Privacy Policy

Who we are and what this policy covers

LINKA Labs, LLC (“LINKA,” “we,” “us”) makes connected hardware and software that help organizations track, secure and maintain their fleets, vehicles, equipment, sites and facilities. Our products include smart locks (LEO 2 Pro, TetherSense and LASSO BLE), smart keys (Smart Motion Key and Smart Key Card), asset tags and sensors (LOCA L1, LOCA L2 and Supply), Leader trackers and gateways (Leader Transport, Leader Gateway and Leader Roam), parking and access beacons, the FleetView dashboard, the Operator App, the Go Access App, our REST API, Mobile SDK and GBFS feeds (together, the “Services”).

This policy explains how we collect, use, share and protect personal information when you visit our websites (including linkafleets.com, linkalock.com and docs.linkalock.com), contact us, use our apps, or interact with devices we make.

1. Our role: controller or processor

Most of the data that flows through our devices and software belongs to our business customers: the fleet operators, campuses, rental companies, contractors, transit agencies, sanitation companies and other organizations that buy our Services (“Customers”).

• When we act as a processor (service provider). When a Customer deploys our devices and software, the Customer decides what is tracked and why. We process that data on the Customer’s behalf and under our contract with them. This includes vehicle telematics, asset location, operator check-ins, sensor readings and data about riders who use a Customer’s program. If you are an employee, driver, operator or rider of one of our Customers, the Customer’s own privacy notice governs that data, and you should direct requests to the Customer first. We will help the Customer respond.
• When we act as a controller (business). We decide how data is used for our own website, marketing, sales, customer account administration, support, product security, and certain Go Access App account functions. This policy describes those uses directly.

2. Information we collect

Information you give us

• Contact and sales information: name, work email, phone number, company, job title, industry, fleet size and message, when you book a demo, schedule a call, download a spec sheet or contact us.
• Account information: name, email, phone, username, password (stored in hashed form), role and organization, for FleetView, Operator App and Go Access App accounts.
• Support information: messages, photos, device serial numbers and diagnostic details you send when asking for help.
• Payment information: billing contact and invoicing details for Customers. Where an app takes card payments, the card is handled by our payment processor; we do not store full card numbers.
• Developer information: contact details and NDA records when you request API or SDK access, plus API keys issued to you.

Information our devices and Services collect

What a device collects depends on the product and on how the Customer configures it. The table below describes the main categories.

Location and telematics data describe an asset or vehicle. They become personal information when they can be linked to a person, for example when a Customer assigns a vehicle to a driver, a rider starts a trip, or an operator checks in. We treat that data as personal information.

Our gateways and beacons are designed to communicate with LINKA devices and authorized apps. They are not designed to identify or track bystanders’ personal phones, and any other wireless identifiers they incidentally receive are not used to identify people.

Information from other sources

• Customers, who may provide the names, roles and assignments of their drivers, operators and riders.
• Integration partners a Customer connects to us, such as fleet, HR, access-control or mobility platforms.
• Business contact databases, event organizers and public sources used for B2B sales outreach.

3. How we use information

• Provide the Services: show locations and alerts, lock and unlock assets, run trips, record service, report fill levels and occupancy, and push firmware updates.
• Support, troubleshoot and repair devices, including remote diagnostics.
• Keep the Services secure: detect theft, tampering, fraud and abuse, and protect our systems.
• Improve and develop products, using aggregated or de-identified data wherever we can.
• Communicate with you about your account, service notices, security alerts and changes to terms.
• Market our Services to businesses, including demo follow-ups and newsletters, with an opt-out in every message.
• Meet legal obligations, enforce our agreements, and defend legal claims.

When we process Customer data as a processor, we use it only to provide and support the Services for that Customer, as their contract allows. We do not sell Customer data or use it to build advertising profiles.

4. Legal bases (EEA, UK and Switzerland)

Where we act as a controller, we rely on: performance of a contract (providing accounts and the Go Access App); legitimate interests (B2B marketing, security, product improvement and running our business, balanced against your rights); consent (non-essential cookies, precise location in our apps where required, and certain marketing); and legal obligation (tax, accounting and law enforcement requests).

5. How we share information

• With Customers. Data from devices and apps in a Customer’s program is available to that Customer.
• With service providers who host, store, map, message, analyze, support or bill on our behalf, under contracts that limit their use of the data. A list of our subprocessors is available on request at privacy@linkafleets.com.
• With integrations a Customer enables, including via our API, webhooks, SDK and GBFS feeds. Public GBFS feeds publish vehicle availability and station status, not rider identity.
• For legal reasons, when required by law or valid legal process, or to protect the rights, property or safety of LINKA, our Customers or others. Where a request concerns Customer data, we will refer it to the Customer where the law allows.
• In a business transfer, such as a merger, acquisition, financing or sale of assets, subject to this policy.
• With your consent or at your direction.

We do not sell personal information, and we do not share it for cross-context behavioral advertising except through advertising cookies you can decline (see our Cookie Policy).

6. How long we keep information

• Customer data (telematics, location, check-ins, sensor readings, ride data): for the period the Customer sets or our contract with them requires, then deleted or de-identified. Unless a Customer sets a different period, detailed location history is kept for 13 months.
• Account data: while the account is active and for up to 3 years afterward for records, disputes and security.
• Sales and marketing contacts: until you opt out or the contact has been inactive for 3 years.
• Website analytics: up to 14 months.
• Financial records: as tax and accounting law requires, generally 7 years.

7. Security

We use administrative, technical and physical safeguards designed to protect personal information, including encryption in transit, access controls, role-based permissions in FleetView, expiring API tokens, signed firmware updates and logging. No system is perfectly secure. If we learn of a breach affecting your personal information, we will notify you or the relevant Customer as the law requires.

8. International transfers

We are based in the United States, have an engineering team in Mexico, and serve Customers worldwide. Personal information may be processed in the United States, Mexico and other countries. When we transfer personal information from the EEA, UK or Switzerland, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses and the UK Addendum.

9. Your rights and choices

Depending on where you live, you may have the right to: know or access the personal information we hold about you; correct it; delete it; receive a copy in a portable format; object to or restrict certain processing; withdraw consent; and opt out of the sale or sharing of personal information, targeted advertising or profiling.

• How to make a request: email privacy@linkafleets.com, call +1 307-303-7320, or use the privacy request form on our website. We will verify your identity before acting on most requests. You may use an authorized agent where the law allows.
• If your data is Customer data (for example, you drive a Customer’s vehicle or ride in a Customer’s bike program), we will forward your request to the Customer or ask you to contact them, and we will support their response.
• No discrimination. We will not deny service or charge different prices because you exercised your rights.
• Device and app controls. You can turn off location and Bluetooth permissions in your phone settings, though some app features (such as unlocking) will stop working.
• Marketing. Use the unsubscribe link in any email or contact us.
• Cookies and Global Privacy Control. Use the cookie settings link on our website. We honor Global Privacy Control browser signals as an opt-out of sale and sharing.
• Complaints. If you are in the EEA or UK, you may complain to your local data protection authority.

10. California privacy notice

This section applies to California residents and supplements the rest of this policy. In the past 12 months we collected the following categories of personal information, for the purposes and with the recipients described above: identifiers; customer records; commercial information; internet and network activity; geolocation data; professional or employment-related information (such as job title and the vehicle or route assigned by an employer); and audio, electronic or visual information (such as service photos). Precise geolocation is sensitive personal information; we use it only to provide the Services and for the other purposes permitted by California regulations, and not to infer characteristics about you. We do not sell personal information or knowingly sell or share the personal information of consumers under 16. California residents can make requests as described in “Your rights and choices.”

11. Children

Our Services are designed for businesses and adults. We do not knowingly collect personal information from children under 16. If you believe a child has given us personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy as our products and the law change. We will post the new version here with a new “Last updated” date and, for material changes, give notice through the Services or by email.

13. Contact us

LINKA Labs, LLC
Attn: Privacy
30 N Gould St #66855, Sheridan, WY 82801, USA

privacy@linkafleets.com · +1 307-303-7320