Privacy Policy

Introduction

This Privacy Policy explains how GTFS Tools collects, uses, and safeguards personal information when you use our website, products, and services. By accessing GTFS Tools, you agree to the practices described here. If you do not agree, please discontinue use of the service.

Scope

This policy applies to visitors, account holders, customers, and their authorized users who access our marketing site, application dashboard, APIs, and related services.

Information We Collect

We collect information necessary to provide and improve GTFS Tools. The types of information include:

• Account and contact data: name, email address, organization, and role.
• Authentication and security data: credentials, tokens, audit logs, and session metadata.
• Service and content data: GTFS feeds you upload or generate, project metadata, and configuration settings.
• Usage data: app interactions, feature usage, performance metrics, device/browser information, and diagnostic events.
• Billing data: subscription plan details, payment status, and transaction identifiers processed through our payment provider.
• Support data: information you provide in tickets, feedback, or interviews.

How We Collect Information

Directly from you when you register, configure projects, request support, or communicate with us.

Automatically through cookies, local storage, analytics events, and server logs when you interact with our services.

From third-party providers (e.g., authentication or payment processors) when you authorize those connections.

How We Use Information

Provide, operate, and secure the GTFS Tools platform, including account management and authentication.

Analyze usage to improve features, performance, and reliability.

Send transactional messages (e.g., account notices, service updates) and respond to inquiries.

Comply with legal obligations, enforce terms, prevent misuse, and protect our users and platform.

Provide optional product updates or marketing communications where permitted; you may opt out at any time.

Legal Bases for Processing (EEA/UK)

Contractual necessity: to deliver the services you request.

Legitimate interests: to maintain and improve the platform, prevent fraud, and secure our systems.

Consent: for optional cookies/analytics and marketing where required.

Legal obligations: to meet regulatory and compliance requirements.

Cookie Policy & Similar Technologies

We use cookies and similar technologies to operate and improve our services. You can manage preferences through your browser settings or relevant consent tools.

• Essential cookies: required for authentication, security, and core site functionality.
• Performance and analytics: help us understand how the product is used and improve reliability.
• Preferences: remember your settings (e.g., language, theme).
• Third-party services: set by integrated providers (e.g., payment or analytics) when enabled.
• Control: most browsers let you block or delete cookies; blocking essential cookies may break parts of the service.

How We Share Information

Vendors and service providers who support hosting, analytics, payments, and customer support under appropriate confidentiality and data protection terms.

Affiliates or corporate successors in connection with a merger, acquisition, or sale of assets, subject to safeguarding measures.

Legal, safety, and compliance purposes to protect rights, enforce agreements, or comply with lawful requests.

With your consent or at your direction, including when you integrate third-party services.

Data Retention

We retain personal data only as long as needed for the purposes described, to comply with legal obligations, or to resolve disputes. When data is no longer required, we delete or anonymize it in accordance with our retention schedules.

Security

We implement administrative, technical, and organizational safeguards to protect personal data, including access controls, encryption in transit, and monitoring. No system is fully secure; please use strong passwords and keep credentials confidential.

International Transfers

If we transfer personal data across borders, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms where required.

Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to data portability. You may also withdraw consent where processing is based on consent.

• To exercise rights, contact us using the details below. We will respond consistent with applicable laws.
• You may lodge a complaint with your local data protection authority if you believe your rights are infringed.

Children

GTFS Tools is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided personal data, contact us to request deletion.

Third-Party Services & Links

Our services may include links or integrations with third-party sites or providers. Their privacy practices are governed by their own policies. Review those policies before using their services.

Changes to This Policy

We may update this Privacy Policy to reflect operational, legal, or regulatory changes. We will post the updated date at the top of this page. Material changes will be communicated when required.

Contact Us

If you have questions or requests about this Privacy Policy or our data practices, contact privacy@gtfstools.com.