Privacy Policy
This document is available in English and Hebrew. If there is any difference between them, the English version governs.
This Privacy Policy explains how 4X4Ops.com (reg. no. ), Israel ("4X4Ops", "we") handles personal data in the 4X4Ops web application, website and support. We wrote it to be clear and short. We do not sell personal data, we do not show ads, and we do not use tracking or advertising cookies.
1. Who is responsible
- Account data (your name, email, company name, role, sign-in and billing status): 4X4Ops is the controller.
- Fleet data your company enters (vehicles, services, drivers' and technicians' names and phone numbers, notes): your company is the controller and 4X4Ops processes it on your company's behalf, under our Data Processing Agreement.
- Payment data: Paddle.com, our Merchant of Record, is the controller of card and billing details it collects. See Paddle's privacy notice.
2. What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, password (stored only as a secure hash by our authentication provider), company name, team role | Create and secure your account, let your team work together | Contract |
| Fleet data you enter (vehicles, plates, VIN, meters, services, repairs, parts, costs, trails, laps, drivers, technician contacts) | Provide the Service to your company | Contract / your company's instructions |
| Subscription details we receive from Paddle (customer and subscription IDs, plan, status, quantity, renewal date, currency) | Activate and manage your plan | Contract |
| Acceptance of Terms and its date | Record your consent and the version you accepted | Legal obligation / legitimate interest |
| Technical data (IP address, device and browser type, error and security logs) processed by our hosting provider | Operate, secure and troubleshoot the Service | Legitimate interest |
| Messages you send to support@4x4ops.com | Answer you and provide support | Contract / legitimate interest |
We do not use your data for automated decision-making or profiling. We may send service emails (for example, password reset, invitations, billing notices). We will only send marketing emails if you opt in, and you can unsubscribe at any time.
3. Storage on your device
The app stores some data in your browser (language, the current trail, unsent track-panel drafts and an offline copy of your company's data so the app works without signal). This is strictly necessary for the Service, it is not used for tracking, and you can remove it at any time by clearing this site's data in your browser.
4. Who processes data for us
| Provider | Service | Location |
|---|---|---|
| Google (Firebase / Google Cloud) | Hosting, database, authentication, server functions, email delivery for sign-in | EU (europe-west) data region; Google may process limited data globally under its data processing terms and Standard Contractual Clauses |
| Paddle.com Market Ltd | Checkout, payments, invoices, sales tax (independent controller) | United Kingdom / global |
We will update this list before adding a new provider that processes personal data. Transfers outside Israel and the EEA rely on adequacy decisions or Standard Contractual Clauses.
5. How long we keep data
- Account and fleet data: while your company account exists. When a company is deleted (Settings → Privacy), its data is deleted from our live database immediately; copies in our providers' backups and logs expire within their standard cycles (typically up to 30 days).
- If you leave a team, your user account and membership are deleted; data your company recorded (for example, a service you logged) stays with your company.
- Billing records are kept by Paddle as required by tax law.
- Support emails: up to 3 years after the conversation ends.
6. Security
Data is encrypted in transit (HTTPS) and at rest. Each company's data is isolated, and access is enforced on the server according to team roles. Passwords are handled by our authentication provider and never stored in plain text. See our Security page. If a data breach is likely to put your rights at risk, we will notify affected customers and the relevant authority as required by law.
7. Your rights
Depending on where you live (including under the Israeli Protection of Privacy Law and the EU/UK GDPR), you may ask to access, correct, delete, export or restrict the use of your personal data, and object to processing based on legitimate interest. Many of these you can do yourself in the app: edit your details, export all data (Settings → Backup), delete your account or company (Settings → Privacy). For anything else write to support@4x4ops.com; we will answer within 30 days. If your data is part of your employer's fleet data, please contact your employer first; we will assist them. You may also complain to the Israeli Privacy Protection Authority or to your local data-protection authority.
8. Children
The Service is intended for businesses and is not directed at anyone under 18.
9. Changes
We will post updates here with a new date. For material changes we will notify you in the app or by email.
10. Contact
4X4Ops.com, Israel · support@4x4ops.com