Privacy policy

Almost everyone who signs in to GPSAero does so through an account opened by their employer, or by the company that sold them the trackers. That company decides which vehicles are tracked, who may see them and how long the history is kept. It is responsible for that data; we hold and process it on its instructions.

If you are a driver or an employee and you want to know why your vehicle is tracked, or you want your details changed, ask your own company first — they control the account. If you cannot reach them, write to us at [email protected] and we will pass the request on.

• Account details: Your name, email address, username if you have one, mobile number, the language you chose, your role and what it allows you to see. Passwords are stored only as a one-way hash — we cannot read yours, and nobody here can tell you what it is.
• Vehicle and tracker data: The tracker serial or IMEI, and the positions it reports: latitude and longitude, speed, direction, time, ignition, and depending on the device things like fuel level, mileage, temperature or a door sensor. This is the service; without it there is nothing to show on the map.
• What people do in the system: Alerts raised, reports run, and a record of the actions that matter — stopping or resuming an engine, billing changes, and sign-ins — kept so a company can see who did what.
• From the mobile app: Your phone’s own location while the app is open, used to put you on the map and to record where a fuel entry was made. The app does not follow your phone in the background. It also holds a notification token so alerts can reach the phone, photographs you take for a fuel or inspection entry, and the phone model and system version.
• From this website: Pages visited, the site that sent you, how long you stayed, your browser, operating system and device type, your language, and your country and city as Cloudflare reports them. Your IP address is not stored — it is turned into a one-way hash used only to stop the same person being counted many times.
• What you send us: Demo requests, support messages and anything you attach to them.
• Payments: Invoices, amounts, currency and whether they were paid. Card and wallet details are typed on the payment provider’s own page — they never reach our servers.

• To run the service: show vehicles on a map, build history and reports, raise alerts and send notifications.
• To keep accounts secure and to investigate abuse.
• To bill for the service and to keep the records the law requires us to keep.
• To answer support requests and demo enquiries.
• To understand which pages of this website are useful. We do not build advertising profiles and we do not track you across other websites.

We use as few as the service allows, and none of them for advertising:

• Sign-in: Keeps you signed in. Without it you would have to type your password on every page.
• Language: Remembers the language you chose.
• Visits: Two cookies on this public website that tell a returning visitor from a new one, and one visit from the next. They hold a random number and nothing about you.

We do not sell data and we do not share it for advertising. It reaches other companies only where the service cannot work otherwise:

• The company that owns the account: and anyone they have given a login with the rights to see it.
• Apple and Google: to deliver a notification to your phone, and Google if you choose to sign in with a Google account.
• Payment providers: to take a payment you have started.
• Email and SMS providers: to deliver a message we send on the account’s behalf.
• Our own servers: in Germany and Bangladesh, which receive what the trackers send.

We will also hand over data where a court or the law requires it.

• Position history: three months for each vehicle by default. A package may include longer, and a company can ask for longer; older history is deleted automatically every night.
• The tracker gateway: keeps only two days. It is a relay, not a record.
• Website visit statistics: 400 days, then deleted automatically.
• Account details: for as long as the account exists. What happens when it closes is set out on the account deletion page.

Invoices, and the record of engine stops and billing changes, are kept longer where accounting and safety rules require it.

• Everything between your browser or phone and our servers travels encrypted.
• Passwords are stored as a one-way hash, never in a readable form, and are never written into logs or emails.
• What a login can see is set by its role. A company only ever sees its own vehicles and its own people.
• Engine stop and billing changes are written to a record that names who did it and when.

Write to [email protected] and tell us what you want. You can ask for:

• a copy of what we hold about you;
• a correction, if something is wrong;
• deletion, which is described on the account deletion page;
• an explanation of why your company tracks a vehicle you drive.

We answer within 30 days. If what you are asking about belongs to your employer’s account, we will tell you so and pass the request to them, because it is theirs to decide.

GPSAero is a tool for businesses. It is not meant for children, and we do not knowingly open accounts for anyone under 18.

If we change it we will change the date at the top of this page. If the change matters to you, we will say so in the app or by email rather than leaving you to notice.

Questions about this policy, or about anything we hold: [email protected].