Privacy Policy — ESP32 Services

What we collect

Your account: your email address, your name, and your password, which we store only in scrambled (hashed) form so no one, including us, can read it. We also record when you last signed in or visited the site while signed in, and the settings you choose.
Your orders: your name, shipping address and email, your phone number if you give one, what you bought, the amounts and sales tax, and shipping and tracking details.
Payments: handled by our payment processor, Stripe. Card and bank details go straight to Stripe and never reach our server. We keep Stripe’s reference numbers for your payments, and for a saved payment method if you subscribe, but never the card or account number itself.
Your sensors: the time of each detection and how many there were, when the sensor last checked in, its settings and the name you give it, and technical details it reports: its model and firmware version, its Wi-Fi signal strength, the name of the Wi-Fi network it is connected to, and the city it uses to keep local time. Your Wi-Fi password stays on the sensor and is never sent to us. The sensors have no camera and no microphone.
People you add: the email addresses of anyone you add to receive alerts, and the accounts you share a sensor with.
Messages you send us: through the Contact form, your name, email, phone number if you give one, your message, and the internet (IP) address it was sent from, which helps us block spam.
Push notifications: if you turn them on, the delivery address your browser gives us for sending them to your device.
Technical records: our web server logs the IP address, page and browser type of each visit, and keeps those logs for 14 days. On our public pages, Cloudflare Web Analytics counts visits: the page, the site that sent you, and your browser, device type and country, without cookies and without identifying you. Sign-in attempts are recorded with the IP address for one week, to stop password guessing.

How we use it

To run your dashboard, charts and alerts.
To send the emails you expect: alerts, order and shipping confirmations, billing notices, and account messages such as password resets.
To ship your order and honor the money-back guarantee and warranty.
To answer your questions and fix problems with your sensors.
To keep the site and your account secure, and to meet our tax and legal obligations.

We don’t use your information for advertising, and we don’t build profiles of you.

Who can see your sensor data

You, and the people you choose to share a sensor with. The people you add as alert recipients receive the alert emails. We can see sensor data in order to provide support and keep the service running, and we look at it only for those reasons. We treat activity and sleep readings as private: they are never sold or used for advertising.

Who we share it with

Only with the companies that help us run the service, and only what each one needs:

Stripe processes payments.
The California Department of Tax and Fee Administration receives the shipping address of an order delivered in California, through its public tax-rate service, so we charge the right sales tax. No name or contact details are sent.
Cloudflare sends our email, runs our domain’s address records, and counts visits to our public pages without cookies.
Google (Gmail) is a backup route for sending our email.
IONOS hosts our support mailbox.
Oracle Cloud hosts our server, in the United States.
The U.S. Postal Service receives your name and shipping address to deliver your order.

We may also disclose information if the law requires it, or to protect someone’s safety. If ESP32 Services were ever sold or merged, your information would move with it under this policy. We do not sell your personal information, and we do not share it for advertising.

Cookies

We use only the cookies the site needs: one keeps you signed in, and one remembers your cart. Your browser also remembers your choice of time format. We use no advertising, analytics or third-party tracking cookies. On the checkout page, Stripe sets its own cookies to help prevent fraud.

Because we don’t track you across other websites, browser “Do Not Track” and Global Privacy Control signals don’t change anything here.

How long we keep it

Your account and sensor readings: for as long as you have an account. You can delete your account from your Account page. You then have 7 days to change your mind, after which your account, sensors and readings are permanently erased. Copies in our backups are gone within a further 30 days.
Orders: kept after an account is deleted, for as long as tax law requires and for warranty claims.
Contact messages: for as long as we need them to help you and for our records.
Server logs: 14 days. Sign-in attempts: one week.

Your choices and rights

You can see and change your details, alert recipients and sharing on your Account page and dashboard, turn alerts and push notifications off at any time, and delete your account yourself.

You can also email us to ask for a copy of the information we hold about you, to correct it, or to delete it. We’ll answer within 45 days, and we won’t treat you differently for asking. California residents have these rights under California law; we extend them to everyone.

Security

The site is served only over encrypted connections (HTTPS), passwords are stored hashed, card details stay with Stripe, and access to our server is restricted. No system is perfectly secure, but if a breach ever affected your information, we would tell you as the law requires.

Children

Our service is not meant for children under 13, and we don’t knowingly collect their information. If you believe a child has given us information, contact us and we’ll delete it.

Changes to this policy

If we change this policy, we’ll update the date at the top of this page. If a change is significant, we’ll email account holders before it takes effect.

Contact us

Questions or requests about your privacy: email support@esp32services.com or use our Contact page.

ESP32 Services, San Diego, California.