Privacy Policy

1. Who we are

Vechtron (“we”, “us”, “our”) is a fleet-intelligence service operated by Vechtron Ltd (UK) and its affiliates. This Privacy Policy explains what personal data we collect through vechtron.com, the Vechtron Fleet web app and the Vechtron Fleet Driver mobile app (collectively, the “Service”), why we collect it, and your rights over it.

If you have questions, contact us at privacy@vechtron.com.

2. Data we collect

Account data — name, email, phone number, password hash, organization membership, role.

Vehicle and telemetry data — vehicle registration, VIN, make/model/year, location (GPS), speed, heading, ignition state, engine diagnostics (CAN / OBD-II), driver identifiers (iButton), fuel level, maintenance history and inspection records. Sent from devices you install in vehicles that you own or operate.

Driver data — name, phone, email, licence number (if provided by the fleet admin), scorecards derived from telemetry.

Communications — support messages, in-app chat with our AI assistant, email reminders you opt in to.

Technical data — IP address, device identifiers, browser type, OS, usage events, timestamps, approximate location derived from IP, authentication tokens.

Payment data — handled by our payment processor (Stripe or regional equivalent). We store only the last four digits and expiry; we do not store full card numbers.

3. Why we collect it (legal basis)

We rely on the following lawful bases under the UK/EU GDPR and Nigeria’s NDPR 2019:

Contract — to deliver the Service you signed up for.
Legitimate interests — to secure the Service, prevent fraud, improve features, analyse aggregated usage.
Consent — for marketing emails, non-essential analytics, in-cab video (if enabled by your fleet).
Legal obligation — to retain invoices and audit records as required by UK and Nigerian law.

4. How we share your data

We do not sell personal data. We share it only with:

Sub-processors — hosting (Hetzner/AWS), email delivery (Google Workspace, Mailgun), SMS delivery (Termii), payments (Stripe), analytics (Plausible or similar), customer support (our own tooling).
Your organization administrator — fleet admins see driver and vehicle data for their organization.
Authorities — when required by law, court order, or to protect life.
Successors — in the event of a merger or acquisition, with notice.

5. International transfers

Primary data centres in Germany (EU). Data may be transferred to Nigeria for our local operations team under appropriate safeguards (SCCs, or NDPR adequacy where applicable). Request a copy at privacy@vechtron.com.

6. How long we keep data

Account data — while active; deleted within 30 days of deletion request.
Telemetry — 24 months default (longer if your org opts in); purged within 30 days of deletion.
Invoices and tax records — 7 years (UK/Nigerian tax law).
Security and audit logs — 12 months.

7. Your rights

Under UK/EU GDPR and NDPR you have the right to:

Access your personal data (privacy@vechtron.com or in-app export).
Correct inaccurate data.
Delete your data (see Account Deletion).
Restrict or object to processing.
Receive your data in a portable format.
Withdraw consent at any time.
Complain to a supervisory authority — UK: ICO (ico.org.uk); Nigeria: NDPC (ndpc.gov.ng).

8. Security

Encryption in transit (TLS 1.2+) and at rest. Access to production is role-restricted and audit-logged. OWASP and CIS baselines. Breach notification within 72 hours as required.

9. Cookies

See our Cookies Policy.

10. Children

The Service is not intended for anyone under 16. We do not knowingly collect data from children.

11. Changes

We may update this Policy. The date below reflects the latest change. Material changes announced in-app and by email where appropriate.

12. Contact

Data controller: Vechtron Ltd, United Kingdom.
Email: privacy@vechtron.com
See also Contact.
Last updated: October 2026.