sell personal data. We share it only with:
- Microsoft Azure, the sole set of services processing app data (hosting, Azure Table Storage, Azure OpenAI, Azure Maps), as described in section 3.
- Website service providers acting on our instructions — form handling (Web3Forms), email delivery, the analytics and advertising providers listed above, and our CRM.
- Your employer, for app data, as the controller of that data.
- Professional advisers, auditors, or authorities, where we are legally required to do so.
7. International transfers
App data is stored in the European Union (Microsoft Azure, France Central). Some of the website providers listed above (analytics and advertising in particular) may process data outside the EU/EEA. Where that happens, transfers are covered by an adequacy decision or by the European Commission’s Standard Contractual Clauses together with additional safeguards.
8. How long we keep data
| Data | Retention |
|---|---|
| App data (trips, interactions, identifiers) | While the app remains installed in your organization; erased within 30 days of a deletion request from you or your administrator |
| Demo and contact requests | 3 years from our last contact with you |
| Prospect and customer relationship records | Duration of the relationship, then 3 years |
| Analytics data | Up to 14 months |
| Accounting records | 10 years, as legally required |
| Security and technical logs | 12 months |
9. Security
Measures include authentication through Microsoft Entra ID (Azure AD) — so no separate password is created for TeamWheels — encryption of app data at rest and in transit, storage inside a European Azure region, strict access control, and data minimisation: the app requests no access to your calendar, files, email, or contacts. Data breaches are notified in accordance with GDPR Article 33, within 72 hours of confirmation.
10. Your rights
Under the GDPR you have the right to access your data, correct it, erase it, restrict or object to its processing, obtain it in a portable format, withdraw consent at any time, and set instructions for the fate of your data after death.
To exercise these rights for data we control, email contact@teamwheels.fr for the website, or hamza@teamwheelsapp.com for the app. We respond within one month. For app data processed on behalf of your employer, you may also contact your employer directly; if you contact us, we will forward the request to them.
If you believe your data protection rights have not been respected, you may lodge a complaint with your national supervisory authority — in France, the CNIL (cnil.fr ).
11. Children
TeamWheels is a business service intended for employees of our corporate customers. It is not directed at children, and we do not knowingly collect data from anyone under 16.
12. Changes to this policy
We may update this policy to reflect changes in our service or in the law. The date at the top of this page shows the latest revision. Material changes will be notified to customers through the app or by email.
13. Contact
Questions, requests, or complaints about this policy: contact@teamwheels.fr (website) or hamza@teamwheelsapp.com (TeamWheels app).