Terms & Privacy

1. General Information & Data Controller

The entity responsible for processing the personal data collected through VOXERA platforms is VOXERA SPA, with legal address at Avenida Laguna Sur 6251, Office 1002, Estacion Central, Santiago, Chile. You can contact our Data Protection Officer (DPO) at [email protected] or by calling our corporate line at +56 9 5205 8019.

VOXERA acts as the Data Controller regarding the registration details of its direct customers, billing information, and browsing data on its website. It acts as the Data Processor (or sub-processor) regarding location, telemetry, and event data generated by the GPS/IoT devices of its enterprise or government clients, who in turn act as Data Controllers to their respective employees or contractors.

2. Key Definitions

• Personal Data: Any information relating to an identified or identifiable natural person (the "Data Subject").
• Geolocational Data: Geographical coordinates (latitude, longitude, altitude, and bearing), timestamps, and satellite information transmitted by global positioning devices (GPS/GNSS) associated with an asset or vehicle.
• Telemetry Data: Engine operating parameters, speed, acceleration, harsh braking, fuel consumption, engine temperature, battery voltage, and advanced sensor status (CAN bus / OBD-II).
• IoT/GPS Device: Physical tracking hardware provided or homologated by VOXERA, containing a communication card for wireless data transmission.
• VOXERA Platform: Cloud software, desktop applications, mobile apps (iOS/Android), and dashboards operated by VOXERA.

3. Data We Collect

VOXERA collects and processes the following categories of information:

3.1. Information Provided Directly

Account registration data (full name, corporate name, tax ID, business address, corporate email address), billing data (payment history, bank details processed under PCI-DSS standards), and technical support tickets/communications.

3.2. Telematics & Geolocational Data

Automatically transmitted by installed devices:

• Hardware identifiers (IMEI, ICCID, firmware version).
• Real-time coordinates, speed, bearing, and routing history.
• Vehicle engine diagnostics (RPM, DTC codes, acceleration profiles).
• Additional sensors (temperature/humidity in cold chain compartments, RFID badges, and BLE proximity beacons).

3.3. Technical Web Data

Access logs, IP addresses, browser types, operating systems, and essential/analytical cookies.

4. Processing Purposes

Collected personal and telematics data are used for the following core purposes:

1. Service Delivery: Fleet tracking visualization, geofencing, panic alerts, and activity reporting.
2. Support & Maintenance: Hardware troubleshooting and Over-The-Air (OTA) remote firmware updates.
3. AI-Powered Optimizations: Processing aggregated telematics data with Machine Learning to predict preventive maintenance needs and compute optimal delivery routes.
4. Commercial Management: Tax invoicing, subscription charges, and license renewal alerts.
5. Legal Compliance: Responding to judicial warrants or authorized law enforcement requests.

5. Legal Bases for Processing

We process information based on the following legal grounds:

• Contract Performance: Essential to fulfill the monitoring services contracted by the Client.
• Legitimate Interest: Safeguarding cybersecurity, mitigating network attacks, and improving user interface workflows.
• Legal Obligations: Compliance with corporate tax laws, shipping declarations, and telecom regulations.

6. Data Sharing

VOXERA maintains a strict policy: we do not commercialize, rent, or sell client telematics data. We share data only with trusted service sub-processors under tight security terms:

• Cloud Infrastructure: Secure hosting environments (Amazon Web Services and Microsoft Azure).
• M2M Cellular Operators: International telecommunication networks handling SIM connectivity.
• Payment Gateways: PCI-DSS certified financial institutions handling transactional billing.

7. International Data Transfers

Due to our global scale, account and telemetry data may be stored in centers located in the US, Europe, or South America. We employ Standard Contractual Clauses (SCCs) approved by the European Commission to ensure data handling standards remain fully aligned with international GDPR mandates.

8. Data Retention

• Geolocational & Trip Data: Stored actively in the cloud database for **12 months** from generation. Afterwards, data is moved to cold, offline archives for a maximum of 24 months before permanent erasure.
• Account & Registration Details: Maintained for the duration of the subscription and locked for **5 years** post-termination for tax audit compliance and defense purposes.
• Cookies: Cleared automatically within 6 to 12 months.

9. Logical & System Security

We enforce industry-standard controls to prevent unauthorized data access or loss:

• Data encryption in transit utilizing secure **TLS 1.3** tunnels.
• Data encryption at rest using **AES-256** keys.
• Mandatory multi-factor authentication (MFA) for our technical support staff.
• Daily automated backups, geographically distributed across redundant availability zones.

In the event of a verified system breach, VOXERA will activate response plans and notify affected clients within **72 hours**.

10. Subject Rights (ARCO / GDPR)

You have the right to request **Access, Rectification, Erasure, Objection, Restriction, and Portability** of your personal records. To execute these rights, please send a signed request along with proof of ID to [email protected].

The company will issue an official response within **15 business days** of receipt.

11. Cookies & Web Tracking

Our dashboards rely on technical session cookies to keep users authenticated. Non-essential tracking or analytics cookies can be managed or turned off inside your browser settings, though doing so might disrupt the rendering of live tracking maps.

12. Client Obligations

Clients using VOXERA tracking systems agree to the following obligations:

• Worker Notification: You must officially notify and obtain written consents from drivers regarding tracking hardware installation and geo-monitoring.
• Legitimate Purpose: Do not employ tracking devices for illicit monitoring or unauthorized personal surveillance.
• Credential Safety: Safeguard account passwords, multi-factor codes, and API tokens from unauthorized disclosure.

13. Policy Amendments

VOXERA reserves the right to amend this policy at any time. Major structural updates affecting privacy rights will be communicated to the registered primary email at least **30 days** before the terms take effect.

14. Governing Law & Jurisdiction

This Agreement is governed by the laws of the Republic of Chile. All legal disputes resulting from the terms, execution, or termination of this policy will be submitted to the exclusive jurisdiction of the **ordinary courts of justice in Santiago, Chile**.