This Privacy Policy explains how OpenAlarm collects, uses, discloses, and protects your personal information when you visit our websites - openalarm.io, app.openalarm.io, and docs.openalarm.io - and when you use the OpenAlarm service (together, the "Services").

OpenAlarm is an alarm-alerting notification service for do-it-yourself smart homes. When an alarm in your home is triggered, OpenAlarm relays that event to the people you have chosen so they can be notified and decide how to respond. OpenAlarm is a messenger, not a monitoring service: we do not watch your home, dispatch emergency responders, or provide professional or licensed alarm monitoring.

By using the Services, you agree to the collection and use of information as described in this policy.

Who we are

OpenAlarm is a trade name of 2411753 Alberta, Inc., a corporation existing under the laws of Alberta, Canada ("OpenAlarm", "we", "us", or "our"). We are the organization responsible for the personal information collected through the Services. For any privacy question or request, contact us at contact@openalarm.io.

Information we collect

Waitlist

When you join our launch waitlist, we collect the email address you provide. We also automatically record the date and time of your submission, the page or source it came from, your IP address, and your browser's user-agent string. We use this only to notify you about OpenAlarm and to protect the form from abuse.

Account information

When you create an OpenAlarm account, we collect your name, email address, and authentication credentials. Passwords are stored only in hashed form by our identity provider. If you subscribe to a paid plan, our payment processor collects your billing details; we do not store full payment card numbers.

Contacts you add

To use the Services you add one or more contacts who should be notified when an alarm is triggered. For each contact you may provide a name, email address, phone number, and your relationship to them. This is information about other people, so you must only add contacts who have agreed to be contacted by OpenAlarm on your behalf. See Contacts and third-party information below.

Alarm and event data

When your systems send an alarm event to OpenAlarm, we collect the details of that event, such as the source, type, and time of the trigger, together with the resulting notifications, their delivery status, and any acknowledgements or responses from your contacts. This record lets the Services function and gives you a history of what happened.

Communications and delivery data

To deliver notifications we process the content and metadata of the messages we send on your behalf - SMS, voice calls, push notifications, and email - including recipient addresses or numbers and delivery results. We also keep records of the support and account emails you exchange with us.

Technical and usage data

Like most online services, we automatically collect technical information when you use the Services, including IP address, device and browser information, pages viewed, and server log data. We use this to operate, secure, and improve the Services.

How we use your information

We use personal information to:

• provide, operate, and maintain the Services, including relaying alarm events and delivering notifications to your chosen contacts;
• create and manage your account and authenticate you;
• process payments and manage subscriptions;
• send you transactional messages about launch, service changes, security, and your account;
• monitor, secure, and prevent abuse, fraud, and technical problems;
• understand how the Services are used so we can improve them;
• comply with our legal obligations and enforce our terms.

We do not sell your personal information, and we do not use it for third-party advertising.

Consent and legal basis

We collect, use, and disclose your personal information with your consent, or as otherwise permitted or required by applicable Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation. In most cases you provide consent by choosing to use the Services and submitting your information. You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting us - though doing so may prevent us from providing some or all of the Services.

How we share information

We share personal information only as described here.

Service providers. We rely on trusted third parties to operate the Services. They may process personal information only on our instructions and only to provide their service to us:

• Amazon Web Services - cloud hosting, storage, and email delivery, primarily in the Canada West (Calgary) region;
• Twilio - delivery of SMS messages and voice calls;
• Apple and Google - delivery of mobile push notifications, where you use our mobile app;
• our payment processor - handling of subscription billing.

Some of these providers, such as Twilio and our payment processor, may process information in the United States or other countries.

Legal and safety. We may disclose personal information if we believe in good faith that it is required to comply with a law, regulation, legal process, or enforceable governmental request, or to protect the rights, property, or safety of OpenAlarm, our users, or others.

Business transfers. If OpenAlarm is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction. We will require any successor to honour this policy or notify you of any material change.

Contacts and third-party information

Some of the information in the Services is about people other than you - the contacts you choose to notify. You are responsible for having the authority and consent to provide their information to us and to have OpenAlarm contact them on your behalf. If you are a contact and you no longer wish to receive notifications, you can opt out of a message you receive, or contact us at contact@openalarm.io and we will help remove you or direct you to the account holder.

Where your information is stored

We store personal information primarily in Canada, in the Amazon Web Services Canada West (Calgary) region. Some service providers process information outside Canada, including in the United States, as noted above. When information is handled in another country it may be subject to that country's laws, including lawful access by its courts and government authorities.

How long we keep it

We keep personal information for as long as needed to provide the Services and for the purposes described in this policy. Waitlist emails are kept until we launch and have notified you, or until you ask to be removed. Account and event data are kept for the life of your account and for a reasonable period afterward to meet legal, security, and accounting requirements, after which it is deleted or anonymized.

How we protect it

We use technical and organizational safeguards to protect personal information, including encryption in transit and at rest, access controls, and least-privilege permissions. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to promptly address any issue that arises.

Your privacy rights

Subject to applicable law, you have the right to:

• access the personal information we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• withdraw your consent or ask us to delete your information, subject to legal and contractual limits;
• ask questions about how we handle your information.

To exercise any of these rights, contact us at contact@openalarm.io. We may need to verify your identity before acting on a request. If you are not satisfied with our response, you have the right to contact the Office of the Privacy Commissioner of Canada, or your applicable provincial regulator such as the Office of the Information and Privacy Commissioner of Alberta.

Cookies and similar technologies

Our marketing website (openalarm.io) uses only what is necessary to serve the site and does not set advertising or cross-site tracking cookies. The application (app.openalarm.io) uses cookies and similar local storage to keep you signed in and to keep the app working. Our documentation site (docs.openalarm.io) uses only essential technical storage. You can control cookies through your browser settings, though disabling essential storage may prevent the application from working.

Children

The Services are intended for adults and are not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above, and for material changes we will take reasonable steps to notify you. Your continued use of the Services after an update means you accept the revised policy.

How to contact us

If you have questions, concerns, or requests about this policy or your personal information, contact us:

OpenAlarm
Email: contact@openalarm.io