Privacy policy

Who we are and our role

Avlo Innovation ("Avlo", "we") provides the Avlo fleet video telematics service. You can reach us at info@unityinphilia.gr.

Avlo is used by businesses that operate vehicles ("fleet operators"). For the vehicle, driving and camera data described below, the fleet operator decides why and how that data is collected and is the data controller; Avlo processes it on the operator's behalf as a data processor, under our agreement with them. For the account details of people who sign in to Avlo, and for running and securing the service itself, Avlo is the controller.

If you drive a vehicle that has an Avlo device installed, your employer or the fleet operator is responsible for telling you what is recorded and why, and is your first point of contact for questions and requests.

What data we process

Account data

For each person who signs in: organization, email address, name (if provided), role, and password. Passwords are stored only as a salted one-way hash (bcrypt); we cannot read them.

Vehicle and driving data

Sent by the device installed in each vehicle: GPS position, speed, heading and ignition status; the trips derived from them; driving events such as speeding against posted limits, harsh braking or acceleration, collision and other device alarms, and driver-assistance alerts; zone entries and exits; and device status and sensor readings.

Camera data

Photos and video from the road-facing and cabin-facing cameras, captured on request, when an incident is flagged, or streamed live. Cabin footage can show the driver and passengers, and road footage can show other road users.

Driver data

Driver names that the fleet operator assigns to vehicles, and the driving summaries and reports built from the trips and events of the vehicles each driver was assigned to.

Technical data

Our servers record standard request information (IP address, time, requested address) to run and protect the service.

The Avlo Fleet mobile apps

• The apps show your organization's fleet data from our servers. They do not access your phone's location, contacts, photos, camera or microphone.
• They contain no advertising, no analytics and no third-party tracking, and do not use your device's advertising identifier.
• After you sign in, the app keeps your sign-in token in the phone's secure storage (iOS Keychain, Android encrypted storage) and remembers your organization and email so you don't have to retype them. Signing out removes the token.
• Map backgrounds are loaded from Apple Maps (iPhone) and Esri (Android). Those providers receive your phone's IP address and the map area being viewed, not your account or fleet data.

Why we use it

• To provide the service to the fleet operator: live fleet map, trips, events, reports, photos and video, under our contract with them.
• To let authorized users sign in and to keep each organization's data visible only to that organization.
• To keep the service secure and working, and to fix problems.

We do not sell personal data, and we do not use it for advertising.

Who receives it

• The fleet operator and the users they authorize within their organization.
• Hetzner Online GmbH, which hosts our servers in data centres in the European Union.
• OpenStreetMap's Overpass service, which our servers query for road information such as speed limits; it receives map areas, not names or account details.
• Apple and Esri for map backgrounds in the apps, as described above.
• Authorities, where the law requires it.

Data is stored and processed in the European Union.

How long we keep it

• Video recordings: 30 days.
• Photos: 1 year.
• Raw per-second device telemetry: 14 days.
• Positions, trips, events and reports: for as long as the fleet operator's account is active, unless the operator asks us to delete them sooner.
• Account data: until the account is deleted.

When a fleet operator's contract ends, we delete its data unless the law requires us to keep it.

Security

All connections to Avlo use encrypted HTTPS. Passwords are hashed, every request is checked against the signed-in user's organization, and access to our servers is restricted to the Avlo team.

Your rights

Under the EU General Data Protection Regulation you can ask for access to your personal data, and for its correction, deletion or restriction; you can object to its use; and you can ask for a copy in a portable format. Drivers should contact their employer or fleet operator first, as the controller of vehicle and camera data; we help them respond. You can also contact us directly at info@unityinphilia.gr.

You have the right to complain to a data protection authority. In Greece this is the Hellenic Data Protection Authority (www.dpa.gr).

Deleting your account

To delete your Avlo account, ask your organization's Avlo administrator, or email info@unityinphilia.gr from the address you sign in with, stating your organization. We delete the account and its sign-in data within 30 days. Fleet data (vehicles, trips, events, photos and video) belongs to the fleet operator and is deleted on the operator's request or under the retention periods above.

Children

Avlo is a business service for adults. It is not directed at children, and we do not knowingly collect data from anyone under 18.

Changes to this policy

We update this page when our practices change and revise the date at the top. Significant changes are also communicated to fleet operators directly.