Introduction

Tracer Technologies Ltd. (hereinafter: "Tracer", "the Company", "we") respects your privacy and is committed to operating in accordance with the Privacy Protection Law, 5741-1981, the Privacy Protection Regulations (Information Security), 5777-2017, the law amendments that came into effect in August 2025, and, where applicable, European GDPR principles.

This policy applies to tracer.co.il website and telematics services (driver applications, GPS devices, API interfaces, and control panels) and constitutes an integral part of the customer agreement terms.

Registered Database (Website Only): Personal data you provide through tracer.co.il forms is stored in registered database #700072553 in the Ministry of Justice registry. Telematics data is stored and processed in a dedicated telematics cloud, as detailed below.

1. Key Definitions

Term	Definition
Personal Information	Any information relating to an identified or identifiable person (name, email, phone, assigned vehicle, etc.).
Telematics Data	Location data (GPS), speed, driving events, diagnostics (DTC), vehicle identifier (VIN), mileage, sensor data.
Raw Data	Original data as received from the device before processing or filtering.
Cookies	Small text files stored in the browser for operation, statistics, and marketing.

2. Types of Information We Collect

Category	Examples	Collection Source
Identification Details	Full name, email address, phone number	Website forms, app registration
Business Information	Company name, fleet size, role, inquiry nature	Lead forms / agreements
Telematics Data	Coordinates, speed, driving events, VIN, mileage	GPS device, driver app
Technical Information	IP address, browser type, operating system, Device ID	Cookies, SDK
Behavioral Information	Pages viewed, clicks, visit duration, remarketing audiences	Google Analytics, Meta Pixel, TikTok Pixel, Taboola, Outbrain

There is no legal obligation to provide personal information, but without certain information, some services may not be available.

3. Information Usage Purposes

Operation and Maintenance – Navigation, fleet management, route documentation, mileage calculations, and billing.
Safety and Compliance – Driving behavior reports, accident investigation, regulatory compliance.
Service and Support – Response to inquiries, troubleshooting, user experience improvement.
Development and Improvement – Analytics, A/B testing, machine learning.
Legitimate Marketing – Remarketing, upgrade offers, and complementary products (Opt-out available).
Legal Compliance – Record management, reporting to authorities, fraud and money laundering prevention.

4. Legal Basis for Processing

Contract Performance – Service operation for customers.
Legitimate Interest – Security, service improvement, customer retention.
Consent – Cookie placement, mobile permissions, marketing communications.
Legal Obligation – Log retention, data disclosure under court orders.

5. Cookies and Tracking Technologies

The website operates essential, statistical, and marketing cookies. A notification banner is displayed on first entry; continued browsing constitutes consent according to Section 13A of the Communications Law. Cookies can be blocked in browser settings; some services may be affected.

6. Information Sharing

Recipients	Processing Purpose	Protection Measures
Employer/Fleet Owner	Reports, billing	Customer obligated to inform drivers and act legally
Dedicated and Secure Telematics Cloud	Real-time GPS data storage and processing	Data owned by Tracer; infrastructure provider has limited maintenance access only (NDA, ISO 27001)
Analytics and Advertising Services	Statistics and marketing	Google Analytics, Meta Pixel, TikTok Pixel, Taboola, Outbrain - Cookie identifiers only
Insurance Companies/Partners	Risk assessment, value-added offers	Subject to consent/agreement
Authorized Authorities	Court orders, legal investigations	Minimal required information only

7. International Data Transfer

Telematics data is stored and processed on secure cloud servers in the European Economic Area (EEA) and the USA for processing, redundancy, and encrypted backup; accounting, billing, and CRM information is stored in secure facilities in Israel.

8. Information Security

Encryption in transit (TLS 1.2+) and at rest (AES-256).
WAF, anti-DDoS, and 24/7 monitoring.
Role-based access control (RBAC) with MFA.
Daily secure backups, DR recovery.
Semi-annual penetration testing and vulnerability reporting.
Telematics data is stored in a dedicated telematics cloud at Tier III in Europe and the USA with full encryption; maintenance access is limited to authorized infrastructure staff and Tracer engineers.

9. Data Retention

Data Type	Customer Availability	Server Storage
Raw GPS & Events	400 days	Deleted or disconnected from personal identity after 400 days, or upon account deletion, whichever comes first
Reports, summaries, invoices	As long as account is active	Deleted upon closure/deletion request
System and security logs	-	12-24 months
Leads and website forms	-	Up to 5 years or deletion request

10. Customer Liability

The customer commits to inform drivers, passengers, and any person in the vehicle about the existence and purpose of tracking. Illegal use will be considered a breach of agreement and the customer will compensate Tracer for any claim or damage.

11. Data Subject Rights

Right of access and copy receipt.
Right of correction of incorrect data.
Right of deletion / processing limitation (subject to law and billing needs).
Right to object to marketing at any time.

For inquiries: [email protected] - Response within 5 business days.

Privacy Policy – Tracer Website and Telematics Services