Privacy Policy

AahaGPS ("we", "our", or "us") operates a real-time GPS vehicle tracking and fleet management platform. This Privacy Policy explains what personal data and vehicle data we collect, how we use it, who we share it with, and the rights you have over your information.

By using our platform, website, or mobile applications, you agree to the practices described in this policy. If you do not agree, please discontinue use and contact us to request deletion of your data.

We collect the following categories of data:

Account & Contact Information - Name, email address, phone number, and company name provided during registration or contact form submissions. - Billing details (processed securely by our payment provider; we do not store full card numbers).

Vehicle & GPS Tracking Data - Real-time and historical GPS location coordinates of tracked vehicles. - Vehicle speed, heading, distance travelled, and route history. - Engine status, ignition on/off events, and odometer readings (where supported by hardware). - Fuel level readings (where a fuel sensor is installed). - Geofence entry and exit events. - Harsh braking, acceleration, and cornering events captured by telematics devices.

Driver Data - Driver names and contact details assigned to vehicles within the platform. - Driver behaviour scores derived from telematics data. - Trip logs associated with individual drivers.

Device & Usage Data - IP address, browser type, operating system, and device identifiers when you access our website or dashboard. - Pages visited, features used, and session duration (collected via analytics tools). - Cookies and similar tracking technologies (see Section 8).

Communications - Messages sent through our contact form, support tickets, and email correspondence.

We use the data we collect for the following purposes:

Service Delivery - Providing real-time vehicle tracking, route history, alerts, and fleet management features. - Sending automated alerts (geofence breaches, speeding, maintenance reminders) to authorised users. - Generating reports and analytics for fleet operators.

Account Management - Creating and managing user accounts and access permissions. - Processing subscription payments and sending invoices. - Providing customer support and responding to enquiries.

Safety & Security - Detecting and preventing unauthorised vehicle use or data access. - Maintaining the security and integrity of our platform.

Product Improvement - Analysing usage patterns to improve platform features and performance. - Conducting internal research and development.

Legal Compliance - Complying with applicable Indian laws and regulations, including the Information Technology Act, 2000 and its amendments. - Responding to lawful requests from government authorities or courts.

We do not use GPS tracking data for advertising purposes, and we do not sell your data to third parties.

We process your personal data on the following legal grounds:

• Contract performance: Processing necessary to deliver the services you have subscribed to.
• Legitimate interests: Improving our platform, preventing fraud, and maintaining security — where these interests are not overridden by your rights.
• Legal obligation: Where processing is required to comply with applicable law.
• Consent: For optional communications such as marketing emails, where we have obtained your explicit consent. You may withdraw consent at any time.

AahaGPS is a B2B fleet management platform. Our customers are businesses ("Fleet Operators") who deploy tracking devices in vehicles they own or operate.

Fleet Operators' Responsibilities Fleet Operators are responsible for: - Informing drivers and vehicle occupants that GPS tracking is in operation, as required by applicable law. - Obtaining any necessary consent from employees or contractors whose vehicles are tracked. - Complying with applicable employment and privacy laws regarding employee monitoring. - Ensuring tracking is used for legitimate fleet management purposes only.

Our Role AahaGPS acts as a data processor on behalf of Fleet Operators for vehicle and driver data. We process this data only on the instructions of the Fleet Operator and in accordance with our Data Processing Agreement.

Driver Rights If you are a driver whose vehicle is tracked through AahaGPS, please contact your employer (the Fleet Operator) to understand how your data is used. You may also contact us at [email protected] and we will direct your request to the appropriate Fleet Operator.

We do not sell, rent, or trade your personal data. We share data only in the following circumstances:

Service Providers We use trusted third-party providers to operate our platform, including: - Cloud hosting and infrastructure providers (data stored in India or within compliant jurisdictions). - Payment processors for subscription billing. - Email and SMS delivery services for alerts and notifications. - Analytics tools to understand platform usage.

All service providers are contractually bound to process data only on our instructions and to maintain appropriate security standards.

Legal Requirements We may disclose data if required by law, court order, or a lawful request from a government authority. We will notify you of such requests where legally permitted to do so.

Business Transfers In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. We will notify you before your data is subject to a different privacy policy.

With Your Consent We may share data for other purposes with your explicit consent.

We retain your data for as long as your account is active or as needed to provide services. Specific retention periods:

• Account data: Retained for the duration of your subscription plus 90 days after cancellation, to allow for account reactivation.
• GPS location history: Retained for 12 months by default. Enterprise plans may configure longer retention periods.
• Trip and route data: Retained for 12 months.
• Driver behaviour data: Retained for 12 months.
• Billing records: Retained for 7 years as required by Indian tax and accounting law.
• Support communications: Retained for 3 years.

After the applicable retention period, data is securely deleted or anonymised. You may request earlier deletion — see Section 9.

Our website uses cookies and similar technologies to:

• Keep you logged in to your dashboard (essential cookies).
• Remember your preferences and settings.
• Analyse how visitors use our website (analytics cookies).

Types of cookies we use: - Essential cookies: Required for the platform to function. Cannot be disabled. - Analytics cookies: Help us understand usage patterns. You may opt out via our cookie consent banner. - Preference cookies: Remember your settings and language preferences.

We do not use advertising or cross-site tracking cookies.

You can control cookies through your browser settings. Disabling essential cookies will affect platform functionality.

Subject to applicable law, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request.

If you are unsatisfied with our response, you have the right to lodge a complaint with the relevant data protection authority.

We implement industry-standard technical and organisational measures to protect your data, including:

• Encryption of data in transit (TLS 1.2+) and at rest.
• Role-based access controls limiting data access to authorised personnel.
• Regular security assessments and vulnerability testing.
• Secure data centres with physical access controls.
• Incident response procedures for data breaches.

In the event of a data breach that is likely to result in a risk to your rights, we will notify you and the relevant authorities as required by law.

No system is completely secure. If you believe your account has been compromised, contact us immediately at [email protected].

AahaGPS is a business-to-business platform intended for use by adults. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

AahaGPS is based in India and primarily processes data within India. If data is transferred to service providers in other countries, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions, to protect your data to the same standard as under Indian law.

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Notify active subscribers by email at least 14 days before the changes take effect.
• Display a notice on our website.

Your continued use of AahaGPS after the effective date of any changes constitutes acceptance of the updated policy.

For any privacy-related questions, requests, or complaints, please contact our Privacy Officer:

Email: [email protected] Website: https://aahagps.com/contact Response time: We aim to respond to all privacy requests within 30 days.