Privacy Policy

This Policy explains how NaviZone processes personal data in accordance with the Law of Ukraine “On Personal Data Protection” and, for users in the European Union, the General Data Protection Regulation (GDPR). The Policy forms an integral part of the Public Offer.

1. Data controller and roles

Data controller: [FULL LEGAL NAME: LLC “…” / Sole proprietor …], registration no. [•], address: [•], Ukraine, email info@navi.zone.

For GPS monitoring data (coordinates, speed, sensors, tracker identifiers, driver data) uploaded by our customer, the customer is the controller and NaviZone is the processor acting only on the customer’s instructions. If you are a driver or employee of a customer company, please contact the customer about such data; we forward any requests we receive to them.

2. Data we collect

Website: form data — name, email, phone, company name, message text; technical data — IP address, browser type, pages visited.

Cabinet and mobile app: email, company name, language, time zone, notification settings; technical data — device model and OS, push notification token, session identifier, sign-in logs (IP, time); phone location — only while the app is in use, only to show your position on the map, not stored on the server.

Trackers and objects: IMEI, SIM number, settings, location history, speed, sensor status, object names.

Payments: processed by the App Store, Google Play or the payment provider; we receive only the transaction status and identifier and do not store card numbers.

Support: correspondence by email and Telegram.

3. Legal basis and purposes

Performance of a contract — providing the Services, authentication, notifications, support, invoicing. Legitimate interest — platform security, abuse prevention, service improvement, anonymised statistics. Consent — website forms, analytics cookies, marketing emails (withdrawable at any time). Legal obligation — accounting and tax records, responses to lawful requests from authorities. We do not make automated decisions with legal effects about you and do not use profiling.

4. Who we share data with

We use processors solely to deliver the Services, under data-processing agreements and only to the extent needed for their function: hosting and backups (**[provider, country]**); push notification delivery (Apple Push Notification service, Google Firebase Cloud Messaging); email service for sign-in codes and notifications (**[provider]**); map tiles (**[OpenStreetMap / tile provider]** — receives the device IP address when the map loads); payment services (Apple App Store, Google Play, **[payment provider]**); support messenger (Telegram); web and behaviour analytics (Google Analytics via Google Tag Manager, Microsoft Clarity — only with your consent, see section 9).

Data may be disclosed upon a lawful request from public authorities. We do not sell personal data and do not share it for third-party advertising.

5. International transfers

Platform servers are located in **[the EU / Ukraine]**. Certain processors (Apple, Google, Telegram) may process data outside the EU and Ukraine. For EU users such transfers rely on adequacy decisions or the European Commission’s Standard Contractual Clauses (SCCs).

6. Retention

Account and monitoring data — for the term of the contract; after it ends, deleted within 30 days (within 72 hours on request). Location history during an active subscription is kept according to the plan. Accounting records — up to 3 years under tax law. Website form data — up to 6 months. Security logs — up to 12 months.

7. Security

Encrypted connections (HTTPS/TLS), passwordless sign-in with one-time codes, optional Face ID/Touch ID in the app, staff access controls, backups and access logging. No system is completely secure; in case of an incident we act under section 11.

8. Your rights and account deletion

You have the right to access, rectify and erase your data, restrict processing, data portability, object to processing based on legitimate interest, and withdraw consent. Send requests to info@navi.zone; we respond within 30 days (under GDPR no later than one month).

You can delete your account with all data yourself in the app (Profile → Account → Delete account) or at navi.zone/account-deletion.

You may lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or, for EU users, with the supervisory authority of your country of residence.

9. Cookies and analytics

The website uses necessary cookies (language, session, form protection) that do not require consent. Analytics cookies and behaviour analytics (Google Analytics via Google Tag Manager, Microsoft Clarity) are enabled only after your consent in the cookie banner; before consent Google runs in cookieless mode (Consent Mode) and Clarity is not loaded. We do not use advertising cookies. You can change your choice in the banner or in your browser settings. The mobile app does not use cookies.

10. Children

The service is not intended for persons under 18; we do not knowingly collect their data. If you become aware of such data, let us know and we will delete it.

11. Data breaches

In the event of a personal data breach we notify the supervisory authority within 72 hours (for data subject to the GDPR) and affected users without undue delay where the breach poses a risk to their rights. For customer data we process as a processor, we notify the customer as controller.

12. Changes and contacts

We give at least 14 days’ notice of material changes to this Policy by email or in the app. The current dated version is published on this page.

Data protection contact: [FULL LEGAL NAME: LLC “…” / Sole proprietor …], registration no. [•], address: [•], Ukraine; email info@navi.zone; Telegram @navizone_bot.