Privacy Policy

1. Who we are

Karvia ("we", "us") provides a fleet intelligence platform: a web dashboard for managers and an optional WhatsApp channel for operational alerts and follow-up. Karvia does not offer a native mobile app (no App Store / Google Play product). Our registered address is C20 235 609, Fraccionamiento Altabrisa, Mérida, Yucatán, Mexico. This English summary is for U.S. and international readers; the Spanish notice on /privacy is the primary notice under Mexican LFPDPPP for users in Mexico.

2. Information we collect

• Account & contact: name, email, phone (including WhatsApp numbers you link).
• Vehicle & fleet: make, model, year, VIN, plates, mileage, OBD-II diagnostics.
• Telemetry: GPS location, speed, driving patterns, fault codes, battery voltage, engine temperature, and related OBD signals.
• Product usage: AI assistant queries, notification preferences, account settings, and web session data.
• Payments: billing details processed by our payment providers (we do not store full card numbers on Karvia servers).

We do not intentionally collect sensitive personal data such as racial or ethnic origin, health diagnoses, genetic data, religious beliefs, political opinions, or sexual orientation.

3. How we use information

Primary uses (needed to run the service):

• Create and administer your Karvia web account.
• Provide vehicle monitoring, predictive diagnostics, and maintenance alerts.
• Operate the optional AI Copilot over WhatsApp when you enable that channel.
• Generate vehicle-health, driving-score, and fleet reports in the dashboard.
• Process payments and respond to support requests.

Secondary uses (optional; you may opt out): product updates and marketing, aggregated analytics to improve the service, and anonymized research with partners. Opt out of secondary uses by emailing soporte@karvia.mx.

4. Sharing & processors

We share personal data only as needed to operate Karvia, including with:

• Google Cloud Platform — hosting and secure processing.
• Google Gemini / Vertex AI — AI Copilot query processing.
• Twilio — WhatsApp and SMS delivery when you use those channels.
• Payment processors — transaction handling.

We require processors to protect data under confidentiality and security agreements. We do not sell personal information for money.

5. Your choices & rights

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal information, and to opt out of certain marketing. U.S. residents may also have state-law rights (for example, to know, delete, or correct personal information). To exercise rights, email soporte@karvia.mx with your name, account email, and a clear request. We may verify your identity before responding.

6. Security

• TLS 1.3 in transit; AES-256 at rest where applicable.
• JWT-based authentication with controlled expiration.
• Secrets managed via Google Cloud Secret Manager.
• Role-based access control (RBAC) and continuous GCP monitoring.

7. Cookies

We use functional cookies to keep your web session signed in and analytics cookies to improve the product. You can disable cookies in your browser; some features may stop working.

8. International transfers

Data may be processed in Mexico and other countries where our processors operate (including the United States). We use contractual and technical safeguards appropriate to the transfer.

9. Changes

We may update this policy. Material changes will be posted at karvia.mx/en/privacy (and the Spanish notice at karvia.mx/privacy) and, when significant, emailed to account holders.

10. Consent

By creating a Karvia account or using the web platform (and optional WhatsApp channel), you acknowledge this policy and consent to the processing described here for the services you use.