Privacy Policy & Data Protection

1. Scope & Introduction

This Privacy Policy applies to SenseCAP (accessible via https://www.sensecap.io/). We process personal data in accordance with applicable data-protection requirements. This Privacy Policy outlines our commitment to protecting your personal data when browsing our online catalog, creating user accounts, placing IoT and gateway hardware orders, requesting warranty and technical support, downloading firmware, using customer support services, submitting recruitment applications, or interacting with our global logistics network.

2. Personal Data We Collect

We collect only the information reasonably necessary to process orders, deliver IoT hardware and software updates, deliver warranty and technical support, protect accounts, process recruitment applications, and comply with applicable legal obligations:

• Limited Verification Data: Identity or business verification is not routinely required. Limited verification may be requested where reasonably necessary for a refund to a different corporate account, suspected fraud, account protection, or compliance with a specific legal obligation.
• Contact & Shipping Data: Email address, billing address, physical delivery location, postal code, and phone numbers for express logistics courier contact.
• Financial & Payment Data: Bank-transfer references, transaction identifiers, and billing details required to match and verify an order or confirm incoming payments. Payment information is processed securely through authorized payment gateways.
• Device & Telemetry Data: Hardware serial numbers, MAC addresses, device models, LoRaWAN DevEUI/AppEUI parameters, firmware versions, operational telemetry, connection logs, and technical metrics required for device provisioning and management.
• Technical-Service & Warranty Data: Serial number, model, purchase association, warranty status, diagnostic notes, configuration details, fault evidence, repair history, firmware download requests, and support documentation.
• Recruitment & Career Applications: Resume/CV details, candidate contact information, work history, educational background, professional credentials, and references submitted when applying for employment opportunities.
• Customer Inquiries & Support: Support ticket communications, email correspondence, and technical inquiries exchanged with our support and engineering teams to provide timely assistance.
• Technical & Usage Data: IP addresses, browser types, device identifiers, session cookies, and navigation metrics to optimize platform security and prevent automated bot traffic.

3. How We Use Your Personal Information

Your personal data is strictly processed for legitimate corporate and operational purposes:

• Fulfilling, packaging, insuring, and shipping hardware orders to your designated shipping location.
• Provisioning IoT gateway configurations, firmware releases, and device activation services.
• Conducting limited verification only in exceptional circumstances where required by law or anti-fraud protocols.
• Issuing automated commercial invoices, tax receipts, and warranty registration certificates under your unique serial numbers.
• Managing warranty repair services, RMA claims, and serial support lookups via Serial Support & RMA.
• Assessing external device compatibility, conducting authorized remote diagnostic sessions, maintaining service history, and providing account-based firmware access for registered serials.
• Providing customer assistance, managing technical inquiries, and responding to support requests.
• Reviewing candidate CVs, assessing qualifications, and processing job applications.
• Sending critical service notifications regarding batch release dates, order status updates, and security alerts.

4. Data Security & Global Storage Standards

SenseCAP implements industry-standard physical, technical, and administrative safeguards to protect your personal data against unauthorized access, loss, alteration, or disclosure.

Verification documents, if requested under exceptional fraud reviews, are permanently deleted within 20 days after verification is completed, unless an active dispute requires temporary retention. Security logs and IP records are normally retained for up to 365 days. Device serial, repair, firmware-entitlement and package-delivery records may be retained for the supported service life of the device so that continuing access and service history can be administered. Commercial invoices, payment, tax and accounting records are retained for the legally required period.

If a security incident creates a material risk to affected Customers, we investigate, contain the incident and provide notices required by applicable law.

5. Third-Party Sharing & Logistics Disclosure

We never sell, rent, or trade your personal data to third-party marketing companies. Data is only shared with trusted service providers indispensable for fulfilling your order and delivering our services:

• Express Logistics Carriers: DHL Express, FedEx, UPS, and dedicated freight couriers to enable door-to-door delivery.
• Payment Processors & Banking Partners: Regulated financial institutions and merchant payment gateways strictly as needed to process checkout payments and verify transactions.
• Cloud Infrastructure & Device Management: Enterprise cloud server providers and device management platforms strictly as necessary to deliver firmware updates, telemetry dashboards, and cloud console services.
• Verification Providers, When Required: Only the minimum information needed for an exceptional verification review, under strict confidentiality and data-protection obligations.
• Authorized Technical & Repair Partners: Only the case information, device details, logs, and connection information necessary to diagnose, repair, or provide compatible firmware.
• Customs Authorities: Required export/import documentation declared to international customs offices to facilitate clearance.

International Data Transfers: Where operational requirements involve transferring data across borders (such as between regional logistics hubs or global repair centers), all transfers are conducted under appropriate contractual safeguards, strict confidentiality agreements, and applicable data-protection standards.

6. Your Data Rights & Choices

Subject to the law applicable to you, you may have the following rights. We will explain any legal exception that prevents a request from being completed in full:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal records.
• Right to Erasure ("Right to be Forgotten"): Request deletion of personal data when no longer required for legal or transactional obligations.
• Right to Restrict Processing: Request suspension of data processing under specific conditions.
• Right to Object or Complain: Object to certain processing and contact the competent data-protection authority where that right applies.

7. Contact Our Data Privacy Team

If you have questions regarding this Privacy Policy, wish to exercise your data rights, or submit a privacy inquiry, please contact our Data Privacy Team: