Last updated: 2026-10-06
This Privacy Policy explains how Intellitech SpA ("Intellitech," "we," "us") collects, uses, discloses, and protects personal data in connection with our website intellitech.cl and the Intellitech VOS platform. It distinguishes the situations in which we act as data controller from those in which we act as data processor on behalf of our fleet-operator customers. It is written to comply with Chilean Law 19.628 on the Protection of Private Life and, from December 2026, with Chilean Law 21.719, and to inform data subjects in other jurisdictions where we or our customers operate.
1. Introduction
Intellitech SpA is a Chilean company, headquartered in Santiago, that provides Intellitech VOS, a fleet operations platform used by transport, logistics, rental, and services companies. This Policy describes what personal data we handle, the purposes for which we handle it, the legal bases under Chilean law, the security measures we apply, and the rights available to the individuals whose data we hold.
We apply this Policy to visitors to our website, prospective and current customers, users of Intellitech VOS, and the drivers, employees, and third parties whose data our customers upload to the platform. Where we act as data processor for a customer, this Policy sits alongside the Data Processing Addendum embedded in the subscription contract, which prevails on the specific instructions the customer gives us.
2. Before You Read
The Policy applies globally, but different rules govern different data subjects depending on where they are located and which relationship they have with Intellitech.
If you interact with our marketing site or contact us directly for information, we act as controller regardless of where you are located, and the sections addressed to controller processing apply to you. The subsections below identify the local rules that apply to you depending on your location.
2.1. Chile
If you are located in Chile, your rights arise under Chilean Law 19.628 on the Protection of Private Life and, from December 2026, Chilean Law 21.719. Intellitech is established in Santiago and answers requests under those statutes as described in Sections 4.10 and 10.
2.2. Other Latin American countries
If you are located in another Latin American country in which our customers operate, such as Ecuador or Brazil, the equivalent local statute applies to you, for example the Ecuadorian Organic Law on the Protection of Personal Data or the Brazilian LGPD. Where Intellitech acts as processor for your fleet-operator, that customer is data controller of your data and is your primary point of contact; Intellitech assists the customer in responding within the time frames set by the applicable local law.
2.3. European Union
Intellitech does not target the European Union market: intellitech.cl is not marketed in the EU, and Intellitech VOS is sold to fleet operators established in Chile and other Latin American countries. Nonetheless, where a visitor located in the European Union interacts with our marketing site or contacts us directly, we treat that visitor's personal data with safeguards equivalent to those we apply under Chilean Law 21.719: lawful basis for each purpose, transparency about the categories collected, retention limited to what Section 4.5 states, security as described in Section 4.6, and the rights of access, rectification, erasure, portability, objection, and withdrawal of consent described in Section 4.10. Requests reach us at contacto@intellitech.cl and are answered within the thirty-day term set out in that Section. Any transfer of personal data outside Chile takes place under Standard Contractual Clauses as described in Section 4.7.
3. Purpose and Scope
Intellitech plays two distinct roles in relation to personal data, and the applicable rules follow the role rather than the platform.
When we decide the purposes and means of processing, we act as data controller. This is the case for personal data we collect from visitors to intellitech.cl, from prospective customers who write to us through the contact form or by email, from persons who contact us for support outside a customer contract, and from our own contractual counterparties.
When a fleet-operator customer uses Intellitech VOS to manage its own operation, that customer decides the purposes and means of processing, and Intellitech acts as data processor under written instruction contained in the subscription agreement and its Data Processing Addendum. In that role we do not use the customer's data for our own purposes beyond what is strictly necessary to operate, secure, and improve the Service.
4. Intellitech as Data Controller
This part of the Policy applies whenever Intellitech determines why and how personal data are processed, principally in relation to our website, marketing activity, and direct commercial contact.
4.1. Personal Data We Collect
We collect the data you give us when you complete the contact form on intellitech.cl, email us, call us or message us on WhatsApp. The contact form (/contact) asks for your name, email address, company (optional), phone number (optional) and your message; it sends them by email to contacto@intellitech.cl through Intellitech's own mail server, and we use them only to answer your enquiry and to follow up commercially. intellitech.cl has no newsletter and uses no analytics, advertising or tracking tools.
Our hosting provider automatically records minimal technical data for each request (IP address, date and time, requested page and browser type) for security and operation. Where relevant, we collect data generated in the course of a commercial relationship, such as contract terms, invoicing information, and support-request content.
4.2. Typical Categories
The personal data we hold as controller fall into three typical categories: professional contact data of visitors and prospects, the content of their communications (including messages sent through the contact form), and technical server-log data. We do not ask for sensitive data in the contact form.
4.3. How We Use the Data
We use contact data to respond to your enquiry, provide the information you request, and, where you have consented or where there is a legitimate commercial interest, follow up on that enquiry.
We use technical data only to operate and secure the website, prevent abuse, and diagnose problems. We do not sell your personal data, and we do not use it for automated decisions that produce legal effects on you.
4.4. Legal Basis
Our legal bases for processing arise under Chilean Law 19.628 on the Protection of Private Life and, from December 2026, Chilean Law 21.719. The principal bases we rely on are your consent, the execution of a contract to which you are a party or pre-contractual steps taken at your request, our compliance with a legal obligation, and our legitimate interest in operating and promoting our business, balanced against your rights and expectations.
Where the data subject is located in another jurisdiction, the equivalent local legal basis applies, and we honor the rights conferred by that local law.
4.5. Retention
We retain marketing enquiries, including those received through the contact form, for up to twenty-four months from the last contact, or for a shorter period if you ask us to erase them earlier. Server logs are kept for a limited period and then deleted. Customer account data is retained for the term of the subscription plus any statutory audit period, which in Chile is typically six years for tax and accounting purposes.
4.6. Security
We protect personal data with technical and organizational measures proportionate to the risk. Personal data in transit is protected with TLS 1.2 or higher; personal data at rest is protected with AES-256. Backups are held across multiple data centers and are encrypted before leaving the primary region.
Access to the platform is governed by role-based access control, with per-module permissions, and every mutation is written to an independent, append-only audit log. Multi-factor authentication is available and can be enforced per role. In the event of a security incident, we escalate internally within twenty-four hours and, where the relevant law requires it, notify the competent regulator within seventy-two hours, in line with the baseline set by Chilean Law 21.719.
4.7. International Transfers
Personal data are stored primarily in cloud infrastructure in the South America (São Paulo) region. Certain processing operations rely on providers established in the United States, including those supporting voice services and infrastructure management services. Transfers of personal data to those countries take place under Standard Contractual Clauses, on the basis of customer instruction, and are disclosed to data subjects as required by Chilean Law 21.719.
4.8. Cookies and Similar Technologies
intellitech.cl does not use cookies or similar technologies for analytics, advertising or tracking, so no consent banner is shown. If we add non-essential cookies in the future, we will update this Policy and ask for your consent first.
4.9. Third-Party Sites
Our website may contain links to third-party sites operated by partners, integrators, or informational sources. Those sites are governed by their own privacy policies, and we do not accept responsibility for their content or their handling of personal data. We recommend that you review the privacy policy of any third-party site you visit through a link on intellitech.cl.
4.10. Your Rights and How to Exercise Them
Under Chilean Law 19.628 you have the rights of access, rectification, cancellation, and opposition (ARCO). Under Chilean Law 21.719 you additionally have the rights of data portability, to object to solely automated decisions, and to withdraw consent where consent is the legal basis of the processing. You may also lodge a complaint with the Agencia de Protección de Datos Personales once it is operational under Chilean Law 21.719 and, until then, before the competent Chilean civil courts.
To exercise any of these rights, write to contacto@intellitech.cl. We respond within thirty days of receiving the request, a term that may be extended once by a further thirty days where the request is complex or where we handle a large number of requests, in which case we will tell you within the initial term.
4.11. Minors Under Fourteen
Intellitech does not knowingly collect personal data from children under fourteen years of age. Our website and platform are directed at professional users of fleet-operator customers. If we become aware that we have received data from a child under fourteen without the authorization of the person exercising parental authority, we will erase it as soon as we identify it.
4.12. Disclosure to Third Parties
We disclose personal data to competent authorities where we are required to do so by Chilean law or by a valid order issued by a competent authority, and to our professional advisers under a duty of confidentiality.
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of our assets, personal data may be transferred to the successor entity, subject to the continuing application of a privacy policy substantially equivalent to this one. We do not sell personal data, and we do not share it with third parties for their own independent marketing purposes.
5. Intellitech as Data Processor
When a fleet-operator customer subscribes to Intellitech VOS, that customer acts as data controller of the personal data uploaded to or generated by the platform, and Intellitech acts as data processor under the customer's documented instructions. The scope and duration of processing, the categories of data, and the categories of data subject follow the customer's use of the Service and the Data Processing Addendum within the subscription contract.
5.1. Categories Processed
On behalf of customers, we process vehicle telemetry such as GPS positions, speed, heading, engine hours, fuel level, odometer readings, and CAN-bus signals; optional dashcam video and event clips; driver identity data, including name, national identifier (RUT in Chile), photo, and driver license; driver behavior data, including harsh braking, speeding, and idling events; work orders and maintenance records; the customer's own CRM records, including contacts, deals, and tickets; and support-channel content such as WhatsApp messages and voice-call recordings and transcripts.
Where the customer enables the Camera ID module, we process biometric templates derived from driver facial images strictly for the purpose of driver assignment, and only for customers who explicitly opt in.
5.2. How We Process
We process customer data only on documented instructions from the customer, including on international transfers, unless a Chilean legal obligation requires otherwise, in which case we inform the customer before processing unless the law forbids that notice. Personnel with access are bound by written confidentiality obligations. We assist the customer, taking into account the nature of the processing, in responding to data-subject requests, in fulfilling security and breach-notification duties, and in carrying out data-protection impact assessments where required.
5.3. Retention by Type
Vehicle timeseries positions are retained for twenty-four months on a rolling basis. Application logs are retained for six months on a rolling basis. Dashcam video, voice-call recordings, and voice-call transcripts are retained for ninety days by default, and the customer may configure a shorter or longer term within the limits allowed by law.
Biometric data captured by the Camera ID module is retained for ninety days after the driver is deactivated or the feature is disabled. Customer account data is retained for the term of the subscription plus any statutory audit period, typically six years for Chilean tax and accounting requirements.
5.4. Data-Subject Rights
Where a data subject exercises a right in relation to data we process on behalf of a customer, we direct the request to the customer, who is the controller and the primary point of contact. We assist the customer in responding within the time frames set by Chilean Law 19.628 and Law 21.719, and by the equivalent laws applicable to customers established outside Chile, using appropriate technical and organizational measures.
5.5. Sub-Processors and Transfers
We engage sub-processors only under written contracts that impose data-protection obligations equivalent to those we owe the customer, and we remain liable to the customer for their performance. The list of sub-processors is described in Section 7 and made available on request.
International transfers of customer data mirror the primary storage arrangement in Section 4.7. Where processing under a specific module requires transfer to a provider established outside Chile, we rely on Standard Contractual Clauses and on the customer's instruction, and we disclose the transfer to the customer.
6. Biometric Data (Camera ID)
The Camera ID module uses facial-recognition templates to assign trips to a specific driver. It is off by default and is enabled only when the customer explicitly opts in through the platform. The customer is data controller of the biometric templates and of the underlying facial images and is responsible for collecting the driver's informed consent under the law applicable to the driver.
As processor, we store the biometric templates in the same encrypted infrastructure described in Section 4.6, we do not use them for any purpose other than driver assignment within the customer's own tenant, and we do not disclose them to any other customer. Biometric data is retained for ninety days after the driver is deactivated or the feature is disabled, and it is deleted at the end of that period unless the customer instructs a shorter term.
7. Sub-Processors
The following list is illustrative, non-exhaustive, and correct as of the last-updated date of this Policy. A cloud infrastructure provider supplies the primary infrastructure in the South America (São Paulo) region. A business messaging channel (WhatsApp) carries support and driver communications, on an opt-in basis per module. A voice service provider supplies the speech-synthesis model used for voice generation on the voice channel; an alternative provider supplies a text-to-speech and speech-to-text engine for the same channel; in both cases data leaves Chile for the United States. The CRM engine is deployed as self-hosted software within our cloud infrastructure. The telematics core is deployed as self-hosted open-source software within our cloud infrastructure. A payment provider processes payments for tenants that enable the payment module.
We update the list when we add or replace a sub-processor. The current list is available on request to contacto@intellitech.cl.
8. Data Protection Contact
For any question, request, or complaint concerning the handling of your personal data by Intellitech, write to us. Until Law 21.719 requires us to appoint a Data Protection Officer, data-protection queries are handled at contacto@intellitech.cl. If that appointment becomes mandatory, we will update this section and keep the same contact address.
9. Changes to This Policy
We may update this Policy to reflect changes in our operations, in the sub-processors we rely on, or in the applicable law, in particular as Chilean Law 21.719 comes into force in December 2026. When we make a material change, we update the last-updated date at the top of this document and, where the change materially affects your rights, we notify you through the website or, where appropriate, by email. We recommend that you review this Policy periodically.
10. How to Contact Us
Intellitech SpA is established in Santiago, Chile. You can reach us at contacto@intellitech.cl for any question about this Privacy Policy, to exercise your data-protection rights, or to request the current list of sub-processors. We answer data-subject requests within thirty days of receipt, extendable once by a further thirty days where the request is complex, and we will inform you of any extension within the initial term.
Where you wish to escalate a complaint judicially, the competent forum is the ordinary courts of Santiago, Chile, without prejudice to your right to lodge the complaint before the Agencia de Protección de Datos Personales once it is operational under Chilean Law 21.719.