Privacy Policy

We collect information you provide directly to us when you create an account, use the Service, or communicate with us. This may include:

• Account Information: Name, email address, password, organization name, and role.
• Asset Data: Information about assets, licenses, consumables, and related records you enter into the Service.
• Usage Data: Information about how you use the Service, including pages visited, features used, and actions taken.
• Device Information: Browser type, operating system, device identifiers, and IP address.
• Cookies and Tracking: We use cookies and similar technologies to maintain your session, remember preferences, and analyze usage patterns.

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Process transactions and send related information, including confirmations and invoices.
• Send you technical notices, updates, security alerts, and support messages.
• Respond to your comments, questions, and customer service requests.
• Monitor and analyze trends, usage, and activities in connection with the Service.
• Detect, investigate, and prevent fraudulent transactions and other illegal activities and protect the rights and property of Asset Tracker and others.

We take reasonable measures to help protect your personal information from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256).
• Regular security audits and vulnerability assessments.
• Access controls and authentication mechanisms.
• Regular backups and disaster recovery procedures.

Your data is stored in secure data centers located within the United States and the European Union. We use industry-standard infrastructure providers that maintain SOC 2 Type II compliance.

We may share information with third-party service providers that perform services on our behalf, such as:

• Cloud hosting and infrastructure providers.
• Payment processors for billing and subscription management.
• Analytics services to understand Service usage and improve performance.
• Email delivery services for transactional and notification emails.
• Customer support tools for managing support requests.

These third parties are contractually obligated to use your information only as necessary to provide their services to us and are required to maintain the confidentiality and security of your information.

If you are located in the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). These include the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete personal data.
• Erasure: Request deletion of your personal data under certain circumstances.
• Restriction: Request restriction of processing of your personal data.
• Portability: Request transfer of your personal data to another service.
• Objection: Object to the processing of your personal data for certain purposes.

To exercise any of these rights, please contact us at the email address provided below. We will respond to your request within 30 days.

We retain your personal information for as long as your account is active or as needed to provide you with the Service. We will also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain certain information by law or for legitimate business purposes such as fraud prevention.

Aggregate, anonymized data that cannot be used to identify you may be retained indefinitely for analytical and statistical purposes.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

For EEA residents, you also have the right to lodge a complaint with your local data protection authority if you believe we have not adequately addressed your concerns.