A tracking platform is, by its nature, a record of where named vehicles were at what time. This policy says what we collect, why, how long we keep it and who can see it. It applies to the FMS platform, the mobile application, the devices and this website.
What we collect
- From devices: position, speed, heading, ignition state, sensor readings (fuel level, temperature, door state) and device health, every ten seconds while a vehicle is moving and less often while parked.
- From your account: the names, email addresses, phone numbers and roles of the people you add, and the vehicle and driver details you enter.
- From your use of the console and app: sign-ins, sign-outs, the changes you make, the commands you send, the reports you run and the files you export, each with a timestamp, the network address and the browser or device it came from. This record cannot be edited, by us or by you.
- From the papers you upload: vehicle registrations, insurance and inspection certificates, driving licences, permits and contracts, with their numbers and expiry dates; and fuel receipts, with the litres, cost, station and card.
- From the app itself: when a screen fails, a report of the error, the screen it happened on and the app build. No analytics, advertising or tracking software of any kind is included in the app or the console.
- From your phone or computer: its position only when you press "Where I am" on the map, only to centre the map, and it is not stored. The fleet is tracked by the devices in the vehicles, never by your phone.
- From this website: the contact form you submit. We set no analytics or advertising cookies.
Why
To provide the service you ordered: to show positions, raise alerts, produce reports and assist in recovery. To keep the service secure: to detect misuse of an account or a device. To meet the obligations placed on us by the Ministry of Transport and Communications and the laws of Qatar. We do not sell data and we do not use it for advertising.
Who can see it
- The people on your account, scoped to the branches and roles you assign them.
- Our operations desk and engineers, when supporting you, under a confidentiality obligation and with each access logged.
- Law-enforcement authorities in Qatar, on a lawful request, which we record and, where the law allows, tell you about.
- Any system you connect yourself: a webhook address you add receives your alerts, and a brand-API integration you enable exchanges your vehicles' positions with that manufacturer. You choose these and can remove them.
- Service providers, each of which sees only what its job needs: Amazon Web Services hosts the platform and the encrypted database in its United States (N. Virginia) region and delivers our email; MapTiler serves the map tiles, and so receives the network address of the console and the map areas it draws; Google Fonts supplies a fallback typeface. None of them may use the data for their own purposes.
- Nobody else. We run no analytics, advertising or social-media SDKs.
How long
Position and sensor data are kept for twenty-four months, then deleted automatically. The audit record is kept for twenty-four months, then deleted automatically. Documents, fuel receipts and maintenance records are kept until you delete them or close the account. Error reports from the app are kept in our logs for thirty days. Account details are kept for the life of the account and for twelve months after it closes, for invoicing and dispute purposes. You may ask us to delete a driver’s personal details sooner, and we will, subject to legal retention.
Deleting data
- You can delete a document, a fuel receipt, a webhook, a geofence or a custom report yourself, from the screen that lists it.
- You can close your own account from Settings; your sign-ins end everywhere at once and your profile is removed. The steps, and the way to do it by email without the app, are at /delete-account.
- An administrator can deactivate a user or a driver, archive a vehicle, and — as the company owner — close the whole account, which removes every record it holds after the twelve-month invoicing period.
- Anything the console cannot delete, write to privacy@qtrwheels.com from the address on the account and we will do it within thirty days.
Drivers
If you are an employer, you are responsible for telling your drivers that the vehicles are tracked and for having a lawful basis to do so. We provide a template notice on request.
Your rights
You can see the data held about a vehicle or a person in the console, export it, correct it, and ask for it to be deleted. Requests that the console cannot fulfil go to privacy@qtrwheels.com and are answered within thirty days.
Security
Data is encrypted in transit and at rest. Access is scoped by role and branch and enforced in the database, not only in the screen. Every sign-in and every command is logged. We test the platform against the OWASP guidance and fix what we find before we ship.
This policy changes when the service does. The date at the top is the date of the last change, and material changes are announced in the console.