IoTEZPrivacy policy
Effective October 6, 2026
IoTEZ ("IoTEZ", "we", "us") provides a sensor-monitoring service that lets organizations such as school districts and businesses view readings from their building sensors in a secure web dashboard (the "Service"). This policy explains what information we collect, how we use it, and the choices available to you. It applies to our website at iot-ez.com and to the Service.
Who this policy is about
We provide the Service to organizations (our "customers"). Customers decide who in their organization can use the Service, and they control the sensor data they connect. When we process information on a customer's behalf, we do so under that customer's instructions. If you use IoTEZ through your employer or school district, questions about your access or your organization's data may be best answered by your organization's IoTEZ administrator.
Information we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Account and sign-in information | Your name, work or personal email address, a unique identifier from your sign-in provider, the identifier of your organization's directory (for example, a Microsoft Entra tenant ID), your role, and when you last signed in. | Your organization's administrator (when they invite you) and your sign-in provider (Microsoft, or Google where offered) when you sign in. |
| Invitation emails | The invited person's email address, who invited them, and whether the email was delivered, bounced, or reported as spam. | Your organization's administrator, and our email provider's delivery notifications. |
| Sensor and device data | Readings such as temperature, humidity, water detection, door state, air quality and power; the time of each reading; and device details such as serial numbers, names, and the network they belong to. | The network or sensor platforms your organization connects (for example, Cisco Meraki). |
| Integration credentials | Access keys or tokens your organization provides so we can read data from its connected platforms. | Your organization's administrator. |
| Technical and security logs | Information our servers record when the Service is used, such as IP addresses, request times, and error details. | Automatically, when you use the website or Service. |
| Messages you send us | Your name, email address, organization (if given) and message, plus your IP address and browser type, which we use only to prevent spam and abuse. | You, when you use the contact form on our website or write to us. |
Sensor readings describe buildings and equipment, not people. We do not ask for, and the Service is not designed to collect, information about students or other individuals beyond the account information above.
How we use information
- To provide the Service: sign you in, show your organization's sensors and readings, and let administrators manage their team.
- To send invitation emails that your organization's administrator requests.
- To keep the Service secure and reliable: detect abuse, investigate problems, and keep each organization's data separate.
- To provide support and respond to your messages.
- To comply with legal obligations.
We do not sell personal information, we do not share it for advertising, and we do not use it to build marketing profiles. The Service sends no marketing email.
Cookies and similar technologies
Our website uses no cookies and no third-party analytics or advertising trackers. When you sign in to the Service, your browser keeps your sign-in session in its session storage (cleared when you close the tab) and remembers display preferences, such as °F or °C, in its local storage. These are needed for the Service to work and are not used for tracking.
Service providers
We use a small number of providers to run the Service. They process information only to provide their services to us:
- Amazon Web Services: hosting, databases, sign-in management (Amazon Cognito), and email delivery (Amazon SES). Data is stored in the United States (Ohio region).
- Microsoft, and Google where offered: signing you in with your existing account. We never see or store your password.
- Network and sensor platforms your organization connects, such as Cisco Meraki: the sources of your organization's sensor data.
We may also disclose information if required by law, to protect the rights, safety or security of our users or the Service, or as part of a merger or acquisition (in which case this policy's protections continue to apply).
How long we keep information
- Sensor readings are kept for the retention period of your organization's plan (currently 3 months or 1 year) and then deleted automatically.
- Account information is kept while your account is active. Your organization's administrator can disable your access at any time; ask us to delete a disabled account if needed.
- Technical logs are generally kept for 14 days.
- Invitation email records and integration credentials are kept while your organization uses the Service, and deleted when the organization's account is closed.
How we protect information
- All connections to the Service are encrypted (HTTPS/TLS), and our databases, queues and stored credentials are encrypted at rest.
- There are no IoTEZ passwords to steal: sign-in uses your organization's Microsoft account (or Google, where offered).
- Each organization's data is isolated at the database level, so one organization cannot see another's.
- Our database is not reachable from the public internet, and staff access is limited to a secured administrative connection.
No system is perfectly secure, but we work to protect your information and will notify affected customers of a security incident as required by law.
Your choices and rights
You can ask to access, correct or delete your personal information, or ask questions about how it's handled, by contacting your organization's IoTEZ administrator or using the contact form below. Depending on where you live, you may have additional rights under local law. We will respond within the time the law requires, and we won't treat you differently for exercising your rights. Where we process information on a customer's behalf, we may refer your request to that customer.
Children
The Service is for organizations and their staff. It is not directed to children, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.
Changes to this policy
We may update this policy as the Service evolves. We will post the new version here with a new effective date, and notify customer administrators of material changes.
Contact us
Questions about this policy or your information? Reach us through the contact form on our website. Signed-in users can also ask their organization's IoTEZ administrator.