Privacy Policy
Last updated: 9 July 2026
This policy explains what personal data TachoAssist ("we", "us") processes, why, and the rights you have. It applies to the tachoassist.com website and the TachoAssist application. Contact: contact@tachoassist.com.
1. Data we process
| Category | Examples | Why |
|---|---|---|
| Account data | Name, email, password (hashed), country, optional phone, company name, account type | Creating and securing your account and workspace |
| Tachograph data | Uploaded .DDD files and the data extracted from them: driver names, card numbers, driving activity, locations of periods of work, vehicle registrations | Providing the analysis and reports you request |
| Billing data | Subscription plan, billing status, invoices. Card details are collected and stored by Stripe only — they never reach our servers | Managing your subscription |
| Usage data | Basic website analytics and technical logs | Keeping the service working and improving it |
2. Why we are allowed to process it
- Contract — providing the service you signed up for (account, analysis, billing).
- Legitimate interests — securing the service, preventing abuse, improving the product.
- Legal obligation — accounting and tax records.
Where you upload tachograph files containing your drivers' personal data, your company is the data controller for that data and TachoAssist processes it on your instructions.
3. Where your data lives
- Application data is stored with Supabase (managed PostgreSQL and file storage, hosted in the EU).
- Payments are processed by Stripe. Stripe's own privacy policy applies to the payment details they collect.
- We do not sell personal data and do not share it with third parties beyond the processors above.
4. Retention and deletion
- Uploaded files and analysis results are retained securely and can be deleted by you at any time in Settings — per file, per driver, or everything at once.
- Each workspace has a configurable automatic retention period after which old files and analyses are deleted. (UK operators must keep tachograph records for at least 12 months — keep your retention setting at or above that.)
- Deleting your account removes your workspace data, subject to invoices and records we must keep by law.
5. Your rights
Under UK and EU data protection law you can ask us for access to, correction of, deletion of, or a copy of your personal data, and you can object to or restrict certain processing. Write to contact@tachoassist.com and we will respond within one month. You can also complain to the ICO (ico.org.uk) or your local supervisory authority.
6. Security
All traffic is encrypted in transit (TLS). Access to stored data is restricted to the service itself; uploaded files live in a private bucket that is never publicly accessible. Passwords are hashed by our authentication provider and are never visible to us.
7. Cookies and analytics
The application uses only the storage needed to keep you signed in and remember your preferences. The marketing website uses Microsoft Clarity for anonymised usage analytics.
8. Changes
If we materially change this policy we will notify account owners by email or in the app before the change takes effect.