Tractix Privacy Policy
This Privacy Policy explains how GlobalMed Logistix, LLC ("we," "us," or "our") collects, uses, shares and protects information when you use the Tractix mobile apps for iOS and Android and the Tractix web platform (together, the "Service"). By using the Service, you agree to the practices described in this policy.
1. Who we are
Tractix is a delivery management platform for the final mile of surgical case logistics, provided by GlobalMed Logistix, LLC, 1880 Beaver Ridge Circle, Norcross, GA 30071, United States. It coordinates the delivery and return of surgical cases between warehouses, dispatchers, couriers, sales representatives and hospital sterile processing departments. You can contact us at privacy@gmlx.us.com.
Tractix is business software, not a consumer app. There is no public sign-up: accounts are created and managed by administrators for people who work with us or with our customers. If you use Tractix through your employer or another organization that uses the Service (a "Customer"), that Customer controls much of the data processed in its account, and we process that data on the Customer's behalf and according to our agreement with them.
2. Information we collect
Information you or your organization provide
- Account details: your name, email address or addresses, phone number, the organization you work for, your role, a securely hashed password, an optional profile photo, and your notification preferences.
- Delivery and case logistics information: shipments, kits, trays and tubs, tracking and case identifiers, facility names and addresses, surgery dates and times, procedure and case type, the names of the surgeons and sales representatives on a case, sales representative contact details, routes, scans, delivery status, notes and timestamps. Much of this is imported from the case management systems used by us and our Customers.
- Pickup and delivery photos: photos taken or uploaded as proof of pickup or delivery. Each photo is linked to its shipment, the name of the person who uploaded it and the time it was taken. Tractix does not collect signatures.
- Notes and communications: notes you add to routes, stops or shipments, and messages you send to us.
Patient information. Tractix does not collect patient names, medical record numbers, dates of birth or other patient identifiers, and is not designed to store medical records. Please do not enter patient information in notes or capture it in photos.
Information collected automatically
- Sign-in and security data: IP address, browser or app user agent, the device name reported at sign-in, and records of sign-in, sign-out and failed sign-in attempts.
- Push notification data: a push notification token, an app-generated installation identifier, and your device platform (iOS or Android).
- Diagnostic data: error reports and performance data, which may include your user ID, name and email address so problems can be traced and fixed. For some errors in the web app, this includes a recording of the session leading up to the error.
- Activity records: a log of changes made to shipments, addresses, stops and facilities, including who made each change and when.
Information stored on your device
The mobile app stores information on your device, such as your sign-in session and route and delivery information, so you can stay signed in and keep working without a signal, for example inside a hospital.
3. Location data
If you are a driver or courier and allow location access, the Tractix mobile app collects your device's precise location, including latitude and longitude, the time it was captured, and, where available, its accuracy, speed and heading. We use it to:
- detect when you arrive at a pickup or delivery stop, so stops can be marked automatically;
- let dispatchers and sales representatives see your current position for their deliveries and alert them when you are within about a mile of the destination; and
- record your route as it is driven, for proof of delivery and route efficiency.
When location is used. Location is used for routes in progress. Our servers accept location data only from the driver assigned to a route while that route is in progress. If you allow background location, the app can collect location while it is closed or not in use during a route, so stops can be detected without unlocking your phone.
Who can see it. Your most recent recorded location on a route is visible to dispatchers and administrators, and to the sales representatives assigned to or following the shipments on that route. Your route history is used by the system for arrival detection and is not shown to other users. Your location is not sent to Google or other mapping services, and it is not sold or used for advertising.
How long it is kept. Route location history is deleted after 30 days. Your last recorded position on a route is deleted 30 days after that route is completed or cancelled.
Your control. You can turn off location access at any time in your device settings. If you do, automatic arrival detection and arrival alerts will stop working, and you may need to update stops manually.
4. Camera, photos and notifications
Camera and photos. With your permission, Tractix uses your device camera to scan kit barcodes and QR codes and to take pickup and delivery photos, and may use your photo library to upload photos you choose. We access only the images you capture or select. Photos taken on a phone can contain embedded information such as the date and the location where they were taken. Tractix uses the date to record when a photo was taken, and stores the original photo file, including any embedded location information, with the shipment.
Notifications. Tractix sends operational messages about routes and deliveries by push notification, text message and email, for example route assignments and changes, arrival estimates, arrival alerts, delivery confirmations and returns. Drivers and sales representatives receive text messages by default. You can change which messages you receive in your notification settings in the app or on the web, turn off push notifications in your device settings, and reply STOP to a Tractix text message to stop receiving texts. We keep a record of messages sent, including the recipient and the message content.
5. How we use information
- Provide, operate and maintain the Service, including building and assigning routes and tracking shipments and kits from pickup to delivery.
- Create and manage user accounts and authenticate users.
- Send route changes, arrival estimates, arrival alerts, delivery confirmations and service notices.
- Verify deliveries and returns through scans, photos, notes and location.
- Calculate delivery costs, validate courier invoices and apply Customer contract terms.
- Produce reporting and exports on delivery performance, route efficiency and costs for authorized users.
- Maintain delivery and traceability records for the medical devices we handle.
- Monitor performance, diagnose problems and improve the Service.
- Protect the security and integrity of the Service, keep an audit trail of changes and sign-ins, and prevent fraud or misuse.
- Comply with legal obligations and enforce our terms.
We do not sell your personal information or share it for cross-context behavioral advertising, and we do not use it for third-party advertising.
6. How we share information
We share information only in the following situations:
- Within the Customer organization that provides your account, according to each user's role. For example, drivers see the names and phone numbers of the sales representatives on their stops, shipment pages show the assigned driver's name and phone number, and authorized users can view and export delivery reports.
- With service providers who help us operate the Service, including those listed below. They may use the information only to perform services for us.
- With integration partners, such as the case management systems used by us and our Customers, so case and delivery data can be exchanged.
- For legal reasons, when required by law, subpoena or court order, or to protect the rights, property or safety of our users, the public or us.
- In a business transfer, such as a merger, acquisition or sale of assets, in which case information may transfer to the successor entity subject to this policy.
| Provider | Purpose |
|---|---|
| Microsoft Azure | Hosting, databases, photo and file storage, email delivery and network security |
| Google Maps Platform | Maps, address lookup and validation, and drive-time estimates between facility addresses |
| Google Firebase and Apple | Push notifications and app distribution |
| Twilio | Text message notifications |
| Sentry | Error monitoring and error-session replay for the web app |
| Laravel Nightwatch | Application performance and error monitoring |
| Laravel Forge | Server management and deployment |
| Bunny Fonts | Font delivery for the web app |
| Cloudflare | Domain name services |
7. Data security
We use industry-standard safeguards to protect information. Tractix is hosted in Microsoft Azure behind a web application firewall, connections to the Service use HTTPS, and data stored in Azure is encrypted at rest. Photos are kept in private storage and shown only through short-lived links. Passwords are stored as one-way hashes, access is limited by role, and sign-ins and changes to key records are logged. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
8. Data retention
- Route location history: 30 days. Your last recorded position on a route is kept until 30 days after the route is completed or cancelled.
- Audit logs of sign-ins and record changes: 90 days.
- Account information: kept while your account is open and after it is closed, as described in Closing your account.
- Shipment, case, route, photo, note and delivery records, and records of notifications sent: kept as business records for as long as needed for our business, contractual, legal and regulatory purposes, including medical device traceability. Photos that are removed from a shipment are retained with these records.
9. Closing your account
Tractix accounts are business accounts created and managed by administrators. You can close your account yourself:
- In the mobile app: use the Delete account option in your profile.
- On the web: in Settings, under Profile, choose Delete account.
You can also ask your organization's Tractix administrator to close it for you.
What happens when you close your account. You are signed out, and the account can no longer be used to sign in. Because Tractix records are business records used for delivery, billing and medical device traceability, closing your account does not erase your information. Your account details, the records you are associated with (such as routes, deliveries and photos you uploaded) and the records of notifications sent to you are retained as described in Data retention. An administrator can reopen a closed account.
If you want us to delete personal information about you, email privacy@gmlx.us.com from the email address on your account with the subject "Account Deletion Request", or contact us using the details below. We will respond as required by applicable law. Some information may be kept where we are required or permitted to keep it for legal, regulatory, contractual or security reasons. If your account is managed by your employer, we may refer your request to that organization.
10. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, or to object to or restrict certain processing. To exercise these rights, email privacy@gmlx.us.com or contact us using the details below. We may need to verify your identity first. You can also control location, camera, photo and notification permissions through your device settings, and your text, email and push preferences in your Tractix notification settings.
California residents have rights under the California Consumer Privacy Act (CCPA), including the right to know, delete and correct personal information, and the right not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising.
Users in the EEA and UK may also have the right to lodge a complaint with a supervisory authority. Our legal bases for processing include performance of a contract, our legitimate interests in operating and securing the Service, compliance with legal obligations, and consent where required, for example for location access.
11. International data transfers
The Service is operated from the United States. If you access it from outside the United States, your information will be transferred to and processed in the United States, and some service providers may process information in other countries.
12. Children's privacy
Tractix is a business application and is not directed to children under 13, or under 16 where applicable. We do not knowingly collect personal information from children. If we learn that we have, we will delete it promptly.
13. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and revise the "Last updated" date.
14. Contact us
GlobalMed Logistix, LLC
Attn: Privacy
1880 Beaver Ridge Circle
Norcross, GA 30071, United States
Email: privacy@gmlx.us.com
Phone: (855) 998-4659