1. Introduction
TrueTrace ("we," "our," "us") is committed to protecting the privacy of its users ("you," "your"). This privacy policy describes how we collect, use, retain, and protect your personal information when you use our website truetrace.one, our applications, and our GPS tracking devices (collectively, the "Services").
By using our Services, you agree to the practices described in this policy. If you do not agree with this policy, please do not use our Services.
2. Information We Collect
2.1 Information You Provide Directly
- Account information: first name, last name, email address, password (encrypted), phone number.
- Billing information: shipping address, billing address, payment information (processed by Moneris — we do not store your credit card data).
- Communications: messages sent through our contact form or by email.
2.2 Information Collected Automatically
- Geolocation data: GPS coordinates (latitude, longitude), speed, heading, altitude transmitted by your TrueTrace tracking devices.
- OBD2 diagnostic data: vehicle information (error codes, fuel consumption, engine RPM) when you use an OBD2 tracker.
- Browsing data: IP address, browser type, pages visited, visit duration, session identifiers.
- Device data: serial number, IMEI identifier, firmware version, battery status.
3. Use of Information
We use your personal information for the following purposes:
- Provide, maintain, and improve our real-time GPS tracking Services.
- Process your orders, manage your account, and provide technical support.
- Send configured alerts (speed, geofencing, low battery, SOS, movement).
- Retain trip history for the duration specified by your subscription plan (30 or 90 days).
- Generate reports and statistics for your dashboard.
- Send you communications related to your account and our Services.
- Detect, prevent, and resolve technical and security issues.
- Comply with our legal obligations.
4. Sharing of Information
We never sell your personal information or location data. We may share your information only in the following circumstances:
- Service providers: payment processors (Moneris), hosting (Canadian servers), delivery services — only to the extent necessary to provide our Services.
- Legal obligations: if required by law, a court order, or a legitimate government request.
- Protection of rights: to protect our rights, property, or the safety of our users.
- With your consent: in all other cases, only with your explicit consent.
5. Data Hosting and Security
- Canadian hosting: all your data is stored on servers located in Canada (Montreal and Toronto).
- Encryption: communications between your devices and our servers are encrypted using AES-256. Web connections are protected by TLS/SSL.
- Passwords: your passwords are hashed using one-way encryption algorithms and are never stored in plain text.
- Backups: automatic backups are performed every 6 hours with geographic redundancy.
- Restricted access: only authorized personnel have access to personal data, following the principle of least privilege.
6. Data Retention
- Account data: retained as long as your account is active. Deleted within 30 days of account closure upon request.
- Trip history: retained according to your subscription plan (30 or 90 days), then automatically deleted.
- Order data: retained for 7 years in accordance with Canadian tax requirements.
- Connection logs: retained for 12 months for security purposes.
7. Your Rights
In accordance with Canadian personal information protection laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec Law 25, you have the right to:
- Access your personal information that we hold.
- Rectify your personal information that is inaccurate or incomplete.
- Delete your personal information (subject to our legal obligations).
- Withdraw your consent to the processing of your data at any time.
- File a complaint with the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec.
To exercise your rights, contact us at info@truetrace.one.
8. Cookies
Our website uses cookies that are essential to the operation of the Services:
- Session cookies: keep your connection active during your visit.
- Cart cookies: retain the contents of your shopping cart.
- Security cookies: CSRF tokens to protect against cross-site request forgery attacks.
We do not use advertising cookies or third-party tracking cookies.
9. Minors
Our Services are not intended for persons under the age of 16. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately.
10. Changes to This Policy
We reserve the right to modify this privacy policy at any time. In the event of a significant change, we will notify you by email or by a visible notice on our website. The "last updated" date at the top of this page indicates the version currently in effect.
11. Contact Us
For any questions regarding this privacy policy or the processing of your personal data:
