ModularIoT Privacy Policy

1. Introduction

Welcome to ModularIoT, operated by MicroboxLabs ("we," "us," or "our"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our open-source IoT monitoring platform and related services.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you create an account, we collect your name, email address, and account identifier. Our authentication provider, Auth0, handles sign-in credentials. If you sign in with Google, we do not receive your Google password.
• Contact Information: When you contact us or sign up for notifications, we collect your email address and any information you choose to provide.
• Payment Information: For paid services, we collect billing details through our secure payment processors.
• Communication Data: When you communicate with us, we may keep records of those communications.

2.2 Information Collected Automatically

• Device Data: IoT device identifiers, GPS coordinates, sensor readings, and telemetry data you choose to transmit through our platform.
• Usage Data: Information about how you interact with our services, including access times, pages viewed, and features used.
• Log Data: Server logs that may include IP addresses, browser type, operating system, and referring URLs.
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to enhance your experience.

Google Sign-In and Your Google Data

ModularIoT offers Google sign-in through Auth0. When you choose this option, Google provides basic identity information: your account identifier, name, email address, email verification status, and profile picture when available. These sign-in permissions do not give ModularIoT access to your Gmail messages, Google Drive files, contacts, or calendars.

We use this information to authenticate you, create or identify your ModularIoT account, display your profile, and associate your account with the organizations you are authorized to access. Auth0 processes this information to provide authentication; our hosting and database providers process account information to operate the service. Authorized organization administrators may see your name and email when managing membership and access.

Separately from Google sign-in, this website uses Google Analytics when analytics is enabled. Google receives website usage data such as page views, session activity, browser and device information, approximate location, and cookie-based identifiers to help us understand how the website is used. This includes visits to this privacy page. We do not send your Google sign-in profile or authentication tokens to Google Analytics.

Google sign-in information is used for account and service functionality, not sold or used for advertising or training general-purpose AI models. Account data is protected by the security measures described below and retained while needed to operate your account, provide support, and meet legal obligations.

You can revoke Google access in your Google Account connections. Removing the sign-in connection stops automatic Google sign-in; revoking Google data access invalidates the associated Google tokens. You can choose to sign in again and reauthorize access. These actions do not automatically end an existing ModularIoT session or delete your ModularIoT account. Signing out of ModularIoT is separate from revoking access in Google. To request manual deletion of your account and stored Google profile information, email privacy@modulariot.com. Sending an email submits a request; it does not automatically delete data. We may verify your identity before handling the request. Information required for legal or security purposes may be retained as described in this policy.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our IoT monitoring services
• Process your transactions and manage your account
• Send you technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Analyze usage patterns to enhance user experience and platform performance
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our terms of service
• Send promotional communications (with your consent, where required)

4. Data Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf (hosting, analytics, payment processing).
• Business Transfers: In connection with a merger, acquisition, or sale of assets.
• Legal Requirements: When required by law, court order, or governmental authority.
• Protection of Rights: To protect the rights, property, or safety of ModularIoT, our users, or others.
• With Your Consent: When you have given us explicit permission to share your information.

We do not sell your personal information to third parties.

5. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL) and at rest, access controls, regular security audits, and secure data centers. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. IoT telemetry data retention periods may vary based on your subscription plan and can be configured according to your preferences.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request access to the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal information.
• Portability: Request a copy of your data in a structured, machine-readable format.
• Objection: Object to certain processing of your data.
• Withdrawal of Consent: Withdraw consent where processing is based on consent.

To exercise these rights, please contact us at privacy@modulariot.com.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses approved by relevant authorities.

9. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will take steps to delete such information.

10. Open Source Considerations

ModularIoT is an open-source platform. When you self-host our software, you are responsible for data collection and privacy practices on your own infrastructure. This Privacy Policy applies only to services hosted and operated directly by MicroboxLabs.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: