Privacy Policy

Pikseco is committed to protecting the privacy and security of information processed through its educational transportation platform. This Privacy Policy describes the categories of information we may collect, the purposes for which it may be used, the circumstances in which it may be shared and the safeguards applied to its handling.

Pikseco may act as a service provider or data processor for an educational institution. In those circumstances, the institution determines why and how relevant student, parent, driver and transport information is processed, subject to its agreement with Pikseco and applicable law.

By accessing or using Pikseco, users acknowledge that information may be processed as described in this Policy, applicable institutional notices and the terms governing the relevant service.

The information collected depends on the user's role, the institution's configuration and the features being used.

Pikseco processes information only for legitimate platform, contractual, safety, support and legal purposes. Depending on the deployment and applicable law, processing may be based on contractual necessity, legitimate interests, consent, institutional authorization or compliance with legal obligations.

Driver location is collected only when location permissions are enabled and during authorized transportation operations or another institution-approved tracking workflow. Location data may include current coordinates, timestamps, route progress, trip status and related technical information.

Parent applications receive only the information necessary to display the transportation status of the vehicle associated with the parent's registered child. Parents do not receive unrestricted access to driver device information or unrelated vehicle activity.

Administrators may access location and trip information only for institutions, campuses, vehicles and routes permitted by their assigned role.

Pikseco does not permit children to independently create platform accounts. Student information is entered, managed or authorized by an educational institution, parent, guardian or another permitted adult user.

Institutions are responsible for establishing an appropriate legal basis, providing required notices and obtaining any consent required for the processing of student information under applicable law.

If Pikseco becomes aware that student information has been submitted without appropriate authorization, the company may work with the relevant institution or account holder to review, restrict or remove the information.

Parent and guardian access is limited to information associated with children linked to the relevant verified account. Pikseco's role-based controls are designed to prevent parents from accessing information belonging to unrelated students, families or institutions.

Parents are responsible for keeping their login credentials confidential and for promptly informing the institution or Pikseco if they believe that access to their account has been compromised.

The Pikseco website and browser-based dashboard may use cookies, local storage and similar technologies where necessary to operate, secure and improve the service.

Where required by law, non-essential cookies will be used only after appropriate consent has been obtained.

Pikseco does not sell personal information.

Information is shared only where necessary to provide the platform, comply with law, protect users or support authorized transportation operations.

Pikseco retains information only for as long as reasonably necessary to provide the platform, fulfil institutional instructions, comply with legal and contractual obligations, resolve disputes, maintain security and enforce agreements.

Retention periods vary according to the type of information, the institution's configuration, applicable law and the reason the information was collected. Location and trip records may follow different retention periods from account, billing, security or support records.

When information is no longer required, it may be deleted, anonymized or securely archived, subject to backup cycles and legal retention requirements.

Pikseco applies administrative, technical and organizational safeguards designed to protect information against unauthorized access, loss, alteration, misuse and disclosure.

No system can guarantee absolute security. Users and institutions must maintain secure credentials, appropriate device controls and accurate access permissions.

Depending on location, role and applicable law, individuals may have rights relating to their personal information. Requests involving institution-controlled information may be referred to the relevant educational institution.

Pikseco may verify identity and authority before responding to a request. Certain rights may be limited where information must be retained for legal, security, contractual or public-interest reasons.

Pikseco relies on selected technology providers to deliver mapping, cloud, authentication, messaging, storage and related functionality. These providers process information according to their own terms, privacy notices and contractual obligations.

Pikseco and its service providers may process or store information in countries other than the country in which the user or institution is located. Those countries may have different data-protection laws.

Where required, Pikseco uses contractual, organizational or other legally recognized safeguards for international transfers. Institutions may contact Pikseco for information about transfer arrangements applicable to their deployment.

Pikseco may update this Privacy Policy to reflect platform changes, legal requirements, operational practices or service provider updates.

The revised Policy will display a new “Last Updated” date. Users or institutions will be notified through the platform, email or another appropriate channel when an update materially changes how personal information is handled.

Privacy questions, rights requests and concerns about information handling may be directed to the Pikseco Privacy Team.