Legal

Privacy Policy

Last updated: July 2026  ·  Effective: July 2026

1. Who We Are

EdgeConductor is a connected product and asset operations platform operated from India. We provide device registry, live telemetry, OTA firmware management, rules automation, and B2B dashboards for hardware companies and enterprise operations teams. Contact: edgeconductor@gmail.com

2. What Data We Collect

Account Data

  • —Name, email address, and company name — provided on signup
  • —Password (hashed using bcrypt — never stored in plain text)
  • —Billing information — processed by Razorpay; we do not store card details

Device & Telemetry Data

  • —Device identifiers, firmware version, last-seen timestamp
  • —Sensor readings: temperature, humidity, CO₂, GPS coordinates, battery voltage, signal strength
  • —Device events: reboots, OTA updates, online/offline transitions
  • —All telemetry is timestamped and associated with your organization

Usage Data

  • —Dashboard activity: pages visited, features used
  • —API requests: endpoint, timestamp, response code (not request body)
  • —Browser type and IP address for security and abuse prevention

3. How We Use Your Data

  • —To operate and deliver the EdgeConductor platform to your organization
  • —To send transactional emails: account confirmation, OTA notifications, alert emails
  • —To generate invoices and process subscription payments via Razorpay
  • —To detect anomalies, security incidents, and platform abuse
  • —To improve platform performance and reliability
  • —We do not sell your data to third parties. We do not use your device telemetry for advertising.

4. Data Storage and Third Parties

Your data is stored using the following infrastructure providers: • Supabase (PostgreSQL database and authentication) — servers currently located in the United States • Vercel (application hosting and CDN) — global edge network • Razorpay (payment processing) — India-based, RBI-regulated We are actively working toward India-based data residency. If data residency is a requirement for your organization, contact us to discuss enterprise hosting options.

5. Data Retention

  • —Account data is retained for the duration of your subscription
  • —Telemetry history is retained for 7 days (Free), 90 days (Pro), or custom duration (Enterprise)
  • —On account deletion, all personal data and telemetry is permanently deleted within 30 days
  • —Billing records are retained for 7 years as required by Indian tax law (GST)

6. Your Rights

  • —Access: You can export all your organization's data via the REST API at any time
  • —Correction: Update your account information from the dashboard settings
  • —Deletion: Request account and data deletion by emailing edgeconductor@gmail.com
  • —Portability: Telemetry data is available in JSON and CSV format for export

7. Security

All data is transmitted over TLS 1.2 or higher. Device-to-cloud communication uses MQTT over TLS or HTTPS. Passwords are hashed using bcrypt. API keys are hashed before storage. For security vulnerability disclosures, see our Security Policy at edgeconductor.com/security.

8. Cookies

We use session cookies for authentication only. We do not use tracking cookies or third-party analytics cookies. You can disable cookies in your browser; however, the dashboard will not function without session cookies.

9. Applicable Law

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDPA). Any disputes shall be subject to the jurisdiction of courts in India.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify account holders by email at least 14 days before the change takes effect. The date of the last revision is shown below.

Questions about this policy? edgeconductor@gmail.com