Privacy Policy

Introduction

KinuxOTA ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our over-the-air (OTA) update platform for IoT devices.

We take data protection seriously and comply with applicable privacy laws and regulations worldwide, including but not limited to the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other regional privacy laws.

Information We Collect

We may collect the following types of information:

Account Information

When you register for an account, we collect:

• Name
• Email address
• Password (stored in encrypted form)
• Company information (if applicable)

Device Information

For devices managed through our platform, we collect:

• Device identifiers
• Device model and firmware version
• Connection status and history
• Update installation status
• Performance metrics related to updates

Usage Information

We collect information about how you use our platform:

• Log data (IP address, browser type, pages visited)
• Actions taken within the platform
• Feature usage statistics
• Error reports

Cookies and Similar Technologies

Our application itself does not use cookies for its core functionality:

When you log in to our service, we store session-related data such as your login status and authentication tokens in your browser's session storage. This data is strictly necessary to maintain your session and is not used for tracking or profiling. The information is automatically deleted when you close your browser.

• Session Storage: We use session storage only for strictly necessary purposes like maintaining your authenticated session.
• JWT Tokens: We use JSON Web Tokens (JWTs) for authentication, which are stored in memory and session storage rather than cookies.
• CSRF Protection: We implement Cross-Site Request Forgery protection using secure tokens transmitted via HTTP headers, not cookies.

No Tracking or Analytics: We do not use any unnecessary tracking or analytics technologies. We respect your privacy and only collect the minimum information needed to provide our services.

However, we do use certain third-party services that set strictly necessary cookies:

• Cloudflare: We use Cloudflare for DNS services and security. Cloudflare sets a cookie called "cf_clearance" that is necessary for their security features to work properly.

For more detailed information about the cookies used on our website, please visit our Cookie Policy.

How We Use Your Information

We use the collected information for the following purposes:

• Providing and maintaining our services
• Processing and completing update transactions
• Managing your account and providing customer support
• Improving our platform and user experience
• Sending administrative information, such as updates to our terms or privacy policy
• Sending service-related notifications about downtime or security issues
• Preventing fraudulent or unauthorized use
• Complying with legal obligations

We will never use your information to hack, compromise, or otherwise misuse your devices. Our platform is designed with security as a top priority, and we implement multiple layers of protection to ensure the integrity of your devices and data.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• End-to-end encryption for all update packages
• Secure authentication mechanisms
• Regular security audits and penetration testing
• Access controls and monitoring
• Secure data storage with encryption at rest
• Regular security training for our staff

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security but continuously work to enhance our security measures.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When determining how long to retain information, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, and the purposes for which we process the information.

Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Right to access the personal information we have about you
• Right to rectify inaccurate or incomplete information
• Right to erasure (the "right to be forgotten")
• Right to restrict processing of your personal information
• Right to data portability
• Right to object to processing of your personal information
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information. This section describes your CCPA rights and explains how to exercise those rights.

Notice of Collection

We have collected the categories of personal information listed in the "Information We Collect" section above. We collect this information for the business purposes described in the "How We Use Your Information" section.

No Sale of Personal Information

KinuxOTA does not sell your personal information. We do not sell, rent, release, disclose, disseminate, transfer, or otherwise communicate your personal information to any third party for monetary or other valuable consideration. Because we do not sell personal information, we do not provide a "Do Not Sell My Personal Information" link on our website.

Your Rights Under CCPA

The CCPA provides California residents with the following rights:

• Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell.
• Right to Delete: You have the right to request the deletion of your personal information that we collect or maintain.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

Exercising Your Rights

To exercise your rights under CCPA, please contact us using the information in the "Contact Us" section. We will respond to verifiable consumer requests within 45 days of receipt. We may require additional information to verify your identity before responding to your request.

International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country.

When we transfer your information to other countries, we will protect that information as described in this Privacy Policy and in accordance with applicable law. We use appropriate safeguards for international data transfers, such as Standard Contractual Clauses, to ensure your information receives an adequate level of protection.

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us, and we will take steps to delete such information.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]