Privacy Policy — ControlMaxx
ControlMaxx ("we", "us", or "our") is a service operated by Vergara Investment LLC. This Privacy Policy explains what information we collect when you use our GPS tracking service, mobile applications, and website at controlmaxx.com (collectively, the "Service"), how we use that information, and the choices you have.
If you have any questions about this policy or your data, contact us at support@gpsnvision.com.
1. Who we are
The Service is provided by:
Vergara Investment LLC
support@gpsnvision.com
controlmaxx.com
Vergara Investment LLC is the controller of the personal information described in this policy.
2. What we collect and why
2.1 Account information
When you sign up or activate a tracker, we collect:
- Name (first and last)
- Email address
- Password (stored as a one-way hash; we never see your plaintext password)
- Time zone (detected from your browser at signup so that timestamps in emails and reports match your local time)
We use this to create your account, send you transactional emails, and let you sign in.
2.2 Billing information
When you purchase a subscription, billing is processed by a third-party PCI-compliant payment processor. We do not store your credit card number, expiration date, or CVV on our servers.
What we store on our side:
- Your customer ID and subscription ID with our payment processor
- The subscription plan and renewal date
- High-level payment status (active, past due, canceled)
What our payment processor stores on their side:
- Your name and billing address
- Card details (or other payment method)
- Invoice and payment history
Our payment processor maintains its own privacy policy covering the handling of payment data.
2.3 Tracker / device information
When you activate a tracker, we collect:
- IMEI (the unique 15-digit identifier printed on the device)
- ICCID (the SIM card identifier)
- Device name that you assign (e.g., "My truck")
- Device model
This information is required to provision your tracker on our network and route its data to your account.
2.4 Location and trip data
This is the core of what the Service does. Each tracker sends us:
- GPS coordinates (latitude, longitude, altitude) at regular intervals while powered
- Speed and heading
- Timestamp of each position
- Trip and stop events derived from the position stream (start, end, duration, distance)
- Ignition state and battery level where supported by the device
We store this data so you can view it on the live map, in trip reports, and in event histories. Only you and any users you authorize on your account can see your trackers' location. We do not sell location data to advertisers or data brokers.
2.5 Usage data
We log basic technical information when you use the Service:
- Sign-in and sign-out times
- IP address (for security and abuse prevention)
- Browser type and operating system
- Pages and features accessed within the dashboard
- Mobile app version (when applicable)
We use this to operate the Service, troubleshoot problems, and improve features.
2.6 Push notification token (mobile app)
If you install the ControlMaxx mobile app and enable push notifications, your device generates a token that we store on your account so we can deliver notifications you've subscribed to (geofence alerts, low battery alerts, etc.). Tokens can change; we update our records when your device sends a new one. You can disable push notifications in your device's system settings at any time.
2.7 Email engagement
When we send you transactional email (welcome emails, password resets, account notifications), our transactional email provider records delivery status and may record opens. We use this only to confirm successful delivery and troubleshoot bounced emails.
2.8 What we don't collect
- We don't read your contacts, photos, microphone, or files outside what's required for the app to function.
- We don't track you across other websites or apps.
- We don't store credit card details on our servers (our payment processor does).
- We don't sell your personal data to anyone.
3. How we use your information
We use the information we collect to:
- Provide the core tracking service (display locations, generate reports, send alerts)
- Process payments and manage your subscription
- Activate, suspend, and deactivate your tracker's cellular service
- Send transactional emails (welcome message, password resets, payment receipts, cancellation confirmations, retention offers, etc.)
- Provide customer support
- Detect and prevent fraud or abuse
- Comply with legal obligations
- Improve and develop the Service
We do not use your data for advertising or to train any AI/ML models.
4. Who we share information with
We share your information only with the third-party service providers we use to operate the Service. These are sometimes called "sub-processors". We disclose them here by category:
| Type of provider | What they handle | Data shared |
|---|---|---|
| Payment processor | Subscription billing, card processing | Name, email, billing address, payment method, subscription details |
| Cellular network provider | SIM provisioning + cellular connectivity for your tracker | SIM identifier, endpoint identifier (includes your first name + tracker ID) |
| Transactional email provider | Delivery of welcome, password reset, and account emails | Recipient email address, message contents, delivery status |
| Hosting provider | Operates the servers that run our Service | All operational data |
| DNS provider | Manages public DNS records for our domain | Public DNS records only; no customer data |
| Push notification services (Apple + Google) | Delivery of push notifications to your iPhone or Android device (when enabled) | Device push token, notification payload |
| Map tile provider | Rendering map tiles in the dashboard | Your approximate map viewport when panning (no account info shared) |
A current list of the specific service providers we use in each category is available to customers on request — email support@gpsnvision.com.
We do not sell, rent, or trade your personal information to advertisers, data brokers, or any other commercial third party.
We may disclose your information if required by law (e.g., subpoena), to protect our legal rights, or to investigate suspected fraud or violation of our terms.
5. Where your data is stored
Your data is stored on servers located in Ashburn, Virginia, USA, operated by our hosting provider. Other service providers may store their respective portions of your data in their own facilities, which may include locations outside the United States. By using the Service, you consent to your data being transferred and processed in the United States.
6. How long we keep your data
- Active accounts: as long as your account is active.
- Tracker location and trip history: indefinitely while your subscription is active, so historical reports remain accessible.
- Canceled accounts: account record retained for up to 12 months after cancellation for billing, dispute resolution, and re-activation purposes. Tracker location history is retained alongside.
- Backup snapshots: rolling backups are retained for up to 30 days for disaster recovery.
If you want your account and data deleted earlier, see Section 8.
7. Your rights
Depending on where you live, you may have legal rights regarding your personal information:
- Access — request a copy of the personal information we hold about you
- Correction — ask us to fix inaccurate information
- Deletion — ask us to delete your personal information
- Portability — request your data in a machine-readable format
- Opt out of marketing — we only send transactional emails (no marketing); if this ever changes, you'll be able to opt out
California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right not to be discriminated against for exercising these rights. We do not sell personal information as defined under CCPA.
Residents of the European Economic Area, the United Kingdom, or other jurisdictions with similar data protection laws have additional rights under those frameworks.
To exercise any of these rights, email support@gpsnvision.com. We'll respond within 30 days.
8. Account and data deletion
You can request deletion of your account at any time by:
- Logging in and using the cancellation flow in Settings → Account → Subscription, which schedules your account for deletion at the end of your billing period, OR
- Emailing support@gpsnvision.com and requesting deletion.
When your account is deleted:
- Your account access is disabled and your device record is deactivated.
- Your cellular SIM is suspended (the tracker stops reporting).
- After 12 months, your account record and associated tracker location history are permanently removed from our database. Backup snapshots roll off within 30 days.
- Your customer record with our payment processor is retained by them according to their own retention policies.
9. Children's privacy
The Service is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe we have collected information from a child under 13, please contact us at support@gpsnvision.com and we will delete it.
10. Security
We use industry-standard security practices to protect your data:
- All connections between your browser/app and our servers are encrypted with TLS (HTTPS).
- Passwords are stored as one-way hashes (we never see your plaintext password).
- Payment data is handled by our PCI-compliant payment processor; we never store full card details.
- Server access is restricted via SSH keys and a small set of authorized administrators.
- Software is kept current with security patches.
No system is perfectly secure. If we ever experience a data breach that affects you, we will notify you as required by applicable law.
11. Cookies and similar technologies
We use cookies and similar technologies to:
- Keep you signed in (session cookie)
- Remember your dashboard preferences (theme, column selections, etc.)
- Authenticate your requests to our API
We do not use third-party advertising cookies or trackers. Our payment processor and email provider may set their own cookies on their respective pages.
12. Changes to this policy
If we make material changes to this Privacy Policy, we'll notify you by email and post the updated version at this URL with an updated "Last updated" date. Material changes take effect 30 days after notice. Continued use of the Service after that date constitutes acceptance of the updated policy.
13. Contact us
If you have questions, concerns, or requests about your privacy:
Vergara Investment LLC
Email: support@gpsnvision.com
We aim to respond within 5 business days for routine questions, and within 30 days for formal data rights requests.