Privacy Policy
This Privacy Policy describes how RT Express (“we”, “us”), of Cincinnati, Ohio, handles information when we operate RT Track at gps.rtohio.com. It applies to the customer portal, the public website (including demo requests), and the GPS data your trackers send us. It does not apply to third-party sites we link to (maps open in your browser; Google Maps links leave our service).
RT Track is a B2B equipment-tracking service for U.S. businesses. We do not sell personal information. We do not offer the product to children.
1. Who is responsible
For your company’s fleet data (tracker locations, asset names, geofences, alerts, team roster), you are the business / controller and we are your service provider / processor. That relationship is spelled out in the Data Processing Addendum.
For account and website data we decide how to use (login emails, demo-request forms, billing contacts, security logs), RT Express is the business / controller.
Privacy questions and requests: dan@rtohio.com.
2. Information we collect
2.1 Account and billing
- Name, work email, phone, company name and address, role on the account.
- Accounting / billing email if you give us one.
- Password (stored only as an argon2 hash — we cannot read it back).
- Invite and password-reset tokens (stored only as hashes).
- Records of who accepted the Terms, and roughly when / from which IP.
2.2 Fleet and device telemetry
From trackers configured to our servers we receive, store, and display:
- GPS position, time, speed, heading, and satellite / accuracy metadata;
- external (vehicle) voltage and backup-battery level;
- engine/ACC run state when the unit is wired for it (status bit — not temperature);
- cellular signal and session health from the SIM provider;
- the raw protocol frame, kept so we can re-process if a decoder is wrong;
- device and SIM identifiers (IMEI, tracker ID, ICCID, MSISDN).
We do not collect cabin video, driver identity from the device, temperature, door, or cargo-condition data — this hardware does not provide them. Do not assume we have them.
2.3 Information you type in the portal
Unit numbers, asset types, notes, geofence and “place” names, alert recipients, branding (logo/accent if you set them), and exports you generate.
2.4 Website and demo requests
If you request a demo we collect the name, work email, company, and fleet size you submit, and use them only to follow up about RT Track.
2.5 Logs and security
We keep application, web, and authentication logs (including IP address, user agent, and success/failure of sign-in) to operate, secure, and debug the service. We do not run advertising or cross-site tracking pixels on the portal.
2.6 Cookies
We use an essential session cookie to keep you signed in (HttpOnly, Secure, SameSite=Lax). We may store a theme preference in localStorage on your device. We do not use advertising cookies.
3. How we use it
- Provide live tracking, history, alerts, geofences, exports, and support.
- Authenticate users, isolate tenants, and prevent abuse.
- Bill, collect, and keep accounting records.
- Send transactional email (invites, password reset, recipient verification) and the operational alerts you configure (email and, if you opt in a number, SMS).
- Reverse-geocode coordinates into a place or “City, ST” so the portal is readable (see subprocessors).
- Improve reliability (for example, ingest health) using aggregated, de-identified metrics.
- Comply with law and enforce our Terms.
We do not sell your information, and we do not share it for cross-context behavioral advertising.
4. Where it lives
Platform data is hosted on a virtual server in the United States (currently Hostinger). Nightly encrypted database backups go to Backblaze B2. Email is sent through RT Express’s Microsoft 365 mail path. Customer alert SMS is sent through ClickSend. Cellular SIMs are provided by Hologram and/or 1NCE. Map tiles are fetched by your browser from MapTiler. Address lookup may use Nominatim (OpenStreetMap) and/or Geocodio.
Your assets may physically travel (including briefly into Canada). We still store the resulting coordinates in the United States. We do not currently offer customer accounts to companies outside the United States.
See the subprocessor list for who handles which category.
5. Retention
- Position history: kept for your plan’s retention period (default 12 months), then eligible for deletion, unless you are on a written legal hold or we have agreed a longer period.
- Account, billing, and audit records: for the life of the account and as needed afterward for tax, dispute, and security (typically up to 7 years for invoices).
- Demo leads: until you ask us to delete them, or 24 months after last contact.
- Backups: encrypted copies follow the backup rotation (days to months) and then expire; we do not surgically edit a nightly backup.
- Raw tracker frames: kept to support the service and debugging, subject to the same tenant isolation and retention practices as positions.
Account administrators can export history from the portal while the account is active, and may email dan@rtohio.com to request deletion after cancellation.
6. Sharing
We share information with:
- subprocessors who help us run the service (listed on /subprocessors), under contracts that limit their use;
- your own users and alert recipients, as you configure;
- professional advisers under confidentiality;
- a buyer or successor if we sell or reorganize the RT Track business (we would require continued protection of the data);
- law enforcement or courts when we reasonably believe we must, or to protect rights, safety, or the platform.
We do not publish your fleet map publicly. We do not give your location history to marketers.
7. Security
We use TLS in transit, tenant isolation (application scoping plus database row-level security on core tenant tables), hashed passwords, staff access only as needed, session timeouts, and encrypted off-site backups. No method is perfect. Please use a unique password and tell us of suspected misuse.
If we confirm a breach of personal information we will notify affected customers without undue delay, and as required by applicable U.S. law.
8. Your choices and U.S. state privacy rights
Tenant admins can add or remove users, change alert recipients, export history, and request account closure. Individual users can update their own profile and password.
If you are a California resident (or a resident of another U.S. state with a similar privacy law) and we hold personal information about you as a consumer, you may have the right to know, access, correct, delete, or opt out of “sale” / “sharing.” We do not sell or share personal information as those laws define those terms. We also do not use sensitive personal information to infer characteristics about you. To exercise a right, email dan@rtohio.com from the address on your account. We will verify the request and will not discriminate against you for making it.
Much of RT Track data is business equipment telemetry, not consumer personal information. We still treat account names and emails as personal information of the people who log in.
We do not currently respond to browser “Do Not Track” signals because there is no consistent standard; we already do not advertise against your portal use.
9. Children
The service is not directed to anyone under 18. We do not knowingly collect personal information from children.
10. Changes
We will post updates here and change the effective date. Material changes will be emailed to account administrators or shown in the portal. The version on this page header is the current one.