Privacy Policy

Depending on the Service and configuration, we may collect:

The App requests location, camera, photo, Bluetooth, notification or other permissions only when needed for an identified function.

• Create and administer accounts; authenticate users and enforce permissions.
• Connect users to customer organisations, sites, assets, gateways and locks.
• Display device status, alerts, audit trails, reports and analytics.
• Process enquiries and support requests, including messages sent to desk@meteoros.io.
• Detect fraud, misuse, unauthorised access, tampering and security incidents.
• Operate, maintain, troubleshoot, secure and improve the Services.
• Provide updates, documentation and customer-success services.
• Comply with legal, regulatory, tax, accounting, safety and law-enforcement obligations; establish, exercise or defend legal claims.
• Send marketing communications where permitted and, where required, after consent.

We do not sell personal data for money. Operational audit data is not used for advertising unless expressly permitted by the customer agreement and applicable law.

Depending on applicable law and context, we may process personal data to perform a contract; comply with legal obligations; pursue legitimate interests such as security, fraud prevention, service reliability, product improvement and business administration; or on the basis of consent for optional analytics, marketing, non-essential cookies, precise location where not necessary, and other optional processing. Consent may be withdrawn without affecting earlier lawful processing.

We may disclose personal data to the customer organisation administering your account; Meteoros personnel and contractors who need it for their role; hosting, database, monitoring, identity, communications, analytics, crash-reporting, support and security providers; network operators and gateway providers; professional advisers, insurers and auditors; authorities where legally required; and a purchaser or successor in a corporate transaction, subject to appropriate safeguards.

Personal data may be processed outside the country where it was collected, depending on hosting, support, vendors and customer deployment. Where required by applicable law, Meteoros will use an approved transfer mechanism and appropriate safeguards.

We retain data only as long as necessary for the stated purpose, customer instructions, contractual requirements, legal obligations, security needs, dispute resolution or legitimate business requirements. Specific retention periods may be set in the customer agreement or service configuration. When data is no longer required, it will be deleted, anonymised or securely retained where law requires.

We use reasonable technical and organisational safeguards appropriate to the Services and risks, which may include encryption, role-based access, multi-factor authentication, credential hashing, network controls, access logging, vulnerability management, security patching, backup and recovery, incident response, vendor controls and security testing. No system can be guaranteed completely secure. Customers must also secure their accounts, gateways, networks, devices, personnel and physical sites.

Subject to applicable law, you may have rights to access, correct, erase, restrict, object to or receive a portable copy of your personal data; withdraw consent; object to direct marketing; and complain to a competent authority. Send requests to desk@meteoros.io. We may verify identity and coordinate with the customer organisation where that organisation is the controller.

The Services are intended for business and industrial users and are not directed to children. Do not create an account or provide children's data unless authorised by the responsible organisation and permitted by law.

Our websites and web interfaces may use strictly necessary, security, preference, analytics and marketing technologies. Where required, non-essential cookies will be used only after a valid choice or consent. Users may reject optional cookies and later change their choices through the available privacy or cookie settings.

If you can create an individual account, you may request deletion through the App, where available, or by contacting desk@meteoros.io. Some information may be retained where required for law, security, audit, billing, contractual, dispute or safety purposes. For enterprise accounts, deletion of an individual user does not necessarily delete customer-owned device, operational or audit records.

We may update this Privacy Policy when our processing, Services, vendors or legal obligations change. The current version will be published on meteoros.io with its effective date and last-updated date.