Privacy Policy

We collect the following categories of information:

• Account information. Your name, email address and password (stored only as a salted hash) when you register or sign in.
• Device & telemetry data. Data you choose to send from your IoT devices — device names, types, locations, protocol details, sensor readings, metrics and the timestamps of those readings.
• Configuration data. Projects, dashboards, alert rules, API keys and other settings you create within the Service.
• Technical data. IP address, browser/app version, device model and operating system, and diagnostic logs generated when you interact with the Service.

We do notuse your data for third-party advertising, and we do not track you across other companies’ apps or websites.

• To create and manage your account and authenticate your sessions.
• To operate core features — ingesting telemetry, rendering dashboards, evaluating alert rules and delivering notifications.
• To maintain, secure, troubleshoot and improve the Service.
• To respond to your enquiries and provide customer support.
• To comply with legal obligations and enforce our terms.

Where applicable law (such as the GDPR or Singapore’s PDPA) requires it, we process your information on the bases of performance of our contract with you, your consent, our legitimate interests in operating and securing the Service, and compliance with legal obligations.

We do not sell your personal information. We share it only:

• With infrastructure providers (e.g. hosting, database and email delivery) who process data solely on our behalf and under confidentiality obligations.
• When required by law, legal process or to protect the rights, safety and security of users and the public.
• In connection with a merger, acquisition or sale of assets, subject to this policy.

If you self-host IoTFlow, your data resides on infrastructure that you control, and you act as the data controller for it.

We retain your account and configuration data for as long as your account is active. Telemetry data is retained according to your plan and configuration. When you delete your account, we delete or irreversibly anonymise your personal information within a reasonable period, except where retention is required for legal, accounting or security purposes.

Depending on your jurisdiction, you may have the right to:

• Access, correct or update the personal information we hold about you.
• Request deletion of your account and associated personal data.
• Object to or restrict certain processing, and request a copy of your data.
• Withdraw consent where processing is based on consent.

You can manage your account details in the app’s Settings. To request deletion or exercise any other right, contact us at support@tertiaryinfotech.com.

We use industry-standard safeguards — encryption in transit (HTTPS/TLS), hashed passwords, access controls and scoped API keys — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will delete it.

Your information may be processed and stored in countries other than your own. Where we transfer data internationally, we take steps to ensure it receives an adequate level of protection consistent with this policy and applicable law.

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated “Last updated” date. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

If you have questions or requests regarding this Privacy Policy or your data, contact:

Tertiary Infotech Pte Ltd
Email: support@tertiaryinfotech.com