Snapshot 63518
Normalized text
Scripts and page chrome removed; this is what change detection compares.
These materials may be made available in languages other than English for convenience only. The English-language versions of the Terms of Use and Privacy Policy constitute the sole and legally binding versions. Any translations are provided solely for informational purposes and may not fully reflect the original English text. In the event of any inconsistency or conflict between a translated version and the English-language version, the English-language version shall govern and control. Privacy policy Date last modified: April 2026 This privacy policy applies between you, the User of this Website or TripLog App and TripLog, Inc., the owner and provider of this Website and Mobile App (TripLog). TripLog, Inc. takes the privacy of your information very seriously. This privacy policy applies to our use of any and all Data collected by us or provided by you in relation to your use of the Website. This privacy policy should be read alongside, and in addition to, our Terms and Conditions, which can be found at: Terms of Service Please read this privacy policy carefully. Definitions and interpretation 1. In this privacy policy, the following definitions are used: Data collectively all information that you submit to TripLog, Inc. via the Website or TripLog App. This definition incorporates, where applicable, the definitions provided in the Data Protection Laws; Cookies a small text file placed on your computer by this Website when you visit certain parts of the Website and/or when you use certain features of the Website. Details of the cookies used by this Website are set out in the clause below (Cookies); Data Protection Laws any applicable law relating to the processing of personal Data, including but not limited to the Directive 96/46/EC (Data Protection Directive), California Online Privacy Protection Act, or the GDPR, or and any national implementing laws, regulations and secondary legislation, for as long as the GDPR is effective in the UK; GDPR the General Data Protection Regulation (EU) 2016/679; CCPA California Consumer Privacy Act of 2018 TripLog, Inc. or us TripLog, Inc., a Delaware Corporation, whose registered office is at 22525 SE 64th Place, Suite 2268, Issaquah, WA 98027; UK and EU Cookie Law the Privacy and Electronic Communications (EC Directive) Regulations 2003 as amended by the Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2011; User or you any third party that accesses the Website and is not either (i) employed by TripLog, Inc. and acting in the course of their employment or (ii) engaged as a consultant or otherwise providing services to TripLog, Inc. and accessing the Website in connection with the provision of such services.; Website/Mobile App the website that you are currently using, https://triplog.net/, or the TripLog App and any sub-domains of this site unless expressly excluded by their own terms and conditions. 2. In this privacy policy, unless the context requires a different interpretation: the singular includes the plural and vice versa; references to sub-clauses, clauses, schedules or appendices are to sub-clauses, clauses, schedules or appendices of this privacy policy; a reference to a person includes firms, companies, government entities, trusts and partnerships; “including” is understood to mean “including without limitation”; reference to any statutory provision includes any modification or amendment of it; the headings and subheadings do not form part of this privacy policy. Scope of this privacy policy 3. This privacy policy applies only to the actions of TripLog, Inc. and Users with respect to this Website/Mobile App. It does not extend to any websites that can be accessed from this Website/Mobile App including, but not limited to, any links we may provide to social media websites. 4. For purposes of the applicable Data Protection Laws, TripLog, Inc. is the “data controller”. This means that TripLog, Inc. determines the purposes for which, and the manner in which, your Data is processed. Data collected 5. We may collect the following Data, which includes personal Data, from you: name; email; phone number; employee Id; vehicle – year/make/model; license plate #; vin number; company name; profession; Use of our Service requires payment. We collect and store the billing information (name, billing address, and email address). We do not receive or store credit card or banking information (number, expiration, security code, routing number, account number, etc). Payment information is submitted directly to our payment processors; if you use our Mobile App, you may enter information into the Mobile App that you think is Personally Identifiable Information. However, all information that we collect through our Mobile App, including, but not limited to what you enter in the Mobile App, your mobile device’s ID (IDFA and Android Advertising ID), IP address, operating system type and version, non-reversible hashed email address (meaning that your email address is not discernible and cannot be reconstituted), and geolocation data (latitude/longitude, horizontal accuracy, speed) is considered Non-Personal Information. You should take special care that any comments you chose to enter do not contain your Personally Identifiable Information or that of other people; web browser type and version (automatically collected); operating system (automatically collected); in each case, in accordance with this privacy policy. Generally, you control the amount and type of information that you provide to TripLog, Inc. when using our Website/Mobile App. As a Visitor, you can browse our Website to find out more about our Offerings. You are not required to provide us with any Personally Identifiable Information as a Visitor. How we collect Data 6. We collect Data in the following ways: data is given to us by you; and data is collected automatically. Data that is given to us by you 7. TripLog, Inc. will collect your Data in a number of ways, for example: when you contact us through the Website, by telephone, post, e-mail or through any other means; when you register with us and set up an account to receive our products/services; when you complete surveys that we use for research purposes (although you are not obliged to respond to them); when you enter a competition or promotion through a social media channel; when you make payments to us, through this Website or otherwise; when you elect to receive marketing communications from us; when you use our services; in each case, in accordance with this privacy policy. Data that is collected automatically 8. To the extent that you access the Website, we will collect your Data automatically, for example: we automatically collect some information about your visit to the Website. This information helps us to make improvements to Website content and navigation, and includes your IP address, the date, times and frequency with which you access the Website and the way you use and interact with its content. we will collect your Data automatically via cookies, in line with the cookie settings on your browser. For more information about cookies, and how we use them on the Website, see the section below, headed “Cookies”. Our use of Data 9.Any or all of the above Data may be required by us from time to time in order to provide you with the best possible service and experience when using our Website/Mobile App. Specifically, Data may be used by us for the following reasons: internal record keeping; improvement of our products / services; transmission by email of marketing materials that may be of interest to you; contact for market research purposes which may be done using email, telephone, fax or mail. Such information may be used to customize or update the Website/Mobile App; in each case, in accordance with this privacy policy. 10. We may use your Data for the above purposes if we deem it necessary to do so for our legitimate interests. If you are not satisfied with this, you have the right to object in certain circumstances (see the section headed “Your rights” below). 11. For the delivery of direct marketing to you via email, we’ll need your consent, whether via an opt-in or soft-opt-in: soft opt-in consent is a specific type of consent which applies when you have previously engaged with us (for example, you contact us to ask us for more details about a particular product/service, and we are marketing similar products/services). Under “soft opt-in” consent, we will take your consent as given unless you opt-out. for other types of e-marketing, we are required to obtain your explicit consent; that is, you need to take positive and affirmative action when consenting by, for example, checking a check box that we’ll provide. if you are not satisfied with our approach to marketing, you have the right to withdraw consent at any time. To find out how to withdraw your consent, see the section headed “Your rights” below. 12. When you register with us and set up an account to receive our services, the legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract. 13. We may use your Data to show you TripLog, Inc. adverts and other content on other websites. If you do not want us to use your data to show you TripLog, Inc. adverts and other content on other websites, please turn off the relevant cookies (please refer to the section headed “Cookies” below). 14. The TripLog app may upload users’ Primary Account information to https://www.triplog.net/. Who we share Data with 15. We do not sell your Personally Identifiable Information (PII) to third parties and have no plans to do so in the future. We may share your Data with the following groups of people for the following reasons: our employees, agents and/or professional advisors - we primarily use your Personally Identifiable Information in order to provide you with our Service; we may share non-personally identifiable information with our affiliates, third party partners, and agents in order to improve our systems and products, and for other research, and analytical purposes. We may also share data with third-party contractors and service providers who work on behalf of us. For clarity, your Personally Identifiable Information is NOT exposed as any part of this data. third party payment providers who process payments made over the Website - to enable third party payment providers to process user payments and refunds; we may be legally required to disclose your Personally Identifiable Information, if such disclosure is (a) required by subpoena, law, or other legal process; (b) necessary to assist law enforcement officials or government enforcement agencies; (c) necessary to investigate violations of or otherwise enforce our Legal Terms; (d) necessary to protect us from legal action or claims from third parties including you and/or other Members; and/or (e) necessary to protect the legal rights, personal/real property, or personal safety of TripLog, our Users, employees, and affiliates. The specifics of such releases of information are detailed in our Data Request Policy. in each case, in accordance with this privacy policy. Keeping Data secure 16. We will use technical and organizational measures to safeguard your Data, for example: access to your account is controlled by a password and a user name that is unique to you. your Data is stored on secure servers. 17. All data is stored in the Amazon Elastic Compute Cloud (Amazon EC2), which has achieved ISO 27001 certification. https://aws.amazon.com/security/ – This family of standards helps us manage your Data and keep it secure. 18. Technical and organizational measures include measures to deal with any suspected data breach. If you suspect any misuse or loss or unauthorized access to your Data, please let us know immediately by contacting us via this email address: support@triplog.net. Data retention 19. Unless a longer retention period is required or permitted by law, we will only hold your Data on our systems for the period necessary to fulfil the purposes outlined in this privacy policy or until you request that the Data be deleted. 20. Even if we delete your Data, it may persist on backup or archival media for legal, tax or regulatory purposes. Your rights 21. You have the following rights in relation to your Data: Right to access – the right to request (i) copies of the information we hold about you at any time, or (ii) that we modify, update or delete such information. If we provide you with access to the information we hold about you, we will not charge you for this, unless your request is “manifestly unfounded or excessive.” Where we are legally permitted to do so, we may refuse your request. If we refuse your request, we will tell you the reasons why. Right to correct – the right to have your Data rectified if it is inaccurate or incomplete. Right to erase – the right to request that we delete or remove your Data from our systems. Right to restrict our use of your Data – the right to “block” us from using your Data or limit the way in which we can use it. Right to data portability – the right to request that we move, copy or transfer your Data. Right to object – the right to object to our use of your Data including where we use it for our legitimate interests. California Privacy Rights California’s “Shine the Light” law permits users of the Application that are California residents to request certain information regarding our disclosure of PII to third parties for their direct marketing purposes. To make such a request, please contact us at the Contact Information provided below. Under the California Consumer Privacy Act (“CCPA”) signed into law June 28, 2018 and entering into effect Jan. 1, 2020, California residents have certain rights and privileges. These rights include the: Right to Know: the right to request disclosure of PII collected or sold. Right to Deletion: the right to request deletion of PII collected from you. *“Do Not Sell Right”: the right to opt-out of the sale of PII (if applicable). Right to Sue for Security Breaches. *We do not sell your PII to third parties and have no plans to do so in the future. We reserve the right to ask for information verifying your identity and residency prior to disclosing any information to you or acting on your request. Should we ask for verification, the information you provide to verify your identity and residency will be used only for that purpose, and all copies of this information in our possession will be destroyed when the process is complete. We strive to respond to your request within 30 days of receiving a verifiable consumer request, however. 22. To make inquiries, exercise any of your rights set out above, or withdraw your consent to the processing of your Data (where consent is our legal basis for processing your Data), please contact us via this e-mail address: support@triplog.net. 23. If you are not satisfied with the way a complaint you make in relation to your Data is handled by us, you may be able to refer your complaint to the relevant data protection authority. For the UK, this is the Information Commissioner’s Office (ICO). The ICO’s contact details can be found on their website at https://ico.org.uk/. 24. It is important that the Data we hold about you is accurate and current. Please keep us informed if your Data changes during the period for which we hold it. Transfers outside the European Economic Area 25. Data which we collect from you may be stored and processed in and transferred to countries outside of the European Economic Area (EEA). For example, this could occur if our servers are located in a country outside the EEA or one of our service providers is situated in a country outside the EEA. 26. We will only transfer Data outside the EEA where it is compliant with data protection legislation and the means of transfer provides adequate safeguards in relation to your data, e.g., by way of data transfer agreement, incorporating the current standard contractual clauses adopted by the European Commission, or by signing up to the EU-US Privacy Shield Framework, in the event that the organization in receipt of the Data is based in the United States of America. 27. To ensure that your Data receives an adequate level of protection, we have put in place appropriate safeguards and procedures with the third parties we share your Data with. This ensures your Data is treated by those third parties in a way that is consistent with the Data Protection Laws. Links to other websites 28. This Website may, from time to time, provide links to other websites. We have no control over such websites and are not responsible for the content of these websites. This privacy policy does not extend to your use of such websites. You are advised to read the privacy policy or statement of other websites prior to using them. Changes of business ownership and control 29. TripLog, Inc. may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of TripLog, Inc. Data provided by Users will, where it is relevant to any part of our business so transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this privacy policy, be permitted to use the Data for the purposes for which it was originally supplied to us. 30. We may also disclose Data to a prospective purchaser of our business or any part of it. 31. In the above instances, we will take steps with the aim of ensuring your privacy is protected. Cookie policy What are cookies? 32. Cookies are small text files that websites store on your device to make the site work, keep it secure, remember your settings, and help us understand how the site is used. Some cookies are set by TripLog (first-party cookies), while others are set by trusted third-party services we use (third-party cookies). How do we use cookies? 33. We use cookies and similar technologies for four reasons: Necessary: These keep our site working and secure (e.g., preventing fraud and remembering your cookie preferences). Functional: These enable optional features you choose to use (e.g., support chat or embedded videos). Analytics: These help us understand how our website is used so we can improve performance and usability. Advertising: We use these to measure marketing performance. Necessary cookies are always on because our site can't function properly without them. All other cookies are optional and are only used if you choose to enable them. Manage cookie preferences Cookie preferences 34. You can modify your cookie settings at any time on our website. This will allow you to revisit the cookie consent banner and update your preferences or withdraw your consent immediately. 35. Additionally, different browsers offer various methods to block and delete cookies used by websites. You can adjust your browser settings to block or delete cookies. Below are links to support documents on how to manage and delete cookies in major web browsers. Chrome: https://support.google.com/accounts/answer/32050 Safari: https://support.apple.com/en-in/guide/safari/sfri11471/mac Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox?redirectslug=delete-cookies-remove-info-websites-stored&redirectlocale=en-US Internet Explorer: https://support.microsoft.com/en-us/topic/how-to-delete-cookie-files-in-internet-explorer-bca9446f-d873-78de-77ba-d42645fa52fc If you are using a different web browser, please refer to its official support documentation. General 36. You may not transfer any of your rights under this privacy policy to any other person. We may transfer our rights under this privacy policy where we reasonably believe your rights will not be affected. 37. If any court or competent authority finds that any provision of this privacy policy (or part of any provision) is invalid, illegal or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this privacy policy will not be affected. 38. Unless otherwise agreed, no delay, act or omission by a party in exercising any right or remedy will be deemed a waiver of that, or any other, right or remedy. 39. This Agreement will be governed by and interpreted in accordance with the laws of the State of Washington. All disputes arising under the Agreement will be subject to the exclusive jurisdiction of Washington State courts. Photo Collection 40. We may collect photos of your receipts when you use our app. These photos are stored in our cloud server. We use these photos to provide you with the features and functionality of our app, such as the ability to track your expenses and create reports. We may also use these photos to improve our app and services. 41. We may share your photos with the following third parties: Our cloud server provider Our legal and regulatory advisors Additional parties as required by law 42. You have the following rights with respect to your photos: The right to access your photos The right to delete your photos The right to port your photos to another service We will never sell your photos to third parties. We will only share your photos with third parties as described in this privacy policy. We will take all reasonable steps to protect your photos from unauthorized access, use, or disclosure. DPF Disclosure 43. TripLog complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF set forth by the U.S. Department of Commerce. TripLog has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit https://www.dataprivacyframework.gov/ 44. TripLog also complies with the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) set forth by the U.S. Department of Commerce. TripLog has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/ 45. In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, TripLog commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) with regard to unresolved complaints concerning our handling of human resources data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF in the context of the employment relationship. 46. TripLog is subject to investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC). 47. Under certain conditions, individuals may invoke binding arbitration for complaints not resolved by other DPF mechanisms, as described in Annex I of the Data Privacy Framework Principles. 48. TripLog remains responsible for the processing of personal data it receives under the DPF and subsequently transfers to a third party acting as an agent on its behalf. TripLog will be liable under the DPF Principles if its agent processes such personal data in a manner inconsistent with those Principles, unless TripLog proves it is not responsible for the event giving rise to the damage. Representative for Data Subjects 49. TripLog has appointed Rickert Rechtsanwaltsgesellschaft mbH as our representative in the European Union according to Article 27 GDPR. You may contact them regarding any queries related to the processing of your personal data: Rickert Rechtsanwaltsgesellschaft mbH - TripLog, Inc. - Colmantstraße 15 53115 Bonn, Germany art-27-rep-triplog@rickert.law 50. TripLog has appointed Dave Reece as our representative in the United Kingdom according to Article 27 UK-GDPR. You may contact him regarding any queries related to the processing of your personal data: Dave Reece 15-17 Cumberland Place Cumberland House Southampton SO15 2BG daver@triplog.net Changes to this privacy policy 51. TripLog, Inc. reserves the right to change this privacy policy as we may deem necessary from time to time or as may be required by law. Any changes will be immediately posted on the Website and you are deemed to have accepted the terms of the privacy policy on your first use of the Website following the alterations. You may contact TripLog, Inc. by email at support@triplog.net. 52. Revision History Date of Change Responsible Summary of Change June 2017 TripLog Policy Team Updated Policy September 2018 TripLog Policy Team Update Policy to reflect GDPR May 2021 TripLog Policy Team Added CCPA section May 2023 TripLog Policy Team Added Photo Collection section August 2024 TripLog Policy Team Edits and updates for SOC2 October 2025 TripLog Policy Team Edits and updates for DPF Febuary 2026 TripLog Policy Team Cookie policy and cookie list April 2026 TripLog Policy Team EU-GDPR representative Appendix List of cookies we use Necessary Necessary cookies are required to run the website and keep it secure. They help with core functions like security, fraud prevention, load balancing, and saving your cookie preferences. These cookies can't be switched off. Cookie Duration Description _cfuvid session Used by Cloudflare to identify trusted web traffic and ensure a secure browsing experience by enforcing rate limits. li_gc 6 months Linkedin set this cookie for storing visitor's consent regarding using cookies for non-essential purposes. __cf_bm 1 hour Used by Cloudflare to manage incoming traffic and protect the site from malicious bot activity by distinguishing between humans and automated scripts. rc::a Never Expires Used by Google reCAPTCHA to distinguish between human visitors and automated bots to protect the site from spam and malicious attacks. rc::c session Used by Google reCAPTCHA to track and analyze user behavior to distinguish humans from automated bots. Functional Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features. Cookie Duration Description intercom-id-* 8 months 26 days 1 hour Intercom sets this cookie that allows visitors to see any conversations they've had on Intercom websites. intercom-session-* 7 days Used by Intercom to keep a support chat session active. intercom-device-id-* 8 months 26 days 1 hour Used by Intercom to identify your device for support chat functionality. lidc 1 day LinkedIn sets the lidc cookie to facilitate data center selection. __Secure-YEC past Used by YouTube to store and remember your video player preferences and playback settings for embedded videos. VISITOR_PRIVACY_METADATA 6 months Used by YouTube to store your privacy and consent settings for embedded videos. __Secure-ROLLOUT_TOKEN 6 months YouTube sets this cookie to manage feature rollout and experimentation. It helps Google control which new features or interface changes are shown to users as part of testing and staged rollouts, ensuring consistent experience for a given user during an experiment. __Secure-YNID 6 months YouTube cookie used to protect user security and prevent fraud, especially during the login process. _hjTLDTest session To determine the most generic cookie path that has to be used instead of the page hostname, Hotjar sets the _hjTLDTest cookie to store different URL substring alternatives until it fails. VISITOR_INFO1_LIVE 6 months A cookie set by YouTube to measure bandwidth that determines whether the user gets the new or old player interface. Analytics Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc. Cookie Duration Description __hssrc session This cookie is set by Hubspot whenever it changes the session cookie. The __hssrc cookie set to 1 indicates that the user has restarted the browser, and if the cookie does not exist, it is assumed to be a new session. __hssc 1 hour HubSpot sets this cookie to keep track of sessions and to determine if HubSpot should increment the session number and timestamps in the __hstc cookie. mp_*_mixpanel 1 year Mixpanel sets this cookie to determine how users use the website so that a good user experience can be provided. _ga_* 1 year 1 month 4 days Google Analytics sets this cookie to store and count page views. _ga 1 year 1 month 4 days Google Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors. _hjSessionUser_* 1 year Hotjar sets this cookie to ensure data from subsequent visits to the same site is attributed to the same user ID, which persists in the Hotjar User ID, which is unique to that site. _hjSession_* 1 hour Used by Hotjar to store a temporary, active user session and gather data on how you interact with the site during your visit. __hstc 6 months Hubspot set this main cookie for tracking visitors. It contains the domain, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session). hubspotutk 6 months HubSpot sets this cookie to keep track of the visitors to the website. This cookie is passed to HubSpot on form submission and used when deduplicating contacts. cookietest session The cookietest cookie is typically used to determine whether the user's browser accepts cookies, essential for website functionality and user experience. YSC session Used by YouTube to track and store views of embedded videos and ensure that the video player functions correctly during your session. Advertisement Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns. Cookie Duration Description __spdt 1 year Used by Spotify to track user interactions with embedded audio content for marketing and performance analysis. _gcl_au 3 months Used by Google Ads to track and store ad conversions, helping to measure the efficiency of advertisements and improve marketing performance across websites. _rdt_uuid 3 months Reddit sets this cookie to build a profile of your interests and show you relevant ads. bcookie 1 year LinkedIn sets this cookie from LinkedIn share buttons and ad tags to recognize browser IDs. _fbp 3 months Facebook sets this cookie to store and track interactions. test_cookie 16 minutes doubleclick.net sets this cookie to determine if the user's browser supports cookies.