Privacy Policy

1. Introduction and Scope

BtrackTMS ("Btrack", "the Company", "we", "our", or "us") is committed to protecting the privacy of the individuals whose personal data we process. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have.

This policy covers both (i) our web-based Transportation Management System (TMS) platform and the btracktms.com website, and (ii) our mobile application for drivers (the "Driver App"), available on Google Play and the App Store. Where a section applies only to the Driver App, this is expressly indicated.

It applies to users in Mexico, the United States, and other jurisdictions where we operate, and complies with Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and its Regulations, as well as California’s CCPA/CPRA where applicable.

2. Data Controller and Roles

The Driver App is used by drivers on behalf of the transport company that employs or contracts them and that is a Btrack customer (the "Customer"). With respect to the driver’s operational and location data, the Customer acts as the data controller and Btrack acts as the data processor, processing data on behalf of and according to the Customer’s instructions.

With respect to account data, website operation, and platform security, Btrack acts as the data controller.

If you are a driver and wish to exercise rights regarding the processing carried out by your company, we will guide you and, where appropriate, route your request to the responsible Customer.

3. Information We Collect

Information you provide

• Account information: name, email address, phone number, company, job title or operational role.
• Driver profile: operator identifier assigned by the Customer and, where the Customer records it, data related to the operation (unit, route, shift).
• Communications: messages, support requests, and reports (for example, emergency or SOS alerts) you send through the Service.

Information collected automatically by the Driver App

• Precise (GPS) location, including in the background: device coordinates, speed, heading, and timestamp, collected while a trip or shift is active, even when the app is closed or running in the background, to enable transport tracking.
• Operational telemetry: trip events, stops, geofences, and trip status.
• Camera: used to scan QR codes (trip and boarding validation). The camera is activated only when you open the scanner; we do not capture or store photos or video unless you expressly attach evidence.
• Device information: model, operating system and version, device identifiers, and push notification token.
• Diagnostic data: technical logs and crash reports, to maintain app stability and security.

Information collected on the website

• Usage data: pages visited, features used, and interactions.
• Technical data: IP address, browser type, operating system, and approximate location derived from IP.
• Cookies: as described in our Cookie Policy.

4. Mobile Device Permissions

The Driver App requests the following permissions. You may grant or revoke them at any time from your device settings; revoking a permission may limit features of the Service.

5. Prominent Disclosure: Background Location

6. How We Use Your Information

• Operate real-time trip tracking and show the unit’s position to the control center and the Customer.
• Calculate routes, estimated times of arrival (ETA), geofences, stops, and operational compliance.
• Support road and operational safety, including emergency (SOS) alerts and incident monitoring.
• Validate trips and boardings via QR codes.
• Send operational notifications related to your trips.
• Provide support, prevent fraud and abuse, and protect platform security.
• Comply with legal and regulatory obligations applicable to motor transport.

7. Legal Basis and Consent

We process driver data based on the operational relationship with the Customer and, where the law requires it (as with background location), based on your consent, which you grant by accepting the device permissions. You may withdraw your consent at any time by disabling the relevant permission.

8. How We Share Your Information

We do not sell your personal data or use it for advertising. We share information only in the following cases:

• The Customer (your transport company): location, telemetry, and trip activity are made available to the Customer operating the Service, for monitoring and operational purposes.
• Service providers (processors): cloud infrastructure (Amazon Web Services), maps and routing (TomTom), unit telematics and GPS (the Customer’s tracking provider, e.g. Wialon or Techsa GPS), in-vehicle safety cameras (Streamax) where the Customer uses them, and SMS and email delivery (Amazon SNS and SES), solely to provide the Service.
• Legal requirements: when required by law, a competent authority, or legal process.
• Corporate transfers: in connection with a merger, acquisition, or sale of assets, with applicable safeguards.

9. Data Retention

• Account data is retained while the account is active.
• Location and telemetry data is retained according to the Customer’s configuration and operational needs, and the legal retention periods applicable to motor transport.
• Upon termination of the relationship, data is deleted or anonymized within a reasonable period, except where we must retain it by legal obligation.

10. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (TLS 1.2+) and at rest (AES-256).
• Role-based access controls.
• AWS enterprise-grade infrastructure with SOC 2 compliance.
• Multi-tenant isolation: each company’s data is segmented.
• Automated backups and disaster recovery.
• Audit logging of system actions.

11. Your Rights (ARCO / CCPA)

Under Mexico’s LFPDPPP, you have the following rights over your personal data:

• Access: request a copy of the personal data we process.
• Rectification: request correction of inaccurate or incomplete data.
• Cancellation: request deletion of your data where applicable.
• Objection: object to processing for specific purposes.
• Portability: receive your data in a structured, machine-readable format.
• Withdrawal of consent: withdraw consent at any time.

If you are a California resident, the CCPA/CPRA grants you the right to know, delete, and correct your personal data, and not to be discriminated against for exercising those rights. We do not sell personal data.

To exercise these rights, write to support@btracktms.com with your full name, the right you wish to exercise, and a copy of official identification. We will respond within applicable legal timeframes (20 business days under the LFPDPPP). If you are a driver, we may route your request to the responsible Customer.

12. International Data Transfers

As a cross-border platform serving Mexico and the United States, your data may be processed in either country. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable laws, including the LFPDPPP and its Regulations.

13. Children’s Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

14. Cookies and Tracking Technologies

Our website uses cookies and similar technologies. The Driver App does not use advertising cookies or third-party tracking. For detailed information, please refer to our Cookie Policy.

15. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or through the Service. Your continued use of the Service after changes take effect constitutes acceptance.

16. Contact Us

For privacy-related questions or concerns:

Email: support@btracktms.com

Data Controller: BtrackTMS, Monterrey, Nuevo León, Mexico.