Privacy Policy

1. Information we collect

• Account data — email address, password hash (managed by our authentication provider), display name and optional avatar.
• Device and controller data — hub codes, controller names, room labels, link type (internet or Bluetooth), pairing status and command verification results.
• Diagnostics — signal telemetry you save (RSSI, link quality, latency, packet loss) with a timestamp and context note.
• Audit logs — a record of security-relevant and access-relevant events: sign-ins, password and two-factor changes, pairing, device removal, and gate or access commands.
• Technical data — minimal service logs required to operate and secure the platform.

2. Why we process it

To authenticate you, pair and operate your controllers, diagnose faults, keep an accurate access record for gate and door commands, prevent abuse, and meet legal obligations. We do not sell your personal information and we do not use your command history for advertising.

3. Who can see your data

Your data is scoped to your account by database-level access rules. Household administrators and installers you invite can see controller and diagnostic records for support purposes. Our processors (cloud hosting, authentication, database) act on our instructions under contract.

4. Security

All traffic between the app, the cloud service and your hub is encrypted in transit with TLS; data at rest is encrypted by our hosting provider. Passwords are salted and hashed and never visible to us. Optional two-factor authentication (TOTP) is available in Account security. Access to your records is enforced per-row by the database, not just by the app.

5. How long we keep it

Retention windows, and your ability to shorten them, are described in our Data Retention Policy.

6. Your rights

• Access and correct your profile from the Account page.
• Delete your command, diagnostic and pairing history at any time.
• Remove any paired device from the Pair Remote page.
• Delete your entire account, which permanently erases your profile, controllers, telemetry, audit trail and sign-in credentials.
• Object, complain or contact the Information Regulator of South Africa.

7. Contact

Privacy questions and data requests: privacy@secuscan.co.za. We respond within 30 days.