Privacy policy
Last updated
Who we are
Pipit is a vehicle tracking and compliance service operated by Resolve Security in New Zealand. In this policy, “we” and “us” mean Resolve Security, and “you” means the business that holds a Pipit account and the people who use it.
We handle personal information in accordance with the Privacy Act 2020.
The part that matters most
Vehicle location data is personal information about the person driving. A record of where a vehicle went, when it stopped and how it was driven says a great deal about an individual, and we treat it accordingly.
If you use Pipit to track vehicles driven by your staff, you are responsible for telling them, for having a lawful and fair reason to do it, and for meeting your own obligations as an employer. We provide the tool. We cannot give that notice on your behalf, and using Pipit does not discharge that duty.
What we collect
- Account information
- Names, email addresses, phone numbers and passwords for the people you give access to. Passwords are stored hashed, never in readable form.
- Vehicle and tracker information
- Vehicle names and registrations, tracker serial numbers, vehicle types, and the compliance dates you enter such as warrant, certificate of fitness, registration and servicing schedules.
- Location and telemetry
- Position, time, speed, direction, odometer and ignition state reported by the tracker. Depending on the unit and the vehicle, this may also include engine diagnostics, battery voltage and fault codes.
- Driving events
- Harsh braking, harsh acceleration, harsh cornering, speeding and idling, used for the driver scoreboard.
- Usage information
- Sign-in times and basic technical logs kept for security and fault-finding.
Why we collect it
- To show you where your vehicles are and where they have been.
- To remind you before a warrant, certificate of fitness, registration or service falls due.
- To send the alerts you have asked for.
- To produce the reports and driver scores you use.
- To keep your account secure and to diagnose faults.
- To bill you.
We do not sell your data. We do not share it with advertisers. We do not use it to build profiles for anyone other than you.
Who can see it
Your data is visible to the people you grant access to, and to no other Pipit customer. Access is controlled per person: a customer sees only the vehicles, drivers and sites granted to them.
Our staff can access your data only where it is necessary to support the service, investigate a fault or meet a legal obligation.
Where it is held
Your data is stored on servers in Auckland, New Zealand. It is not hosted offshore.
Some limited information does cross borders in the ordinary course of running the service:
| Provider | What reaches them | Where |
|---|---|---|
| Postmark | Alert and notification emails, including the recipient address and the vehicle and event the alert concerns | United States |
| Cloudflare | Web traffic passes through their network to reach us, including IP addresses | Global network |
| LINZ Basemaps | Map tile requests made by your browser. LINZ does not receive your vehicle data | New Zealand |
How long we keep it
Location history and driving events are kept for three years, then deleted. Account records are kept while your account is open and for a reasonable period afterwards to meet tax and legal obligations.
If you close your account you can ask us for an export of your data before it is removed.
Keeping it safe
- Traffic between your browser and Pipit is encrypted.
- Passwords are stored hashed.
- Access is limited to the people you grant it to.
- Servers are firewalled and kept patched.
No system is perfectly secure. If a privacy breach occurs that is likely to cause serious harm, we will notify you and the Office of the Privacy Commissioner as the Privacy Act requires.
Your rights
You can ask us what personal information we hold about you, ask for a copy, and ask us to correct it if it is wrong. Write to [email protected] and we will respond within 20 working days.
If a driver asks us directly for information held about them and that information belongs to your account, we will normally direct them to you, because you hold it.
Cookies
The Pipit app uses a session cookie to keep you signed in. It is required for the service to work. This website does not use advertising or tracking cookies.
Complaints
If you are unhappy with how we have handled your information, tell us first at [email protected]. If we cannot resolve it, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.
Changes
If we change this policy we will update the date at the top. If a change materially affects how we handle your information, we will tell account holders directly rather than relying on you noticing.