MyTruck Privacy Policy
Last updated: July 16, 2026
This privacy policy describes how MyTruck (including its affiliated companies – "the Company" or "we") handles personal information ("Information") collected through its services ("Services"), concerning the following individuals ("Data Subjects"):
- Private or business users who order trucks or heavy equipment ("Customers")
- Owners of trucks, heavy equipment or heavy machinery ("Service Providers")
- Visitors to our websites or applications, existing and potential customers, business partners
1. Database Controller Details
The database is held and operated by Mytruck, business no. 793057373, located at 1 HaMaalit Street, Kadima Zoran. These details are provided in accordance with the notification obligation set out in sections 11 and 13(a) of the Protection of Privacy Law.
2. What Information Do We Collect?
A. Information about Users (Customers)
- User profile: First name, business name, email address, phone number, business type, profile picture, saved addresses and password
- Order details: Heavy equipment / truck type, pickup and delivery details, route, GPS location during order execution (sensitive information — see section 7)
- Order cancellation data: Records of cancellation events, the time of cancellation relative to the pickup time, for operational and billing purposes only
- Delay data: Actual arrival and departure time of the carrier / heavy equipment, actual waiting duration, waiting-fee charge amount — used solely to calculate and enforce waiting fees
- Payment details and financial information: The chosen payment method (credit card, Bit, bank transfer), billing details and invoices, as part of the account data
- Ratings and feedback
- Identity verification data
- Usage data: Login times, IP address, device type, app versions
B. Information about Service Providers
- Provider profile: Name, contact details, ID, driving and operating licenses, insurance details, profile picture
- Details of orders they performed, including cancellation and delay data as noted above
- Payment details: Bank account / payment method details for remitting proceeds, service-commission data (10% + VAT) and invoices
- Ratings and feedback
- Identity verification data
Disclaimer: The responsibility for valid licenses and insurance of the trucks and heavy equipment lies solely with the provider.
C. Information about Payments and Charges
According to the payment method chosen by the customer, we collect and process the following details:
- Credit card
- Bit: Payment details and financial information collected while making the payment via the Bit application, in order to issue a tax invoice/receipt and remit the proceeds to the service provider.
- Bank transfer: The payment is processed via the PayPlus clearing service (payplus.co.il), which acts as a data processor on our behalf to collect the payment from the customer and remit it to the service provider.
Payment data is stored and used to operate the service, issue accounting documents as required by law and collect commissions, and is not used for any other purpose.
3. Purposes of Information Use
- Operating the services and coordinating truck/heavy-equipment orders
- Identity verification and account access recovery
- Automated decision-making (e.g., matching a provider by rating, location, availability, pricing)
- Calculating and enforcing cancellation fees and waiting fees per the payment policy
- Issuing tax invoices and receipts and collecting service commissions
- Development and improvement of the services, usage analysis and statistics
- Contacting users at their request or for service and operational purposes only
- Information security and fraud detection/prevention
- Compliance with legal requirements and agreements with business customers
All information processing is carried out solely for the purposes detailed above, in accordance with the limitation and purpose set out in the Protection of Privacy Law.
4. Information Storage
Information is stored in the company's systems or those of external service providers, in Israel or abroad, subject to the law and appropriate protective measures. Operational information (such as location data and cancellation/delay records) is deleted after the order is completed or within 12 months of the order's completion. Accounting information, including invoices and payment data, is retained for the retention periods required by law — generally 7 years from the document's creation, in accordance with the Income Tax Regulations (Bookkeeping).
5. Who Receives the Information?
- Cloud storage and information-security providers
- Marketing and advertising partners
- Data analytics and session-recording providers (Analytics), including PostHog (hosted in the EU) — see section 6.1
- Legal advisors and accountants
- Clearing and payment providers: credit-card companies, PayPlus (processing bank transfers) and the Bit application — for processing digital payments only
- Identity-verification and fraud-prevention providers: to verify the identity of users, equipment owners and carriers, and to prevent misuse of the service
- Insurance companies: if a service provider files an insurance claim in connection with the service, we will share relevant information with the insurer to handle the claim
- Between the customer and the provider: essential order details only
- Business customers and partners: information necessary to perform the order
- Authorities: if required by law or for an investigation
With every external party that processes information on our behalf, a data-processing agreement exists (or will be signed) defining the purpose of processing, usage limitations, the deletion obligation and reporting of security events.
6. Cookies and Tracking Technologies
We use cookies and pixels for operational, security, usage-analysis and user-experience-improvement purposes. Google Analytics or similar tools: aggregated data only, without personal identification.
Under Israeli law there is no obligation to provide detailed cookie-preference management — the requirement is full transparency regarding the types of cookies in use and their purpose.
6.1 Product Analytics and Session Recordings (Mobile Apps)
In our mobile applications we use PostHog, a product-analytics and session-recording service, to understand how the apps are used, measure key flows, and diagnose and fix problems. Through this service we collect:
- Usage and interaction events: screens viewed, actions taken, features used and errors encountered, together with technical context (app version, device type, environment).
- Session recordings: periodic captures of the app screen during your session, so we can see how a flow actually behaved.
This data may be associated with your account identifiers, including your phone number, so that an event or session can be attributed to a specific user (including a sign-in attempt that did not complete). Sensitive fields are masked and are not recorded — in particular payment-card details, bank details, one-time verification (OTP) codes, identity and uploaded document images, and other text you type into input fields.
PostHog acts as a data processor on our behalf under a data-processing agreement, and the data is hosted on servers located in the European Union (EU). This information is used solely for product improvement, usage analysis, diagnostics and error tracking, and is subject to the storage and security provisions of this policy.
7. Information Security
We employ physical, technological and organizational measures to protect the information, according to the risk level of each database as required by the Protection of Privacy Regulations (Information Security). Sensitive information — including GPS location and payment details — is handled with enhanced protection measures, including encryption, access-permission controls and access logging. However, MyTruck cannot guarantee absolute security (there is always a risk of breach or misuse).
7.1 Managing Location Permission
GPS location is an essential component of the core service (assigning providers, tracking the order, calculating delays). You may revoke the location permission via the device settings at any time, but revoking the permission may prevent the use of a substantial part of the services or of the entire service.
8. Your Rights
- Reviewing, correcting or deleting your personal information — not only unsubscribing from marketing communications
- Withdrawing consent to marketing communications at any time
- Providing some of the information (such as identifying details for issuing a lawful tax invoice) is a legal obligation; providing additional information (such as a profile picture) is voluntary. Refusing to provide information required to perform the order may prevent the order's completion
- Complaint to the Privacy Protection Authority: if you believe your information is handled unlawfully, you may contact the Privacy Protection Authority at the Ministry of Justice
- Requests to exercise rights via the contact details in section 10
9. Changes to the Policy
We may update this policy from time to time. Material changes will be brought to your attention by a notice in the application and/or by email, before they take effect. Continued use of the services after the policy update constitutes consent to the updated terms.
10. Contact Us
- Privacy questions: [email protected]
- Data Protection Officer: [email protected]