Privacy Policy

Last updated: .

This Privacy Policy explains how Trackio collects, uses, stores and protects personal information when you use the Trackio mobile application, web platform, public website and related services.

Trackio is an asset tracking and operational visibility platform used by businesses to monitor equipment, vehicles, tags, gateways, sites and service activity.

In this policy, ‘Trackio’, ‘we’, ‘us’ and ‘our’ mean Trackio (Pty) Ltd.

1. Contact details

If you have questions about this Privacy Policy or how information is handled, please contact us:

Trackio (Pty) Ltd

Registration number: 2025/029176/07

Website: https://www.trackiohub.com

Privacy contact: support@trackiohub.com

Unit 303, 1 Quendon Road, Cape Town, Western Cape, 8005, South Africa

2. Trackio’s privacy roles

Where Trackio processes personal information on a customer’s behalf and instructions, the customer is the Responsible Party and Trackio is the Operator under South Africa’s Protection of Personal Information Act (POPIA). The customer is responsible for the lawful basis for that processing, required notices and data subject requests.

Trackio acts as the Responsible Party for personal information it handles for its own business purposes, such as business contacts, billing and account administration. The role depends on the purpose of the processing.

3. Information we collect

Depending on how you or your organisation uses Trackio, we may collect the following information.

Account and user information

This information helps us create and manage accounts, control platform access and provide support. It may include:

  • Name, business email address, phone number, organisation, role, and permissions
  • Account, login, and authentication information
  • Support communications

Device and app information

This helps us operate, secure, troubleshoot and improve the app. It may include:

  • Device model, operating system, app version, and identifiers
  • IP address, browser or app information, logs, error reports, and usage activity

Location information

Where needed for app functionality, we may collect GPS location from your mobile device and location linked to installations, scans, service events, gateways, vehicles, BLE tags, sensors and tracked assets.

This supports asset tracking, site and service verification, installation records and operational reporting. The app requests location permission where required by the operating system.

Bluetooth and nearby device information

The app may use Bluetooth or Bluetooth Low Energy (BLE) scanning to detect authorised tags, sensors, beacons, gateways and tracking devices. This may include tag identifiers, signal strength, detection times, associated asset or device records and location where permission has been granted.

This helps link tags to assets, verify installations, detect nearby assets and support tracking workflows.

Camera and photo information

The app may request camera or photo library access so users can upload asset identification, installation, proof of service, site or equipment photos. Photos are used for the operational purpose for which they are uploaded.

Asset, site, and operational data

This provides tracking, reports, dashboards, alerts and operational visibility to authorised users. It may include:

  • Asset, gateway, tracking-device, and site identifiers and statuses
  • Installation, service, movement, telemetry, sensor, timestamp, and event records
  • Client and organisation records, reports, and exports

4. How we use information

We use information to:

  • Provide, administer, and support the Trackio platform and app
  • Authenticate users and manage access
  • Link devices, assets, vehicles, sites, and operational records
  • Provide tracking, reporting, alerts, installation, and service workflows
  • Maintain security, troubleshoot problems, and improve reliability
  • Manage billing, business communications, and legal or contractual obligations

Trackio does not use customer operational data, asset location data, or sensitive platform data for advertising. This is separate from the public website, where consented marketing technologies may be used as described below.

5. Website cookies and tracking technologies

The public website uses essential first-party cookies and similar functionality to operate securely and remember preferences, including your selected currency. We may also use IP-derived country information to select an appropriate currency display.

Where required, we ask for your permission before using optional Analytics technologies to understand aggregate website use and performance, or Marketing technologies to measure marketing activity and identify potential business interest.

Google Tag Manager is used as a consent-aware container for optional website tags. Its optional consent signals default to denied and are updated only when you choose the relevant category. Tags configured within that container may have their own consent requirements and are not described here unless they are deployed and verified.

With Marketing consent, Trackio may use Apollo's visitor and company-identification tracker and partner referral and UTM attribution. These technologies are not loaded or recorded for marketing attribution when Marketing consent is not given.

The Arcade interactive product tour is third-party embedded product-tour content that may load when you open a page that includes it. It is not used for Trackio's marketing attribution.

You can accept, reject or change optional Analytics and Marketing technologies at any time through Cookie preferences on our Legal page, linked from the website footer. Customer operational data, asset location data and sensitive platform data are not used for this website tracking.

6. How we share information

We may share information where necessary to provide and support Trackio.

Your organisation

Authorised users within your organisation may access the records relevant to their role and permissions.

Service providers

We use service providers for infrastructure, hosting, databases, communications, monitoring, backup, website services, and support. They receive information only where needed for the relevant service.

See our Subprocessors page for providers, their roles and processing locations.

Legal and business purposes

We may disclose information where required or permitted by law, legal process, or a competent authority, or in connection with a merger, acquisition, restructuring, or sale of assets subject to appropriate safeguards.

We do not sell customer operational data.

7. Security

We use reasonable technical and organisational measures to protect information against unauthorised access, loss, misuse, alteration, and disclosure.

Our measures include access controls, protection of data in transit and storage, logical separation of customer data, monitoring and logging, and backup and recovery arrangements. No transmission or storage method is completely secure.

8. Retention and deletion

We retain information for as long as needed for the service or business purpose and applicable legal and contractual requirements. Retention and deletion of customer-controlled information follow the applicable customer agreement and the customer’s instructions.

Under Trackio’s standard terms, customers have 30 days after cancellation to request an export of available data in our standard format. This is an export-request window, not a guaranteed deletion deadline. After that window, we may delete data from active systems in line with the applicable agreement.

Deletion from active systems may leave backup copies and records retained for justified legal, audit or billing purposes. These are subject to the applicable agreement and legal requirements.

You can request account or data deletion using the privacy contact below. For accounts managed by your organisation, we refer requests to or coordinate with that organisation, subject to appropriate identity and authority checks.

To make a privacy request, contact us at support@trackiohub.com.

9. International processing

Personal information may be processed outside South Africa through Trackio’s infrastructure and service providers.

Where required, Trackio applies appropriate contractual or legal safeguards to cross-border processing.

See our Subprocessors page for providers, their roles and processing locations.

10. Your privacy rights and PAIA

Subject to applicable law, you may ask to access or receive a copy of your personal information, correct inaccuracies, request deletion, object to or restrict certain processing, or withdraw consent where processing is based on consent.

We may need to verify your identity and authority before acting on a request. Requests for access, correction or deletion of customer-controlled information are referred to or coordinated with the relevant customer, which is responsible for handling them as the Responsible Party. Trackio assists in line with the applicable agreement and customer instructions.

To make a privacy request, contact us at support@trackiohub.com.

For formal access-to-records information and PAIA requests, see our PAIA Manual.

You may also raise a complaint with the South African Information Regulator. Contact the Information Regulator.

11. App permissions

The Trackio app may request permissions depending on the features used.

Location

Used for asset tracking, site verification, installation records, scanning workflows, and operational event logging.

Bluetooth

Used to detect and interact with authorised Trackio BLE tags, sensors, beacons, and nearby devices.

Camera

Used to capture operational images, including installation, asset, and service-verification photos.

Notifications

Used for operational alerts, reminders, and important app notifications.

The app requests permissions where required by the device operating system. Some features may not work correctly if permissions are not granted.

12. Children

Trackio is intended for business and operational use and is not intended for use by children.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When a revised policy is published, we will update the ‘Last updated’ date at the top of this page. We will notify customers of material changes in line with the applicable customer agreement and law.