Privacy Policy

1. Introduction

Emitraq is a B2B SaaS platform providing AI-powered fleet telemetry, tamper-evident audit reports, and emissions reporting services. This policy applies to all information collected through our web application at emitraq.com and related services.

By using Emitraq, you agree to the collection and use of information in accordance with this policy. If you do not agree with our practices, please discontinue use of our services.

Emitraq processes personal data in accordance with applicable data protection law and its implementing regulations.

2. Information We Collect

Account Information

• Identity data: Name, email address, phone number, company name, and job role.
• Authentication data: Passwords (securely stored and salted), email verification tokens, and session identifiers.
• Billing data: Payment method details, subscription plan, and billing history (processed securely via Stripe).

Fleet & Telemetry Data

• Vehicle data: Vehicle identification, license plate numbers, fleet assignments, and fuel type.
• GPS location: Real-time and historical geographic coordinates from fleet vehicles.
• Telemetry data: Engine diagnostics, fuel consumption, speed, RPM, and odometer readings from connected connected telematics devices.
• Trip data: Route history, distances traveled, trip duration, and geofence entry/exit events.

Driver and Employee Data

Where a fleet operator connects vehicles to the platform, Emitraq processes location, route, driving behaviour and telemetry data that may relate to identifiable drivers. In respect of this data the fleet operator is the data controller and Emitraq is the data processor. The fleet operator is responsible for informing its drivers about this processing and for obtaining any consent required under applicable data protection and employment law. Emitraq does not use driver data for any purpose other than providing the services to that fleet operator.

Emissions Reporting Data

• Emission calculations: CO2e totals derived from fuel consumption using IPCC / GHG Protocol default emission factors.
• Audit reports: Tamper-evident emissions reports using recognised GHG accounting frameworks.

Usage & Device Data

• Usage analytics: Features accessed, session duration, and interaction patterns.
• Device information: Device type, operating system, browser type, and IP address.
• Log data: Server access logs, error reports, and API request metadata.

3. How We Use Information

We use the collected information for the following purposes:

• Service delivery: Providing fleet monitoring, route optimization, geofencing, and emissions reporting features.
• Account management: Authentication, authorization, and subscription management.
• Analytics & improvement: Understanding usage patterns to improve platform features and reliability.
• Compliance: Generating audit-ready reports for regulatory compliance and emissions reporting.
• Security: Detecting and addressing fraud, unauthorized access, and abuse of our services.
• Communication: Sending service notifications, security alerts, and support responses.

4. Data Storage & Security

Your data is stored on secure cloud infrastructure with the following protections:

• Encryption at rest: All stored data is encrypted using AES-256 encryption.
• Encryption in transit: All data transfers use TLS 1.3 encryption.
• Access controls: Role-based access control (RBAC) with company-level data isolation.
• Infrastructure: Google Firebase for authentication and cloud database; DigitalOcean for compute and storage services.
• Report verification: Audit reports are sealed with a tamper-evident seal for verifiable record-keeping.

While we implement industry-standard security measures, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security of your data.

Verification confirms a report has not been altered since it was issued. It does not certify the accuracy of the original measurement.

International Transfers of Data

The platform is hosted using third-party infrastructure providers, including Google Firebase, DigitalOcean and Stripe. As a result, personal data processed through the platform may be stored or processed on servers located outside your country of residence. Where data is transferred internationally, Emitraq applies appropriate contractual and technical safeguards as required under applicable data protection law. By using the platform you acknowledge that such transfers may occur.

5. Data Retention

Emissions and compliance records are retained for a minimum of five (5) years, consistent with record-keeping expectations under applicable climate change legislation. Billing, invoicing and tax records are retained for seven (7) years in accordance with applicable tax law. Telemetry data is retained for the period stated in your service plan and deleted or anonymised thereafter.

6. Third-Party Services

We integrate with the following third-party services to deliver our platform:

• Google Firebase: Authentication, cloud database, crash reporting, and analytics.
• Stripe: Payment processing for subscriptions and billing.
• DigitalOcean: Cloud hosting for our backend microservices.
• Report Verification: Tamper-evident sealing for audit report integrity.

These third-party services have their own privacy policies. We encourage you to review them. We do not sell your personal data to any third party.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (subject to legal retention requirements).
• Portability: Request export of your data in a machine-readable format.
• Objection: Object to certain types of data processing.

To exercise these rights, contact us at support@emitraq.com. We will respond within 30 days.

Requests to access, correct or delete personal data may be sent to support@emitraq.com. We will respond within the period required by applicable law.

8. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you in the preceding 12 months.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions required or permitted by law.
• Right to Opt-Out of Sale or Sharing: Emitraq does not sell your personal information. We do not sell or share personal information with third parties for monetary consideration or for cross-context behavioural advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To submit a verifiable consumer request or to opt out of any future sale or sharing of your personal information (should our practices change), contact us at privacy@emitraq.com. We will confirm receipt within 10 business days and respond within 45 calendar days.

Consent Records

Every form submission on Emitraq is stored with a timestamp, the submitter’s IP address, the consent version accepted, and a record of which privacy policy and terms of service were in effect at the time. This audit trail exists to demonstrate compliance, not to monetise your data.

9. Children’s Privacy

Emitraq is a business-to-business platform intended for use by professionals aged 18 and older. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal data, please contact us and we will take steps to delete the information.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of material changes by:

• Updating the “Effective” date at the top of this page.
• Sending an email notification to the address associated with your account.
• Displaying a prominent notice within the application.

Your continued use of Emitraq after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: