← Back to Zonde.io

Privacy Policy

1. What We Collect

When you create an account we collect your name and email address. If you optionally provide a phone number and opt in to SMS alerts, we store that as well.

If your account is linked to a Zonde monitoring device, we also collect sensor readings (temperature, humidity, pressure, current, etc.) transmitted by that device.

We do not collect payment information, precise location data, or any data beyond what is needed to operate the service.

2. How We Use It

• To provide and operate your monitoring account and dashboard
• To send you transactional emails (email verification, password reset)
• To send device alert notifications via email or SMS when a sensor crosses a threshold you have configured
• To display your sensor data, charts, and historical trends

We do not send marketing emails or SMS. We do not sell or share your data with third parties.

3. SMS Alerts

If you provide a phone number during registration or in your account settings and opt in, Zonde may send you SMS text messages for device alert notifications (e.g., a sensor threshold has been crossed, a device has gone offline). These are operational alerts only — not marketing messages.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Message frequency varies based on the alert rules you configure. Message and data rates may apply. You can opt out at any time by replying STOP to any alert message, or by disabling SMS in your account settings. Reply HELP for assistance.

For full details, see our SMS Policy.

4. How We Protect Your Data

• Passwords are hashed using bcrypt — they are never stored in readable form
• All connections to the portal are encrypted via HTTPS (TLS)
• Device-to-cloud communication is encrypted via MQTT over TLS
• Database access is restricted to the application server only
• Session cookies are HTTP-only and Secure
• Two-factor authentication (TOTP) is available for all accounts
• Firmware updates are cryptographically signed

5. Where Data Is Stored

Your data is stored on servers hosted on Amazon Web Services (AWS) in Canada. Sensor time-series data is stored in InfluxDB with a 90-day retention policy. Account data is stored in PostgreSQL and retained while your account is active.

6. Third-Party Services

We use the following third-party services to operate the platform:

• Amazon Web Services (AWS) — cloud hosting and email delivery (SES)
• Twilio — SMS alert delivery (only if you opt in)
• Let's Encrypt — TLS certificates

These providers process data only as necessary to deliver their services. We do not share your data with any other third parties.

7. Cookies

We use a single session cookie to keep you logged in. We do not use tracking cookies, analytics cookies, or any third-party cookies.

8. Your Rights

• You can update your name, email, phone number, and preferences at any time in your account settings
• You can opt out of SMS alerts at any time by replying STOP or disabling SMS in your settings
• You can request deletion of your account and all associated data by emailing privacy@zonde.io
• We will process deletion requests within 7 business days

9. Children's Privacy

Zonde is not directed at individuals under the age of 18. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this policy as the platform evolves. Material changes will be communicated via email to registered users. Continued use of the service constitutes acceptance of the updated policy.

11. Contact

Questions about this policy: privacy@zonde.io