Privacy Policy

Triptoco is a fleet and car-rental operations platform for companies. The Service is provided by Triptoco.

For privacy requests, email [email protected].

Account and identity data: name, email, phone number, role, authentication credentials, and two-factor verification status.

Company and operational data: company profile, offices, workers, customers, vehicles, reservations, contracts, repairs, oil changes, expenses, partners, documents, GPS-related records, and storage files that you upload or generate in the Service.

Integration data: tokens and metadata needed to connect third-party services you enable (for example Google Calendar/Drive and WhatsApp session linkage), plus related sync status.

Technical data: IP address, device/browser information, session identifiers, logs, and approximate usage analytics needed to operate, secure, and improve the Service.

Payment and subscription data: plan selection, billing status, and payment-return metadata processed through our payment partners.

We use personal data to provide and maintain the Service, authenticate users, apply permissions, process reservations and fleet workflows, send transactional notices, support billing, prevent abuse, troubleshoot issues, comply with law, and improve product reliability.

We do not sell personal data.

If you connect Google Drive, Triptoco stores company documents and images in folders Triptoco creates in your Drive (drive.file).

If you connect Google Calendar, Triptoco creates and updates events for reservations, repairs, and oil changes (calendar.events).

If you connect Gmail, Triptoco can send customer-facing email (for example reservation notices and contract signature mail) using gmail.send from the connected company mailbox.

You can disconnect Google integrations from the company panel. Google user data is used only to provide these features and is not sold.

We may share data with infrastructure and service providers that help us host, secure, send email, process payments, store files, or provide analytics, under contractual confidentiality and security obligations.

If you connect Google, WhatsApp, GPS, or other integrations, the relevant provider may process data according to your configuration and that provider’s own terms and privacy policy.

We may disclose data if required by law, regulation, court order, or to protect the rights, safety, and integrity of Triptoco, our users, or the public.

We keep personal data only as long as needed for the purposes described above, including legal, accounting, dispute, and security requirements.

We apply technical and organizational measures appropriate to the risk, including access controls, encrypted transport, and monitoring.

Subject to applicable law, you may request access, correction, deletion, restriction, or portability of your personal data, and object to certain processing.

To exercise rights, contact [email protected].

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will change when we do.