Data Privacy Policy

Glovision Techno Services Pvt Ltd ("Glovision", "we", "us", or "our") is committed to protecting the privacy and personal data of our users, clients, and data principals in accordance with the Digital Personal Data Protection (DPDP) Act, 2023 (India).

This Privacy Policy explains what personal data we collect, how we use it, how we protect it, and what rights you have over your data.

This policy applies to:

• Clients and users of the Glovision GPS Tracking Platform (web and mobile application)
• Field users operating GPS-enabled mobile devices registered on our platform
• Any individual whose personal data is processed by Glovision in connection with our services

We collect only the data necessary to provide our GPS tracking and fleet management services:

We do not collect sensitive personal data beyond what is required for the operation of our services.

Your personal data is used exclusively for the following purposes:

• Providing GPS tracking, fleet monitoring, and related reporting services
• Authenticating and authorizing user and device access to the platform
• Sending operational alerts, reports, and service-related communications
• Maintaining security, audit trails, and incident response records
• Complying with applicable legal and regulatory obligations

We retain personal and operational data as follows:

• Active GPS event data: Retained for 75 days in our primary database
• Backup data: Retained for 1 year across backup and tertiary archive servers
• Data older than 1 year is automatically purged from our systems
• Where a client requires extended retention for legal or operational reasons, data can be provided on physical media upon request

Glovision implements the following security measures to protect your personal data:

• Encryption in Transit: All data transmitted between your browser, mobile application, and our servers is encrypted using TLS 1.2 and TLS 1.3 with strong cipher suites
• Access Control: Role-Based Access Control (RBAC) ensures users can only access data relevant to their assigned role
• Device Authorization: Mobile users require explicit administrator approval before gaining platform access
• Server Security: Our infrastructure is hosted on hardened Ubuntu servers virtualized on VMware ESXi with restricted administrative access
• Security Headers: Our web application enforces HTTPS-only access with strict security headers including HSTS, Content Security Policy, and anti-clickjacking controls

Under the DPDP Act, 2023, you have the following rights:

• Right to Access — You may request a summary of the personal data we hold about you
• Right to Correction — You may request correction of inaccurate or incomplete personal data
• Right to Erasure — You may request deletion of your personal data, subject to our legal and operational retention obligations
• Right to Grievance Redressal — You may raise a complaint regarding the processing of your personal data

To exercise any of these rights, please contact us at the details provided in Section 10.

We do not share your personal data with external third parties except:

• Where required by law, court order, or direction from a competent government authority
• With your explicit consent for a specific purpose
• With our internal infrastructure and operations teams strictly for service delivery

In the event of a personal data breach that affects your data:

• Our team will assess and respond to the incident within 24 hours of detection
• A formal Root Cause Analysis (RCA) will be prepared and shared within 7 days
• We will notify affected data principals and, where required, the Data Protection Board of India in accordance with the DPDP Act, 2023

For any privacy-related queries, data access requests, corrections, or complaints, please contact:

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The effective date at the top of this page will be updated accordingly. We encourage you to review this policy periodically.

This policy is issued in compliance with the Digital Personal Data Protection (DPDP) Act, 2023 (India).