SpatioWorld Technologies Private Limited (“SpatioWorld”, “Company”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, process, protect, and disclose personal data when you use:

• the SpatioSafe website, available at https://spatiosafe.com and https://www.spatiosafe.com;
• the SpatioSafe web application, available at https://app.spatiosafe.com;
• the SpatioSafe Android application;
• the SpatioSafe iOS application;
• the SpatioWorld One platform, available at https://one.spatioworld.com, through which accounts, subscriptions, and billing are managed; and
• our APIs, customer portal, and related services (collectively, the “Services”).

This Privacy Policy is drafted to comply with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and rules made thereunder, and other applicable Indian law.

1. About Us — Data Fiduciary

Under the DPDP Act, SpatioWorld Technologies Private Limited acts as the “Data Fiduciary” in respect of the personal data described in this Policy, and you, as a user of the Services, are the “Data Principal”.

SpatioWorld Technologies Private Limited

Vantage Capital 805, SR NO 263/264/A/2,

Hinjawadi, Infotech Park (Hinjawadi),

Pune, Maharashtra, India, 411057

Product Website: https://spatiosafe.com

Web Application: https://app.spatiosafe.com

Billing Platform (SpatioWorld One): https://one.spatioworld.com

Company Website: https://spatioworld.com

General Enquiries: contact@spatioworld.com

Technical Support: support@spatioworld.com

Phone: +91 89565 88558

2. Scope

This Privacy Policy applies to all Users of SpatioSafe, including website and web-application visitors, registered users, personal safety users, fleet operators, business customers, and enterprise customers.

3. Information We Collect

Account Information: full name, email address, password (stored only as a secure cryptographic hash), phone number, and company name (where applicable).

Billing Information: billing name, billing address, GST/VAT details (where applicable), and payment-related records. Depending on how you purchase, payments are made through the SpatioWorld One platform (https://one.spatioworld.com, via Razorpay Software Private Limited) or through Google Play Billing or Apple In-App Purchase. Payment card and UPI details are processed directly by these payment processors; we do not store complete card details on our own servers. Your subscription and billing records are consolidated and accessible through the SpatioWorld One platform regardless of purchase channel.

GPS and Location Data: real-time and historical GPS location, latitude and longitude, speed, heading, altitude, timestamp, geofence events, and Device status. Location data is collected solely to provide GPS tracking, personal safety, and fleet/asset-management features that you have chosen to use.

Device Information: device identifier, operating system, browser type, IP address, time zone, language, application version, advertising identifier, crash reports, and diagnostic information.

Usage Information: login history, features used, API requests, error reports, and session information.

Cookies and Similar Technologies: our web application may use essential, authentication, session, preference, and security cookies, and (where advertising is shown) advertising identifiers. See Sections 8 and 17 below.

4. How We Collect Information

We collect information directly from you when you register or contact us; automatically when you use the Services; from GPS Devices linked to your account; through cookies and similar technologies; and from trusted service providers involved in authentication, billing, hosting, and support.

5. Notice and Purpose of Processing

We process your personal data for the following purposes:

• creating and managing your account;
• providing GPS tracking, personal safety, fleet, and asset-management features;
• displaying live and historical location information you have chosen to track;
• providing maps and geocoding services;
• processing subscriptions and payments;
• delivering customer support;
• showing advertisements (where applicable) and measuring their performance;
• improving and securing the Services;
• detecting fraud and unauthorized access; and
• complying with our legal obligations.

6. Consent and Its Withdrawal

By using SpatioSafe, you consent to the processing of your personal data as described in this Privacy Policy. Where required by law, we seek your specific consent before collecting GPS location data, sending marketing communications, enabling optional or advertising cookies, or processing personal data for a purpose beyond providing the Services.

You may withdraw your consent at any time, as easily as you gave it, by contacting us using the details in Section 1 or through your account or application settings. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal, and may result in certain features of the Services becoming unavailable to you.

7. Sharing of Personal Data

We do not sell or rent your personal data to any third party.

We may share personal data only with:

• Contabo GmbH, our cloud hosting provider;
• Razorpay Software Private Limited, Google Play Billing, and Apple In-App Purchase, for payment processing;
• Google AdMob, for advertising (see Section 8 below);
• email and SMS/notification providers, for transactional communications;
• infrastructure, security, and customer-support providers acting on our instructions;
• government or regulatory authorities, where legally required; and
• a successor entity, in the event of a merger, acquisition, or corporate restructuring.

Each such recipient is bound by contractual, statutory, or its own privacy obligations governing the personal data it processes on our behalf or, in the case of Google AdMob, as an independent controller for advertising purposes.

8. Advertising (Google AdMob)

We use Google AdMob to display advertisements within the Application and/or web application. In connection with this, Google AdMob may collect and process information such as your advertising identifier, IP address, general device information, and app-usage data, to select, serve, and measure advertisements, and — where you have consented or as otherwise permitted by law and platform policy — to personalize the advertisements shown to you.

Google acts as an independent data controller in respect of the information it processes for advertising purposes, under Google’s own Privacy Policy (https://policies.google.com/privacy). We do not sell your personal data to Google; our relationship with Google AdMob is limited to the display and measurement of advertisements within the Services.

You can manage ad personalization through your Device settings:

• Android: Settings → Google → Ads → Opt out of Ads Personalization (or reset your advertising ID);
• iOS: Settings → Privacy & Security → Tracking (App Tracking Transparency), and Settings → Privacy & Security → Apple Advertising → Personalized Ads.

We do not knowingly direct advertising to, or collect data for behavioural advertising from, children (see Section 16).

9. Open-Source Software Components

The Services are built using certain open-source software that we operate ourselves, including Traccar, PostgreSQL, Photon Geocoding, Martin Vector Tiles, and Protomaps/PMTiles. These components run on our own infrastructure and are not independent third parties that receive your personal data; each remains subject to its own open-source license.

10. Data Storage and Hosting

Your information is hosted on servers operated by Contabo GmbH, including infrastructure located in India. Our arrangement with Contabo GmbH is governed by a Data Processing Agreement under Article 28 of the GDPR (executed 23 October 2025), which additionally incorporates the EU Standard Contractual Clauses (Module 3) as a safeguard for any incidental processing that may occur outside India through Contabo’s wider corporate group.

Information stored may include account information, GPS history, Device information, billing records, login history, and audit/system logs.

11. International Data Transfers

The DPDP Act permits the transfer of personal data outside India except to countries specifically restricted by the Central Government. Where any of our service providers (including Contabo GmbH, Google, or Razorpay) process personal data outside India, we require appropriate contractual and technical safeguards to be in place, consistent with applicable law.

12. Data Retention

We retain personal data only for as long as necessary to provide the Services, maintain your account, fulfil our contractual obligations, meet legal or regulatory requirements, resolve disputes, and enforce our agreements. Billing and financial records are retained for the period required under the Companies Act, 2013 and applicable tax law (currently up to eight years). When personal data is no longer required for these purposes, it is securely deleted or anonymized.

13. Security Measures

We implement safeguards including HTTPS/TLS encryption, secure password hashing, role-based access controls, firewalls, server monitoring, timely security updates, and backup and disaster-recovery procedures. While we use commercially reasonable measures, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

14. Your Rights as a Data Principal

Subject to the DPDP Act and other applicable law, you have the right to:

• access: obtain a summary of the personal data we process about you and of the processing activities undertaken;
• correction and erasure: request correction, completion, updating, or erasure of your personal data;
• grievance redressal: have your grievances regarding processing addressed by us, and, if unresolved, to approach the Data Protection Board of India;
• nomination: nominate another individual to exercise your rights under the DPDP Act in the event of your death or incapacity; and
• withdrawal of consent: withdraw your consent at any time, as described in Section 6.

To exercise any of these rights, please contact us using the details in Section 1 or Section 20.

15. Personal Data Breach Notification

In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals in the manner and within the timelines prescribed under the DPDP Act and its rules.

16. Children’s Privacy

The Services are intended for individuals aged 18 years or above. Under the DPDP Act, a “child” means an individual who has not completed the age of eighteen years. We do not knowingly collect personal data from children, and we do not track, profile, or serve targeted advertising to children. If we become aware that we have inadvertently collected a child’s personal data without verifiable parental or guardian consent, we will delete it promptly.

17. Cookie Management

You can control or disable cookies through your browser settings; disabling certain cookies may affect the functionality of the web application. On mobile Devices, you can reset or limit your advertising identifier through the settings described in Section 8.

18. Third-Party Links

The Services may contain links to, or integrations with, third-party websites or services (for example, app stores or payment gateways) that are not owned or controlled by us. We are not responsible for the privacy practices of any third party, and we encourage you to review their privacy policies separately.

19. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top of this document reflects the most recent revision, and the latest version will always be published within the Application and at https://spatiosafe.com. Continued use of the Services after an update constitutes your acceptance of the revised Privacy Policy.

20. Contact Us

For questions regarding this Privacy Policy, please contact:

SpatioWorld Technologies Private Limited

Vantage Capital 805, SR NO 263/264/A/2,

Hinjawadi, Infotech Park (Hinjawadi),

Pune, Maharashtra, India, 411057

Product Website: https://spatiosafe.com

Web Application: https://app.spatiosafe.com

Billing Platform (SpatioWorld One): https://one.spatioworld.com

Company Website: https://spatioworld.com

General Enquiries: contact@spatioworld.com

Technical Support: support@spatioworld.com

Phone: +91 89565 88558

21. Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, you may contact our Grievance Officer with any concerns regarding the processing of your personal data:

Grievance Officer: Vaibhav Patel

Email: vaibhav@spatioworld.com

We will acknowledge your grievance within twenty-four (24) hours of receipt and endeavour to resolve it within fifteen (15) days, or such other timeline as may be prescribed under applicable law. If you remain dissatisfied, you may approach the Data Protection Board of India.