← Back to Repatrack PRO

Privacy Policy

Last updated: 19 October 2026

This policy describes how Repatrack PRO (repatrack.pro) processes the personal data of its users in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Bulgarian legislation. It also covers the information site web.repatrack.pro, the Dispatcher PRO site towingdispatcher.pro and the calculator site tollcalculator.pro — all are run by the same controller and use the same analytics and advertising cookies described in the Cookie Policy.

1. Data controller

Kaloian Kantchev, owner of the platform (private individual, Bulgaria)
Email: [email protected]

2. What data we process

Account data:

• name, email, phone number
• password (stored in hashed form)
• profile photo (optional)

Request and service data:

• addresses, coordinates, routes
• vehicle information
• photos, offers, messages

Company data:

• company name, registration number, address
• description of services
• carrier documents (registration, insurance, licence), which may contain personal data (e.g. a national ID number, a signature). The original is visible only to the administrator and to the carrier itself; customers see only a copy in which sensitive data is covered.

Location data (live location):

• geographic coordinates (latitude/longitude)
• speed, direction (heading)
• accuracy
• timestamp

Location comes in two ways: from the driver's phone while the driver has sharing switched on, or from a GPS tracker fitted in the vehicle. A tracker sends its position whenever the vehicle is powered, and the position is linked to the driver currently assigned to that vehicle. On the shared map, a tracker's position is shown only while the driver or the carrier has marked them as on duty. The data is used for coordination between users, route visualisation, security and fraud prevention.

Technical data:

• IP address
• device and browser
• at registration: a technical device fingerprint and a bot check (Cloudflare Turnstile) — to protect against fake and mass sign-ups
• security and error logs

3. How we use the data

• creating and managing accounts
• providing platform features
• communication between users
• transport tracking (live location)
• security and fraud prevention
• sending notifications and system messages

4. Legal basis

• Contract – for use of the platform
• Legitimate interest – security and fraud prevention (including the check at registration and the automatic check of texts), showing carriers on the live map
• Legal obligation – accounting and legal requirements
• Consent – for analytics and marketing cookies

When a carrier tracks its own drivers, or a dispatcher receives requests through its own website or QR code, Repatrack PRO processes that data on behalf of the carrier or dispatcher. They are responsible for informing their employees and customers.

5. Who we share data with

Other users receive only the information you publish yourself and the data needed for a specific job. Besides them, the following providers process data. For those outside the EEA, the basis for the transfer is given.

Repatrack PRO does not sell personal data.

6. Visibility of data

Some information you publish (e.g. requests, offers, profile) may be visible to other users of the platform.

Location data is not public. It is visible only:

• to signed-in users on the live map — company, driver, vehicle and the position, while the driver is active; the contact phone is shown only on click, with a daily limit;
• to a customer the carrier has sent a tracking link — only for that job and while the link is valid;
• on the carrier's own website, if the carrier has enabled its map there — without names of people.

7. Retention periods

• account – as long as it exists; you can delete it at any time from your profile
• listings and vehicles in the garage – while the account is active; you can delete them at any time
• offers that were not accepted – deleted automatically 90 days after their last change
• accepted jobs and transport documents – for possible disputes and for accounting
• last known location – up to 90 days from the last update, then deleted automatically
• tracking links sent to customers – deleted 30 days after they expire
• notifications – up to 60 days
• payments and invoices – as required by accounting and tax law
• security and error logs – up to 30 days

What happens to your data when you delete your account is described on the Delete Account page.

8. Your rights

You have the right to:

• access your data
• rectification
• erasure
• restriction of processing
• data portability
• objection
• withdrawal of consent

You can download a copy of your data (a JSON file) yourself from Profile → Delete → Download my data.

Contact: [email protected]. We reply within one month.

9. Automatic content check

Free texts you publish (descriptions, notes, reviews) are checked automatically by the platform for contact details where they are not allowed and for profanity. A violation gives the account a warning, and repeated violations can restrict what the account can do. If you think a decision is wrong, write to [email protected] and a person will review the case.

10. Security

• encrypted connection (HTTPS)
• passwords stored only in hashed form
• roles and access rights; administrator access requires two-factor authentication
• original documents are stored with restricted access and opened only through the platform
• bot protection and request rate limits

11. Complaints

Commission for Personal Data Protection (CPDP) — Bulgaria
www.cpdp.bg
[email protected]

You can also lodge a complaint with the supervisory authority in the country where you live or work.

12. Changes

This policy may be updated as needed. The current version is always published on the website.