Privacy Policy

TechTessi ("we", "us", "our") operates the Professional Dashcam System available at professional-dashcam-system.techtessi.com and its accompanying mobile and fleet-management applications (the "Service"). This Privacy Policy explains what information we collect through the Service, why we collect it, and the choices you have about that information.

By installing, activating, or using any TechTessi dashcam device, software, or cloud service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described here, you must not activate the Service or connect your device to the TechTessi cloud.

The TechTessi Professional Dashcam System is a networked device. The categories of data it generates and processes are listed below.

2.1 Data You Provide Directly

2.2 Data Collected Automatically by the Device

2.3 Data Collected Through the App and Website

• IP address, browser type, operating system, and device identifiers.
• Usage analytics: feature interactions, session duration, crash reports.
• Cookies and similar technologies (see Section 08).

We use the data described above for the following purposes:

1. Service delivery. Storing, indexing, and retrieving your dashcam footage and telematics so you can review trips and events through the app or web portal.
2. Incident reconstruction. Generating event reports (impact, hard braking, geofence breach) and making them available to you, your fleet manager, or parties you authorise.
3. Driver coaching. Aggregating telematics scores to provide driver-behaviour insights for fleet operators who have enabled the coaching module.
4. Safety and security. Detecting device tampering, theft alerts via parked-car recording, and emergency SOS notification to designated contacts.
5. Product improvement. Anonymising and aggregating data to improve detection algorithms, edge AI models, and route analytics.
6. Billing and account management. Processing payments, issuing invoices, and managing your subscription tier.
7. Legal compliance. Responding to lawful requests from public authorities where we are legally obligated to do so.
8. Customer support. Diagnosing technical issues you report and providing assistance.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data under one or more of the following legal bases:

• Performance of a contract (Art. 6(1)(b)). Processing necessary to deliver the dashcam recording, cloud storage, and fleet-management services you subscribed to.
• Legal obligation (Art. 6(1)(c)). Compliance with tax, transport-safety, and data-retention laws applicable to commercial fleet operators.
• Legitimate interests (Art. 6(1)(f)). Fraud prevention, device security, product improvement using anonymised data, and internal analytics.
• Consent (Art. 6(1)(a)). Optional features such as interior cabin audio recording, driver-coaching biometric scoring, and marketing communications.

Where we rely on consent, you may withdraw it at any time in the app's Privacy Settings or by emailing our DPO (Section 13).

We share data only in the limited circumstances described below.

5.1 Service Providers

We use third-party processors who handle data on our behalf under written data-processing agreements:

• Cloud storage: AWS (Frankfurt, EU region) for footage and telematics storage.
• Payments: Stripe for card processing and invoicing.
• Maps and routing: Mapbox for visualising GPS traces.
• Push notifications: Firebase Cloud Messaging and APNs.
• Analytics: PostHog (self-hosted, EU) for product analytics.

5.2 Authorised Third Parties (At Your Direction)

• Insurance providers — when you submit an incident clip as part of an insurance claim.
• Fleet management software — when your employer integrates TechTessi with platforms such as Samsara, Geotab, or Motive.
• Lawful authorities — when compelled by valid court order, subpoena, or where we believe disclosure is necessary to comply with a legal obligation.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, customer data may be transferred as part of that transaction. We will notify you by email at least 30 days before any such transfer.

We retain data only as long as necessary for the purposes set out in this policy and to comply with legal obligations.

You can configure retention for video and GPS data in the app under Settings → Storage & Retention. Account deletion requests are processed within 30 days, after which all associated personal data is permanently removed from production systems.

We implement technical and organisational measures appropriate to the sensitivity of dashcam data:

• Encryption at rest. All cloud-stored footage and telematics are encrypted using AES-256.
• Encryption in transit. All data moving between the device, app, and cloud uses TLS 1.3.
• On-device storage encryption. SD card footage is protected with device-bound keys; lost or stolen SD cards cannot be read on another device.
• Access controls. Internal access to customer data is role-based, logged, and reviewed quarterly. Engineers do not have default access to footage.
• Two-factor authentication. Mandatory for fleet administrator accounts.
• SOC 2 Type II audit. Our cloud infrastructure is audited annually.
• Incident response. We maintain a documented incident-response plan with a target notification window of 72 hours from breach detection, where required by Article 33 of the GDPR.

Despite these measures, no system can be guaranteed to be 100% secure. If a breach occurs that materially affects your rights, we will notify you and the relevant supervisory authority without undue delay.

The TechTessi web portal uses cookies to operate the service and to understand how it is used. We group cookies into four categories:

You can manage cookie preferences at any time via the cookie banner on first visit or under Settings → Privacy → Cookies in the web portal.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access. Request a copy of the personal data we hold about you.
• Rectification. Correct inaccurate or incomplete data.
• Erasure ("right to be forgotten"). Request deletion of your data, subject to legal retention obligations.
• Restriction. Limit how we process your data in certain circumstances.
• Portability. Receive your data in a structured, machine-readable format (JSON or MP4 for footage).
• Objection. Object to processing based on legitimate interests.
• Withdraw consent. Withdraw consent for processing that relied on consent at any time.
• Automated decision-making. Information about logic involved in automated driver-scoring, and the right to request human review.

9.1 California Residents (CCPA / CPRA)

If you are a California resident, you additionally have the right to:

• Know what personal information is collected, sold, or shared.
• Opt out of the "sale" or "sharing" of personal information (we do not sell data).
• Limit use of sensitive personal information.
• Non-discrimination for exercising privacy rights.

9.2 How to Exercise Your Rights

Submit a request through the in-app Privacy → Data Request form, or email our DPO at [email protected]. We will verify your identity and respond within 30 days (or as required by applicable law).

If you are not satisfied with our response, you have the right to lodge a complaint with your local data-protection authority. A list of EU supervisory authorities is available at edpb.europa.eu.

The Service is not directed to children under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact our DPO so we can delete it.

Please note that dashcams installed in private vehicles may incidentally capture images of minors in public spaces. This is generally permitted under most jurisdictions for legitimate safety purposes, but you should check your local laws regarding recording in and around schools, playgrounds, and similar areas.

TechTessi is headquartered in the European Union. Customer data is stored primarily in AWS Frankfurt (eu-central-1).

Where data must be transferred outside the EU/EEA (for example to a non-EU fleet operator's regional dashboard, or to a US-based support engineer), we rely on:

• Adequacy decisions of the European Commission.
• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Binding Corporate Rules (BCRs) where applicable to intra-group transfers.

A copy of the relevant SCCs and supplementary technical measures can be requested from our DPO.

We may update this Privacy Policy to reflect changes in our practices, technology, or applicable law. When we do:

• Material changes: we will notify you by email at least 30 days before the changes take effect, and seek consent where required.
• Non-material changes: we will update the "Last Updated" date at the top of this page.

We retain previous versions of this policy for at least 7 years. You may request a copy of any prior version from our DPO.

If you have questions about this Privacy Policy, want to exercise a data-subject right, or wish to file a complaint about how we handle your data, please contact our Data Protection Officer: