Effective Date: October 19, 2026
This Privacy Policy describes how Kinexa Inc. ("we," "us," or "our") collects, uses, protects, and discloses information when you use the Kinexa Fleet Management System (FMS), our mobile applications, and our website (kinexaiot.com).
As a B2B enterprise software provider, Kinexa primarily acts as a Data Processor on behalf of our clients (Fleet Operators/Transporters), who are the Data Controllers.
1. Information We Collect
To provide our comprehensive fleet management and telemetry services, we collect the following types of information:
- Account & Administrative Data: When you register for Kinexa, we collect names, professional email addresses, phone numbers, job titles, and billing information of your fleet managers and administrative staff.
- Driver & Operator Data: To enable features like Driver Behavior Scoring and eChallan mapping, we process driver names, contact numbers, and driving license details (via Sarathi) as provided by the fleet operator.
- Vehicle & Telemetry Data: Through connected IoT devices, GPS trackers, and OEM APIs, we collect real-time vehicle locations, speed, engine hours, fuel levels, ignition status, and diagnostic trouble codes (DTC).
- Video & Audio Telematics: If your fleet utilizes our AI Dashcams and 24/7 Control Room services, we collect and process video footage of the road and vehicle cabin, as well as audio data during SOS emergency triggers or 2-way cabin calls.
- Regulatory & Financial Data: With your authorization, we fetch and store compliance data from government portals (Vahan, Sarathi) and toll data from financial gateways (NPCI/FASTag), including Registration Certificates (RC), PUC status, eChallans, and wallet balances.
2. How We Use the Information
We use the collected data strictly to deliver, maintain, and improve the Kinexa platform. Specific uses include:
- Providing real-time visibility, route optimization, and live tracking of your fleet assets.
- Automating regulatory compliance checks, toll reconciliation, and predictive maintenance alerts.
- Analyzing driver behavior and dashcam footage to generate safety scorecards and prevent highway accidents.
- Enabling our 24/7 Control Room to validate SOS alerts, prevent cargo theft, and facilitate emergency responses.
- Communicating with account administrators regarding system updates, billing, and technical support.
3. Data Controller vs. Data Processor Responsibilities
Kinexa processes driver and vehicle data solely based on the instructions of the Fleet Operator (the Data Controller).
- Consent: It is the explicit legal responsibility of the Fleet Operator to obtain all necessary consents from their drivers and employees regarding the tracking of their location, driving behavior, and the recording of cabin video/audio.
- Kinexa does not sell, rent, or monetize your fleet's raw telematics or driver data to third-party data brokers or advertisers.
4. How We Share and Disclose Data
We only share information under the following circumstances:
- Service Providers: We share data with trusted third-party cloud hosting providers (e.g., AWS/GCP servers located securely within India), SMS gateways, and customer support tools required to operate our infrastructure.
- API Partners: We securely transmit specific vehicle identifiers (like Vehicle Registration Numbers) to integrated government and financial APIs (such as NPCI) solely to fetch your requested compliance and toll data.
- Legal & Safety Requirements: We may disclose data if required to do so by Indian law enforcement agencies, court orders, or to assist in official investigations of cargo theft, severe highway accidents, or fraud.
5. Data Security and Localization
We take the security of your enterprise data seriously.
- Data Localization: All critical tracking, video, and customer data is hosted on secure, encrypted servers located strictly within the borders of India, in compliance with local data protection frameworks.
- Security Measures: We implement industry-standard AES encryption (both at rest and in transit), role-based access controls (RBAC), and regular security audits to protect your data against unauthorized access, alteration, or destruction.
6. Data Retention
We retain telemetry, video, and compliance data only for as long as necessary to fulfill the purposes outlined in this policy or as mandated by the Fleet Operator's specific enterprise contract. Once a contract is terminated or data reaches the end of its agreed lifecycle, it is securely anonymized or permanently deleted from our active servers.
7. Your Data Rights
Subject to applicable Indian data protection laws, account administrators have the right to:
- Access, export, and review the personal data stored on the Kinexa platform.
- Request the correction of inaccurate administrative data.
- Request the deletion of specific driver or vehicle data, provided it does not conflict with active contractual or legal retention obligations.
8. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in our software, integrations, or Indian legal requirements. We will notify account administrators of any material changes via email or through an in-app dashboard alert prior to the changes taking effect.
Contact Us
If you have questions about this Privacy Policy or how your fleet's data is handled, please contact our Data Protection Officer at:
- Email: hello@kinexaiot.com
- Address: Plot No. 4, Minarch Tower, Sector-44, Gurugram, Haryana 122003, India