سياسة الخصوصية

Rino Tracking provides a fleet management platform for businesses. When your organization uses Rino Tracking, your organization is the controller of the operational data it enters, and we act as a processor on its behalf. For account, billing, and marketing data we collect directly, we act as the controller.

If you have questions about this policy, contact us at [email protected].

Account and organization data: name, work email, phone, role, organization name, and authentication credentials.

Fleet operational data you enter: vehicles, drivers, devices, trips, GPS positions and telemetry, maintenance and inspection records, fuel entries, expenses, and compliance documents.

Documents and images you upload: files such as insurance certificates, registrations, technical inspections, and receipts, including any personal data they contain.

Usage and device data: log data, IP address, browser and device type, and product interactions used to operate and secure the service.

Billing data: plan, invoices, and offline payment records. We do not store full card numbers.

To provide and operate the platform and its modules (tracking, maintenance, fuel, expenses, compliance, reports, and more).

To send the operational notifications you configure (in-app, email, and push).

To secure the service, prevent abuse, troubleshoot, and maintain audit logs.

To process billing and manage subscriptions, and to provide support and improve the product.

Rino Tracking offers an optional AI feature, the Rinio Assistant ("Ask Rinio"), that answers natural-language questions about your fleet using read-only data from your organization.

How it works: your question and only the specific, organization-scoped data needed to answer it are sent to a third-party AI provider (by default Mistral; optionally OpenRouter), which returns an answer that is shown to you. Ask Rinio is read-only — it never creates, edits, or deletes your records.

Your privacy is protected:

• The AI models we use do not train on your data. We use AI providers under API terms that prohibit using your submitted content to train their models, and we do not permit your data to be used for model training.
• Your content is processed only to produce the answer to your question and is not used for advertising or sold to anyone.
• Ask Rinio only reads data your role is permitted to access, scoped to your organization.
• Free evaluation tiers of some providers may use submitted content to improve their services; we therefore use free tiers only for testing with non-sensitive sample data, and rely on no-training API/paid tiers for production use with real data.
• AI output can be inaccurate. Answers are informational only, and you remain responsible for verifying them before acting on them.
• The AI feature can be enabled or disabled per plan by your organization administrators.

If you require that your fleet data never leaves your own infrastructure, the platform supports a self-hosted AI backend; contact us to discuss this configuration.

Where data protection law (such as the GDPR) applies, we rely on: performance of a contract, legitimate interests, consent for certain communications, and legal obligation for tax and accounting records.

We do not sell your data. We share data only with service providers that help us run the platform, under contractual confidentiality and security obligations. These currently include:

• AI model providers (Mistral by default, and optionally OpenRouter) for the Ask Rinio analytics chat, under terms that prohibit using your content to train their models.
• Cloudflare R2 for storage of uploaded files and documents.
• Email and push delivery providers to send notifications you configure.
• Hosting and infrastructure providers to run and secure the platform.
• Map and GPS data providers to display vehicle locations.

We may also disclose data where required by law or to protect rights, safety, and the integrity of the service.

We retain operational data for as long as your organization account is active and as needed to provide the service. Uploaded files and analysis records are retained until deleted by your organization or in line with retention settings. Some records, such as invoices, are kept longer to meet legal obligations. When an account is closed, data is deleted or anonymized after a defined grace period.

We use encryption in transit, access controls, tenant isolation, signed URLs for private files, and audit logging. No system is perfectly secure, but we work to protect your data and to notify affected parties of incidents where required.

Some providers, such as the AI and email services, may process data outside your country. Where required, we rely on appropriate safeguards such as standard contractual clauses.

Depending on your location, you may have rights to access, correct, delete, export, or restrict the processing of your personal data, and to object to certain processing. For operational data held on behalf of your organization, please contact your organization administrator; we will assist them as the processor. To exercise rights over data we control, contact [email protected].

We use strictly necessary cookies for authentication and security, and limited cookies to remember preferences such as language. We do not use advertising cookies.

The platform is intended for business use and is not directed to children. We do not knowingly collect data from children.

We may update this policy from time to time. Material changes will be communicated through the platform or by email. The last updated date above reflects the latest revision.

Questions or requests: [email protected].