Last updated: June 11, 2025

1. Introduction

Welcome to truck8.ai ("we", "us", "our"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://truck8ai.com (the "Website") and use our services (collectively, the "Service").

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last updated" date of this Privacy Policy.

2. Data Controller

truck8.ai, located at Pater Beckerstraat 21, 4731AK Oudenbosch, The Netherlands, is the controller responsible for your personal data collected through the Service.

3. Definitions

Personal Data: Any information relating to an identified or identifiable natural person ('data subject').
Processing: Any operation or set of operations which is performed on personal data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Data Subject: An identified or identifiable natural person.
Controller: The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Processor: A natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
GDPR: The General Data Protection Regulation (EU) 2016/679.

4. Principles of Data Processing

We adhere to the following principles when processing your personal data:

Lawfulness, Fairness, and Transparency: We process personal data lawfully, fairly, and in a transparent manner.
Purpose Limitation: We collect personal data for specified, explicit, and legitimate purposes and do not further process it in a manner that is incompatible with those purposes.
Data Minimisation: We collect personal data that is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.
Accuracy: We take reasonable steps to ensure that personal data is accurate and, where necessary, kept up to date.
Storage Limitation: We keep personal data in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed.
Integrity and Confidentiality: We process personal data in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction, or damage.

5. What Personal Data We Collect

We may collect and process the following categories of personal data:

Identity Data: Includes first name, last name, username or similar identifier. When you create an account, we collect your name (optional for display name) and email address.
Contact Data: Includes email address and telephone numbers (if you provide them, e.g., in survey responses if configured by the survey creator, or in contact forms).
Account Data: Includes your email address and hashed passwords.
Survey Data:
- If you create surveys: survey title, questions, descriptions, and any custom "thank you" messages.
- If you respond to surveys: your answers to survey questions. Survey creators may also configure surveys to collect your name, email, or other contact details, in which case you will be informed before submission.
Financial Data: If you subscribe to a paid plan, our third-party payment processor (Stripe) will collect payment information necessary to process your transaction. We do not store your full credit card details. We may store information like your billing address, subscription status, and transaction history (excluding full payment details).
Technical Data: Includes internet protocol (IP) address, browser type and version, time zone setting and location (country level), browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our Service.
Usage Data: Includes information about how you use our Website and Service, such as pages visited, features used, and time spent on the Service.
Marketing and Communications Data: Includes your preferences in receiving marketing from us and your communication preferences. We will only send you marketing communications if you have opted-in.
Cookie Data: We use cookies and similar tracking technologies. For more information, please see our Cookie Policy.

We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data) unless you voluntarily provide it within free-text fields of surveys you create or respond to. We do not actively solicit this data.

6. How We Use Your Personal Data

We use your personal data for the following purposes:

To provide, operate, and maintain our Service.
To manage your account and your use of the Service.
To process your transactions and manage your subscriptions (if applicable).
To respond to your inquiries, comments, and provide customer support.
To send you service-related communications, including technical notices, updates, security alerts, and support messages.
To improve and personalize our Service, including understanding user preferences and troubleshooting.
To prevent fraud, ensure the security of our Service, and enforce our terms and conditions.
To comply with legal obligations and regulatory requirements.
For marketing purposes, if you have given your explicit consent (opt-in). You can withdraw this consent at any time.
To generate aggregated and anonymized statistical data to help us improve our Service.

7. Legal Basis for Processing Personal Data

We process your personal data based on the following legal grounds under the GDPR:

Performance of a Contract: Processing is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract (e.g., to provide you with the core services of our platform when you sign up).
Legitimate Interests: Processing is necessary for the purposes of our legitimate interests or those of a third party, except where such interests are overridden by your fundamental rights and freedoms (e.g., for fraud prevention, network and information security, or improving our services).
Consent: You have given us explicit consent to process your personal data for one or more specific purposes (e.g., for sending marketing communications or using non-essential cookies). You have the right to withdraw your consent at any time.
Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject.

8. Data Sharing and Disclosure

We do not sell your personal data to third parties.

We may share your personal data with the following categories of third parties:

Service Providers (Processors): We engage third-party companies and individuals to perform services on our behalf, such as website hosting (e.g., Firebase/Google Cloud), payment processing (e.g., Stripe), email delivery services (e.g., for contact form submissions and password resets), AI service providers for features like survey analysis (e.g., Google AI). These service providers only have access to the personal data necessary to perform their tasks and are contractually obligated to protect your data and use it only for the purposes for which it was disclosed.
Legal Authorities: We may disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company, your personal data may be transferred. We will notify you before your personal data is transferred and becomes subject to a different privacy policy.

International Transfers: Some of our service providers may be located outside the European Economic Area (EEA). When we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe (Standard Contractual Clauses).
Where we use providers based in the US, we may transfer data to them if they are part of the EU-U.S. Data Privacy Framework or a successor framework, which requires them to provide similar protection to personal data shared between Europe and the US.

9. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Account Data: We retain your account data as long as your account is active or as needed to provide you with the Service. You can request deletion of your account at any time.
Survey Data (including responses): This data is retained as long as the survey creator's account is active, or until the survey creator deletes the survey or specific responses.
Contact Data (from inquiries): We retain this data for as long as necessary to resolve your inquiry and for a reasonable period thereafter for follow-up or record-keeping.
Usage and Technical Data: May be retained for shorter periods for security and service improvement purposes, typically in an aggregated or anonymized form.

Upon expiration of the retention period, your personal data will be securely deleted or anonymized.

10. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include, but are not limited to, data encryption, firewalls, secure server facilities (provided by our hosting partners like Firebase/Google Cloud), and access controls.

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security. You are also responsible for keeping your account credentials confidential.

11. Your Data Protection Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

The right to access: You have the right to request copies of your personal data that we hold.
The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
The right to erasure (right to be forgotten): You have the right to request that we erase your personal data, under certain conditions.
The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions, particularly for direct marketing purposes.
The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
The right to withdraw consent: If we are processing your personal data based on your consent, you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of processing before the withdrawal.
The right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data infringes the GDPR. In The Netherlands, the supervisory authority is the Autoriteit Persoonsgegevens (https://autoriteitpersoonsgegevens.nl).

To exercise any of these rights, please contact us at info@truck8ai.com. We may need to request specific information from you to help us confirm your identity before responding to such requests. We will respond to your request within one month, as required by law.

12. Cookies and Similar Technologies

We use cookies and similar tracking technologies to track the activity on our Service and store certain information. For detailed information on the cookies we use and your choices regarding cookies, please see our Cookie Policy.

13. Children's Privacy

Our Service is not intended for use by children under the age of 16 ("Children"). We do not knowingly collect personally identifiable information from Children. If you are a parent or guardian and you are aware that your Child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from Children without verification of parental consent, we take steps to remove that information from our servers.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top. We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

15. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

By email: info@truck8ai.com
By mail: Pater Beckerstraat 21, 4731AK Oudenbosch, The Netherlands