This is a courtesy translation. If anything is unclear, the Italian version prevails. Read the Italian version
Privacy Policy
Last updated: 2 November 2026
This policy explains how Visla processes personal data when you use the vislagps.com website, the Visla GPS app, the web app and Visla trackers. It also applies to people who carry a tracker or drive a vehicle tracked with Visla.
In brief
- We use data to show you where your devices are, alert you to the events you have chosen and manage your subscription.
- Recorded locations are deleted after 30 days.
- Servers and backups are in Italy, in Milan.
- We do not sell data. We do not use locations for advertising or commercial profiling.
- You can ask at any time to see, correct or delete your data: write to info@visla.it.
Data controller
Visla S.R.L.S. — Via Garibaldi 25, 05018 Orvieto (TR) — VAT no. 01738860558
Email: info@visla.it | PEC (certified email): visla@pec.visla.it
We have not appointed a data protection officer (DPO), because for now it is not mandatory. For any privacy question, write to info@visla.it.
What data we process
- Account: name, email, phone, password (stored only in encrypted form with a one-way algorithm), language, time zone, date you accepted the terms. If you sign in with Apple, Google or Facebook, we receive your name and email from them.
- Devices: IMEI code, SIM, model, the name you give the device, status and battery.
- Locations: coordinates, time, speed, direction and calculated address, sent by the tracker.
- Events and alerts: entries into and exits from zones, alarms, ignition on, departures and stops, with time and place. Text of the notifications we send you.
- Zones: name and area of the zones you create (for example “Home”).
- Emergency contacts: phone numbers and emails you provide to receive alarms.
- Sharing: who you share a device with and with what permissions.
- Payments: subscription, amounts and transaction IDs. Card details are handled by Apple, Google, Shopify or Stripe: we do not see them.
- Support: the messages you write to us.
- Technical data: service logs and app error messages, with your account ID.
- AI assistant: the questions you ask the assistant, if you use it (see below).
- Website: cookies and visit statistics, only if you accept them (see “Cookies”).
Why we process data and on what basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing the service: location, history, zones, sharing, commands to the device | Contract (Art. 6(1)(b) GDPR) |
| Sending you notifications and alarms, including to the emergency contacts you choose | Contract; for emergency contacts, your and our legitimate interest in getting the alert through (Art. 6(1)(f) GDPR) |
| Processing the locations of people who carry the device or drive the vehicle | Your and our legitimate interest in providing and using the service (Art. 6(1)(f) GDPR), with the safeguards described below |
| AI assistant | Contract, because it is a feature you choose to use |
| Customer support | Contract |
| Subscriptions, invoices and accounting | Contract and legal obligations (Art. 6(1)(c) GDPR) |
| Service security, abuse prevention, technical logs | Legitimate interest (Art. 6(1)(f) GDPR) |
| Website statistics | Consent (Art. 6(1)(a) GDPR), which you can withdraw whenever you want |
Without account and device data we cannot provide the service. Phone and emergency contacts are optional: they are only needed for SMS and calls.
We do not make fully automated decisions that have legal or similar effects on you (Art. 22 GDPR).
People tracked with a device
The service is designed for vehicles, animals and property. If you use Visla to track a person (a family member, a minor, an elderly person, an employee or a driver) you must:
- inform them and, if they are an adult, have their consent, as our Terms of Service require;
- for minors, act within the scope of parental responsibility and take their age into account;
- for employees, comply with the rules on remote monitoring in Article 4 of the Italian Workers' Statute (Statuto dei lavoratori) and inform them.
You can give devices names that do not identify the person. Anyone tracked by a Visla device can exercise their rights by writing to info@visla.it, stating, if possible, the device they carry. If you think you are being tracked without your knowledge, write to us: we will check and, if needed, suspend the device.
Emergency contacts
If a customer gives your number or your email as an emergency contact, you receive a code to confirm. Only after you confirm do you receive their alarms. Your contact stays until the customer removes it or deletes their account. You can ask us to remove it by writing to info@visla.it.
Notifications on your phone
Push notifications can show the device name and the place of the event, even on the lock screen. You can limit this from your phone settings.
AI assistant
In the Visla GPS web app you will find two features based on Claude, an artificial intelligence model by Anthropic:
- Ask the map: ask a question in your own words about your devices, for example “Where was Luna yesterday at 6 pm?” or “How many km did the van do this week?”.
- Tell me about the day: in a device's panel, a short narrative of the day (departures, stops, where it is now).
The answers are generated automatically and may contain errors: for times, locations and kilometres, the map and the history are authoritative.
When we send data
Only when you send a question or tap “Tell me about the day”. The summary with trips and kilometres that you see when you open the panel is calculated by our servers, without artificial intelligence. If you do not use the assistant, no data goes to Anthropic.
What data we send
The assistant only sees the devices and the history that the app already shows you, with the same permissions as your account. We send Anthropic:
- the text of the question, the date, the time and the time zone;
- for the devices concerned: name, model, status and battery;
- summaries calculated by our servers: latest locations and stops with coordinates, address and time; kilometres, times and speeds of trips; events such as entries into and exits from zones, alarms, ignition on and off.
We do not send your name, your email, your phone number, payment data, the IMEI or the SIM, nor the full list of locations. We recommend that you do not write data in your questions that is not needed, for example about health.
Who processes the data
Anthropic Ireland, Limited is our data processor (Art. 28 GDPR). It does not use the data to train its models and deletes questions and answers within 30 days. Content that its safety systems flag as possible violations of its usage policies may be kept for up to 2 years. Requests are processed in the United States (see “Transfers outside the European Union”).
What we keep
We do not save questions and answers. For the daily limit, we keep a count of your questions for 2 days. We keep the narrative of the day for 24 hours. Technical logs contain user, time, outcome and usage, never the text of the questions, and are kept for 30 days.
Who processes data on our behalf
| Provider | What for | Where |
|---|---|---|
| Oracle | Service servers and database | Milan (Italy) |
| Encrypted backup copies (Milan), push notifications (Firebase), service emails, web app maps (Google Maps), website statistics (Google Analytics, only with your consent) | EU and United States | |
| Cloudflare | Network and protection of traffic to our servers, the website and the web app | Global network |
| Amazon Web Services | Alarm SMS and calls | Frankfurt (Germany) |
| Telnyx and Twilio | SMS and calls, only as a backup if Amazon is not working | United States |
| 1NCE | Connectivity for the trackers' SIMs | Germany |
| OpenStreetMap Foundation (Nominatim) | Turns coordinates into addresses; receives only the coordinates | United Kingdom |
| Mapbox | Web app maps | United States |
| Anthropic | AI assistant | United States |
| Apple, Google, Shopify, Stripe | Payments and subscriptions | EU and United States |
If you sign in with Apple, Google or Facebook (Meta Platforms Ireland), these services process your data as independent controllers, according to their own privacy policies.
Transfers outside the European Union
Some providers process data in the United States or the United Kingdom. For the United Kingdom, the European Commission's adequacy decision applies. For the United States, the transfer is based on the adequacy decision for the EU-US Data Privacy Framework, for certified providers, or on the standard contractual clauses approved by the Commission (Decision 2021/914), as for Anthropic. You can ask for a copy of the safeguards by writing to info@visla.it.
How long we keep data
| Data | How long |
|---|---|
| Locations recorded by devices | 30 days, then they are deleted automatically |
| Events and notification history | As long as the account is active. You can ask for them to be deleted at any time at info@visla.it |
| Zones, emergency contacts, sharing, preferences | Until you remove them or delete your account |
| Invitations to share a device | They expire after 7 days |
| History of commands sent to devices | 90 days |
| Account data | As long as the account is active |
| Billing data | 10 years, as required by law |
| Technical logs | 30 days |
| Backup copies | At most 30 days after the original data is deleted |
If you delete your account (from the app or by writing to us), we immediately delete the account, sharing, zones, emergency contacts, preferences and notification history. We are completing the automatic deletion of device events: until then, we delete them at your request at info@visla.it. Locations are deleted within 30 days and backup copies within a further 30. Only the billing data that the law requires us to keep remains.
How we protect data
- Servers in Italy, reachable only through encrypted connections.
- Encrypted backups.
- Access by our staff limited to those who need it, with written instructions.
- Each user sees only their own devices or those shared with them.
- You can turn on two-step verification from the web app (Settings, Security) and we recommend that you do.
Cookies and website statistics
The vislagps.com website uses:
- technical cookies, needed for the website to work, which do not require consent;
- Google Analytics 4 by Google Ireland, for visit statistics and campaign measurement, only if you accept from the banner. If you refuse, Google Analytics does not save statistical or advertising cookies.
You can change your choice at any time with “Cookie preferences” at the bottom of every page or with the button below. Google keeps Analytics data for the period set in our account, up to 14 months. The app and the web app do not use profiling cookies.
Your rights
You have the right to:
- access: ask us what data we hold and get a copy;
- rectification: correct wrong data;
- erasure: you can also delete your account from the app;
- restriction of processing;
- portability: receive the data in a machine-readable format;
- object to processing based on legitimate interest;
- withdraw consent, for statistical cookies, without affecting what was done before.
To exercise them, write to info@visla.it. We reply within one month. You can also lodge a complaint with the Garante per la protezione dei dati personali (garanteprivacy.it), the Italian data protection authority.
Changes
If we change this policy, we update the date at the top. For important changes, we let you know in the app or by email.