Privacy Policy

Last updated: July 8, 2026

GEOINFER LABS, SL ("PhoneFleets", "we", "us", or "our") is responsible for processing the personal data of users of our website and our physical device fleet infrastructure and related services (the "Service").

This Privacy Policy explains how we process your personal data in compliance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights ("LOPDGDD").

1. Data controller

  • Company name: GEOINFER LABS, SL
  • Tax ID (CIF): 0B26762369
  • Address: 163 Verada Lomadas, San Andrés y Sauces 38729, Santa Cruz de Tenerife, Spain
  • Email: hello@phonefleets.com
  • Website: https://phonefleets.com

2. Personal data we collect

2.1 Data you provide directly

  • Account data: name, work email, company name, and password (encrypted).
  • Billing data: processed by our payment provider, Stripe. We do not store full payment card numbers.
  • Fleet configuration data: device counts, network/proxy preferences, and session recording settings you configure.
  • Contact data: anything you send through our contact form or support channels.

2.2 Data collected automatically

  • Navigation data: IP address, browser type, operating system, pages visited, and referring pages.
  • Cookies and similar technologies: see our Cookie Policy for details and opt-out controls.
  • Device session data: since the Service provides remote control of physical devices, session recordings and activity logs are generated as part of the core product functionality you configure and control.

3. Purposes and legal bases of processing

PurposeLegal basisRetention period
Account access and fleet managementContract performance (Art. 6.1.b GDPR)Duration of account + 6 years (legal obligations)
Payment processingContract performance (Art. 6.1.b GDPR)Per tax and accounting regulations (6 years minimum)
Customer supportLegitimate interest (Art. 6.1.f GDPR)3 years from last interaction
Compliance with legal obligationsLegal obligation (Art. 6.1.c GDPR)Per applicable regulations
Website analyticsConsent (Art. 6.1.a GDPR)Aggregated data: indefinite

4. Who we share data with

  • Payment processing: Stripe, for billing and subscription management.
  • Hosting: cloud hosting providers in the EU/EEA.
  • Analytics: Google Analytics, with anonymized identifiers.
  • Public authorities: when legally required, including tax authorities and data protection regulators.

We do not sell your personal information.

5. International transfers

Some of our service providers may be located outside the European Economic Area (EEA). Where this applies, we rely on the European Commission's standard contractual clauses or an applicable adequacy decision to protect your data.

6. Your rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Request rectification of inaccurate or incomplete data.
  • Request erasure of your data ("right to be forgotten").
  • Request restriction of processing under certain circumstances.
  • Object to processing, particularly for direct marketing.
  • Receive your data in a portable, machine-readable format.
  • Withdraw consent at any time, where processing is based on consent.
  • Lodge a complaint with the Spanish Data Protection Agency (AEPD), at aepd.es, or with your local supervisory authority.

To exercise any of these rights, contact us at hello@phonefleets.com. We will respond within one month of receiving your request.

7. Security

We use technical and organizational measures appropriate to the risk, including:

  • Encryption in transit (HTTPS/TLS) and encrypted password storage.
  • Role-based access control (RBAC) on our own systems.
  • Access logging and security monitoring.
  • Encrypted, redundant backups.

In the event of a data breach likely to pose a risk to your rights, we will notify you without undue delay and, where legally required, notify the relevant data protection authority.

8. Data retention

We retain account information for as long as your account is active. Session recordings and activity logs are retained per your account's configured retention setting (7 days by default, extendable per your plan). Billing records are kept for 6 years to comply with tax regulations. You may request deletion of your account and associated data at any time.

9. Children's privacy

Our Service is not directed at individuals under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will delete it without undue delay.

10. Changes to this policy

We may update this Privacy Policy to reflect legal, technical, or business changes. Material changes will be communicated by email or an in-app notice before they take effect.

11. Contact us

Questions about this Privacy Policy or your personal data can be sent to hello@phonefleets.com, by post to 163 Verada Lomadas, San Andrés y Sauces 38729, Santa Cruz de Tenerife, Spain, or through our contact page.