What we keep about you, and why.

The controller of the personal data described here is [US COMPANY NAME], [US BUSINESS ADDRESS] (registration: [COMPANY REGISTRATION / VAT ID]).

Engineering, manufacturing and the operation of the IoTData Cloud platform are carried out by Data Frontier Tecnologia e Desenvolvimento LTDA, in Belo Horizonte, Brazil, which processes the data on the controller’s behalf.

EU representative (GDPR art. 27): [EU REPRESENTATIVE — GDPR art. 27, if required].

Proposal requests. When you send the contact form we store what you type: name or company, e-mail, phone (optional), city and country, the subject and your message. We also store the IP address, date and time of the request, to protect the form against abuse.

Platform accounts. Users of the platform have a username, full name, e-mail, phone and address, registered by their account administrator. Relevant actions on the platform are recorded in an audit trail with user, action, date and source address.

Sign in with Google (optional). If you link your Google account, Google tells us your Google account identifier, your e-mail and whether it is verified, and your profile name and picture. We keep only the identifier, to recognize you at the next sign-in; the e-mail goes to the audit trail; name and picture are not stored. We never receive your Google password or any other account data. The Google script is loaded only when you click the “Sign in with Google” button.

Devices. Installed equipment sends technical readings (for example vibration, temperature, flow, position and the time of each measurement). These readings belong to the customer and are tied to the customer’s account.

To answer your proposal request and talk to you about it. To operate the platform you contracted, including the alerts you configure. To keep the website and the platform secure.

We do not sell personal data. We do not use it for third-party advertising. We do not send newsletters unless you ask for them.

Proposal requests: steps taken at your request before entering into a contract (art. 6(1)(b)). Use of the platform: performance of a contract (art. 6(1)(b)). Audit trail and abuse protection: our legitimate interest in keeping the service secure (art. 6(1)(f)). Disclosures required by law: legal obligation (art. 6(1)(c)).

With the providers that make the service work: hosting, e-mail delivery and the communication networks used by the devices (cellular and satellite). With authorities, when the law requires it. Never with data brokers or advertisers.

The platform is operated from Brazil, so your data is transferred to and processed in Brazil. [TRANSFER MECHANISM — e.g. Standard Contractual Clauses or an adequacy decision — to be confirmed by legal counsel.] You can ask us for a copy of the safeguards in place.

Proposal requests: while the commercial conversation lasts and for up to 12 months afterwards, unless you ask us to delete them sooner. Platform data: while the contract is in force and for the period the law requires for measurement records. Audit trail: for as long as needed for security and accountability.

What we store in your browser without asking is strictly necessary for the site to work:

• Login session on the platform, kept in your browser’s local storage while you are signed in.
• Sign in with Google: when you click the Google button we set a one-time technical cookie (iot_google_nonce, up to 10 minutes) that ties the request to your browser and is then deleted.

No analytics or advertising cookies. frontierdataiot.com does not load Google Analytics or any other tracking script, so there is no cookie banner to answer.

The site’s fonts are loaded from Google Fonts, which sends your IP address to Google when the page loads, as on any site that uses that service.

Under the GDPR (and the UK GDPR) you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw any consent you have given. You also have the right to lodge a complaint with the data protection supervisory authority of your country of residence.

We answer within one month of receiving your request.

If you are a California resident, the CCPA as amended by the CPRA gives you the right to know what personal information we collect and how we use it, to access it, to have it corrected or deleted, and not to be discriminated against for exercising these rights. Residents of other US states with comparable laws have similar rights.

We do not sell personal information and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of. We do not use sensitive personal information.

You may make a request yourself or through an authorized agent. We will verify your request and answer within 45 days.

The site and the platform are aimed at businesses and are not directed to children. We do not knowingly collect data from anyone under 16.

Encrypted connections (HTTPS), hashed passwords, encrypted service credentials, login attempt limits, an audit trail and daily backups. No system is infallible; if an incident affects your data, we will notify you and the competent authority as the law requires.

For anything about your data, write to [PRIVACY E-MAIL].