Privacy policy
Last updated: 1 November 2026
Movilo is a system for managing jobs, fleets, equipment and drivers, for haulage, earthworks, concrete and crane companies. This policy explains what information is collected in the office system (app.movilo.co), in the Movilo Driver app and on the movilo.co website, what it is used for, who receives it, and what your rights are.
1. Who we are
The service is operated by TripleDeep Ltd. (טריפלדיפ בע״מ), company number 517030532 ("TripleDeep", "we"). For any privacy question: movilo@tripledeep.io.
2. Who is responsible for the information
The company that buys the service (the "customer") controls the information it and its staff enter into the system — about its employees, drivers, customers and jobs. The customer decides who gets access, which modules are switched on and what is recorded. TripleDeep holds and processes this information for the customer, on its instructions, and only to provide the service.
TripleDeep is itself responsible for a small amount of information: the customer's contact and billing details, enquiries sent through the website form, and technical data kept for security.
3. What information is collected
- User details: name, username, role, and sometimes a phone number — as entered by the customer.
- Work data: jobs (dates, customers, places, contacts and their phone numbers, materials, quantities, prices, delivery note and order numbers), drivers, vehicles and equipment, documents and expiry dates, fuel, receipts, material received from suppliers, garage visits and attendance.
- Location at the start and end of a shift: if the customer switched on attendance, the driver app sends the phone's location once when "Start shift" is pressed and once at "End shift" — never in the background or during the shift. Location permission can be refused, and the shift is recorded without it.
- Photos: delivery notes, receipts and documents the user photographs or picks and uploads themselves. The app only receives the photo that was picked.
- What is given to AI: text the office pastes in or a voice recording the office makes, to create a new job; and a voice recording a driver makes in the app to fill in a form. The app uses the microphone only after the driver taps the record button, and only until he stops it (see section 5).
- Alerts: phone numbers and email addresses of the people the customer chose to notify, and a record of the messages sent.
- Billing details: the chosen plan and invoice details. Card details are entered with the payment provider only and are not stored by us.
- Website enquiries: the name, company, phone, email and message sent through the contact form.
- Technical data: IP address and the times of significant actions (such as sign-in, creating a user and deleting), for security and record-keeping.
4. What the information is used for
- Running the service: planning work, recording jobs, managing the fleet and documents, reports and exports.
- Sending the alerts the customer set up, by email and WhatsApp.
- Filling in fields automatically from photographed notes and from orders, if the customer switched this on.
- Billing, support, keeping the system secure and preventing abuse.
- Answering website enquiries.
We do not sell information, use it for advertising, or use one customer's information for another.
5. Artificial intelligence
Three features use Microsoft's Azure OpenAI service: reading a photographed delivery note, creating a new job from a message or a recording, and filling in a form in the driver app from the driver's recording. All are modules the customer chooses to switch on.
- Only what is needed is sent: the photo of the note, or the text / recording.
- A voice recording is turned into text and is not stored in Movilo.
- The result is only a suggestion: the user sees it, corrects it and saves it. Nothing is saved without them.
- Under Microsoft's terms, the information is not used to train models. Microsoft may keep it for a limited time to detect abuse.
- Processing takes place on Microsoft's servers outside Israel (the resource is registered in the United States, and Microsoft may process in any of its regions).
6. Where the information is stored
The server, the database and the files (photos and documents) are hosted on Amazon Web Services in its Israel (Tel Aviv) region. Each customer's information is kept apart, and one company cannot reach another's.
7. Service providers that receive information
- Amazon Web Services — servers and storage. Israel.
- Microsoft (Azure OpenAI) — reading notes and orders, as in section 5. United States and other regions.
- Meta Platforms (WhatsApp Business) — sending WhatsApp alerts: the phone number and the message. Outside Israel.
- Resend — sending email: the address and the message. United States.
- Grow — collecting the customer's payments for the service. Israel.
Each provider receives only what its role needs. WhatsApp and AI are modules the customer chooses to switch on — without them, no information goes to those providers.
8. Transfers outside Israel
Some providers in section 7 operate outside Israel. Transfers are made only to provide the service, under the Israeli Privacy Protection (Transfer of Data to Databases Abroad) Regulations, to providers whose terms commit them to protect the information. Switching on the WhatsApp or AI module is the customer's consent to the transfer it requires.
9. Who sees the information
- The customer's staff, according to the role the customer gave them. A driver sees only their own work. Drivers and subcontractors never see prices.
- TripleDeep staff, for support, maintenance and security only.
- Authorities, only where the law requires it.
10. How long information is kept
For as long as the customer's account is active. When a trial ends unpaid, the account stays view-only for 14 days and is then locked. When the engagement ends, the information is handed to the customer on request and deleted — on the customer's request, and no later than 12 months after the engagement ends — except where the law requires keeping it. Security records may be kept longer.
11. Security
Connections are encrypted (HTTPS). Passwords are stored with one-way hashing. Repeated sign-in attempts are blocked. Access is limited by company and by role, and significant actions are recorded. No system is perfectly secure; if a serious security incident occurs, we will notify customers and authorities as the law requires.
12. Your rights
Under the Israeli Privacy Protection Law, 1981, you may see the information held about you, and ask for information that is incorrect, incomplete, unclear or out of date to be corrected or deleted. Since most information is kept for your employer or our customer, it is best to ask them first. You can also write to us at movilo@tripledeep.io, and we will help.
13. Users in the European Union
Where a customer operates in the European Union, the General Data Protection Regulation (GDPR) also applies. The customer is then the controller, and TripleDeep a processor acting on its instructions. You have the right of access, rectification, erasure, restriction, portability and objection, and the right to complain to your data protection authority. Israel is recognised by the European Union as providing adequate protection. Transfers to providers in the United States follow the transfer mechanisms those providers are bound by.
14. The website and cookies
movilo.co uses no analytics or advertising cookies and loads no third-party tools. The office system keeps in the browser only what it needs to work: the sign-in, the language and the display mode.
15. Minors
The service is meant for companies and their staff, not for anyone under 18.
16. Changes
We will update this policy when the service changes. The date of the last update is at the top of the page, and customers will be told of material changes in advance.