Log in Open Dashboard

Legal

Privacy Policy

Last updated: July 2026

Draft starting point, not legal advice. The facts below (what we collect, what we use, how it's stored) are accurate to how the platform actually works today. The legal wording itself still needs review by a qualified lawyer before publishing — especially before submitting the ioVertex app to the Apple App Store or Google Play, both of which require a working Privacy Policy URL.

1. Overview & scope

This policy covers data collected through the ioVertex website (iovertex.com), the ioVertex dashboard (app.iovertex.com), and the ioVertex Android app. It does not cover third-party sites we link to.

2. Account data we collect

  • Name and email address, used to create and secure your account
  • Password, stored only as a bcrypt hash — we never store or can see your plain-text password
  • Organization/company name, if provided
  • Your assigned role and plan tier, used to control what you can see and do in the dashboard

Signing in sets one cookie, iovertex_token, marked httpOnly so it can't be read by page scripts — it exists only to keep you signed in and expires automatically after 8 hours. We don't use it, or anything else, for tracking or advertising.

3. Device & telemetry data

Devices you register send sensor telemetry — voltage, temperature, current, alarm states, and similar readings — to our platform over an encrypted connection. This data stream is numeric and tied to a device identifier, not to you personally; it doesn't itself contain personal information. It's associated with your account only through the device-to-account mapping stored separately in our database.

4. Push notifications

If you use the ioVertex Android app and enable alerts, we register a push token with Firebase Cloud Messaging (Google) so we can deliver threshold-breach alerts to your device. Browser-based alerts use the same idea via your browser's own push service (a W3C Web Push subscription). Either token identifies your installed app or browser, not you personally, and can be revoked at any time by disabling notifications or uninstalling the app.

5. Cookies & analytics

This marketing website and the dashboard do not use tracking cookies, advertising pixels, or third-party analytics. The only cookie in use anywhere is the sign-in session cookie described in Section 2.

6. How long we keep your data

Telemetry history is retained according to your plan's retention window — currently 30 days up to 1 year, depending on plan. Older data isn't deleted on a downgrade, only hidden from view; it becomes visible again if you upgrade. Account data is retained until you request deletion (Section 8). Administrative actions (device registration, role changes, plan edits) are recorded in an internal audit log for security and accountability.

7. How we share data

We do not sell your data. We share it only with the infrastructure providers needed to run the Service — hosting, push notification delivery (Firebase), and a payment processor if you're on a paid plan (which handles your card details directly; we don't store full card numbers ourselves) — and when required by law.

8. Your rights & requesting deletion

You can request a copy of your data, or request that your account and associated data be deleted, by emailing [email protected]. Deleting your account removes your login and telemetry history from active systems; some records may be retained briefly in backups before they age out.

9. Children's privacy

ioVertex is not directed at children under 16, and we do not knowingly collect data from them.

10. Changes to this policy

We'll update the date at the top of this page when this policy changes, and post material changes here before they take effect.

11. Contact

Questions about this policy: [email protected]