Privacy Policy
This policy explains how the Devetrust platform collects, uses and protects personal data, in line with the Saudi Personal Data Protection Law (PDPL) and its implementing regulations. It is supplemented by the data-processing agreement signed with your organization at contract.
1. Data controller
The data controller is Devetrust Advanced Systems, Riyadh, Saudi Arabia. Official contact details and commercial registration are stated in the adopted version of this document.
2. Data we collect
We may process the following categories of data depending on your use of the service:
- Contact details you provide in the demo-request form (name, phone, company, sector).
- Fleet operational data for subscribing customers (vehicle positions, trips, sensor data) within the organization's account.
- Driver data managed by the subscribing organization (job identifiers, task data).
- Basic technical data to operate the site (security server logs).
3. Purposes and legal basis
We process data for the following purposes:
- Responding to demo requests and commercial contact (consent or pre-contractual steps).
- Providing and operating the fleet-management service for subscribing customers (contract performance).
- Complying with statutory obligations in the Kingdom, including the requirements of competent authorities.
- Protecting platform security and preventing fraud (legitimate interest within the law).
4. Data sharing
We do not sell personal data. We may share specific data with governmental or regulatory bodies where there is a statutory obligation (such as transport-authority or ZATCA requirements), and with service providers acting on our behalf under binding processing agreements.
5. Data retention
We retain data for as long as necessary to fulfil the processing purposes or as required by law (such as compliance-record retention periods), after which it is securely destroyed or anonymized.
The retention windows actually applied in the platform are:
- Raw position fixes received from the tracking device: 90 days, then deleted automatically.
- Trip records: 24 months in the live record, then moved automatically to a separate archive rather than deleted.
- Geofence events (entry and exit): 24 months, then deleted automatically.
- WASL submission logs: 365 days, then deleted automatically.
- Audit trail (who did what, and when): 36 months in the live record, after which entries leave it automatically — either moved to a separate archive or deleted.
In other words, raw position fixes, geofence events and WASL logs are deleted for good once their window passes, while trip records and the audit trail leave the live record at theirs and a copy may remain in a separate archive that has no declared retention window of its own.
6. Data transfer and place of processing
The platform's servers are hosted with Hetzner Online GmbH in Germany, so your personal data is processed and stored outside the Kingdom of Saudi Arabia.
The terms of that transfer, and the safeguards we commit to, are agreed in writing with your organization before we process any personal data on its behalf.
7. Data security
We apply technical and organizational controls to protect data, including per-organization data isolation in a dedicated scope, password hashing, role-based access control, and logging of sensitive operations.
8. Your rights under the PDPL
Under the law, you have the following rights:
- The right to be informed of how your data is processed.
- The right to access your data and obtain a copy of it.
- The right to request correction or updating of your data.
- The right to request destruction of your data when no longer needed.
- The right to withdraw consent at any time.
To exercise these rights, contact us through the channels on the Contact page.
9. Cookies
This marketing site is a static site that uses no third-party tracking tools, loads no third-party resources, and sets no advertising cookies.
10. Children's privacy
The service is directed at organizations and does not target individuals below the statutory age of majority.
11. Updates to this policy
We may update this policy; the last-updated date is shown at the top of the page. The version published on this page is the version in force.
12. Contact
For any privacy inquiry or to exercise your rights, please use the channels on the Contact page.