Privacy Policy

1 Information We Collect

We collect information you provide directly and information generated by your use of the platform.

2 How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the SmartTrack GPS platform
• Display real-time vehicle and asset locations on your dashboard
• Generate trip reports, analytics, and driver behaviour insights
• Send alerts for speeding, geofence violations, accidents, and low battery
• Authenticate your account and maintain security
• Process subscription payments and issue invoices
• Send service notifications, product updates, and support responses
• Comply with legal obligations and resolve disputes
• Improve and develop new features through aggregate analytics

We do not sell your personal data or use location data for advertising purposes.

3 Location Data & GPS Tracking

Location data is the core function of our service. We collect:

• Real-time GPS coordinates from hardware trackers and the mobile app
• Movement history — complete trip routes stored for up to 12 months
• Accelerometer data — used only for crash/hard-braking detection, not continuously stored
• Cell tower / Wi-Fi location — used as GPS fallback when satellite signal is unavailable

Location data is transmitted over HTTPS/TLS and stored encrypted in our database. Access is restricted to authorized users within your account.

Mobile App Location: When you use the SmartTrack mobile app with location enabled, your phone's GPS position is uploaded to our servers every 10 seconds. You can stop this at any time by disabling location permission in your phone's Settings or logging out of the app.

4 Data Sharing & Third Parties

We share your data only in the following circumstances:

• Within your organization: Admins, fleet managers, and authorized users in your SmartTrack account can access location and trip data for devices assigned to them.
• Service providers: We use Google Maps Platform for map rendering and geocoding. Location coordinates are shared with Google solely for this purpose, subject to Google's Privacy Policy.
• MQTT broker: GPS device data is transmitted through our self-hosted Mosquitto MQTT broker — no third-party broker is used.
• Legal requirements: We may disclose data if required by law, court order, or to protect the rights and safety of our users.
• Business transfer: If Rostan Technologies is acquired or merged, your data may be transferred as part of that transaction with equivalent privacy protections.

We do not share your personal information or location data with advertisers, data brokers, or any third party for commercial purposes.

5 Data Retention

You may request deletion of your account and associated data at any time by contacting us at privacy@rstglobal.in.

6 Data Security

We implement industry-standard security measures including:

• All data in transit encrypted with TLS 1.2 / 1.3
• Passwords hashed with BCrypt — we never store plaintext passwords
• Authentication via JWT tokens with short expiry and refresh rotation
• Database access restricted to application services — no public database exposure
• MQTT broker requires authentication — anonymous connections rejected
• Regular security updates applied to all system components

While we use commercially reasonable security practices, no system is 100% secure. In the event of a data breach affecting your rights, we will notify you as required by applicable law.

7 Your Rights & Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update inaccurate or incomplete data
• Deletion: Request deletion of your account and data
• Portability: Export your trip and location data in CSV format via the dashboard
• Opt-out of tracking: Disable location permission on your mobile device at any time
• Notification preferences: Manage email and push notification settings in your account

To exercise any of these rights, email us at privacy@rstglobal.in. We will respond within 30 days.

8 Children's Privacy

SmartTrack GPS is a business platform intended for users aged 18 and above. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us immediately at privacy@rstglobal.in and we will delete it promptly.

9 Cookies & Analytics

Our web dashboard uses:

• Essential cookies — required for authentication (JWT token storage in memory, not persistent cookies)
• Local storage — used to store user preferences and session state

We do not use third-party analytics services (Google Analytics, Facebook Pixel, etc.) on our platform. Usage analytics are generated from our own server logs only.

10 Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Send an email notification to registered users for significant changes
• Display an in-app banner on the dashboard

Continued use of SmartTrack GPS after the effective date constitutes acceptance of the updated policy.

11 Contact Us

For any privacy questions, data requests, or concerns: