Privacy at SOSDash
Version: 2026-10-09-test-v3 · 09-10-2026
Draft for testing. The legal provider, legal bases, supplier agreements and additional retention periods will be finalised before production.
Responsibility
SOSDash provides SOS software to organisations. For SOS data, your organisation generally acts as controller and SOSDash as processor. SOSDash may be controller for its own customer administration and security. The provider’s legal name and address have not yet been established. Contact your organisation about SOS data, or info@sosdash.com for SOSDash enquiries.
SOS data
Vehicle use does not require a personal driver account. Alerts include an alert identifier and time, available position, capture time, source and accuracy. SOSDash associates the alert with the organisation, device and vehicle. Your organisation may identify a driver through scheduling even without a name in the alert.
Location
While the SOS screen is open, the app may determine a GPS or network position locally. Without SOS, that position is not sent to SOSDash. During SOS, location is normally updated once a minute, including in the background. During SOS, the device also sends a status request with alert ID and time about every 10 seconds. Tracking starts with a 60-minute deadline; authorised portal users can extend it by 60 minutes at a time. Stopping, closing or expiry stops server storage. The device stops SOS tracking when it receives that status; local positioning may continue while offline. Android and device services may also process network positioning.
Wi-Fi and maps
Without a usable direct position, up to 20 Wi-Fi access-point identifiers with signal strength and observation age may be sent through SOSDash to Google Geolocation. The message contains no Wi-Fi passwords or network names. The portal uses Google Maps, which may process location, browser and connection data.
Recipients
Authorised organisation users can view alerts. If email is enabled, configured recipients receive organisation name, vehicle code, registration if entered, device name, time, position, source, accuracy, alert ID and map link. That link does not require SOSDash login. Your organisation manages recipients.
Other data and suppliers
We also process portal accounts, email addresses, roles, contacts, device and licence history and necessary change and delivery logs. Login history includes email, role and observed timestamps. We use Supabase, Vercel, Resend and Google. The database is in eu-west-1; this does not establish that all processing remains in the EEA. Supplier roles, contracts and international transfer safeguards require finalisation.
Purpose and legal basis
SOS data supports emergency assistance, response and necessary reconstruction. Your organisation must establish a legal basis, demonstrate necessity and inform all users. Appropriate bases for our own customer and security processing will be documented. “Understood” acknowledges information; it is not GDPR consent. The reviewed SOS functions do not profile people or make automated decisions with legal effects.
Retention
In TEST, GPS and network positions are cleared from day 59 (target: within 60 days). Wi-Fi positions and positions with no confirmed source are cleared after 29 days. SOS incident metadata without coordinates is normally retained for 90 days. Ongoing SOS tracking and documented limited exceptions are protected, except for the Wi-Fi supplier limit. Stored email content containing coordinates is scrubbed; recipients’ emails, exports and backups are separate. Updated Android test builds prune local SOS records after 60 days during use; older versions may retain them for 90 days.
Security and rights
We use encrypted transport, device authentication, organisation-based access and portal MFA. Depending on the legal basis, you may request access, correction, deletion, restriction, objection or portability. Contact your organisation for SOS requests; SOSDash assists. You may complain to the Dutch Data Protection Authority. Without Android location access, an SOS may be sent without a position.