Privacy Policy

Last updated: July 2026

What we collect

When you sign up as an Admin, we collect your name, business name, and email address. When you add clients, groups, or devices to your account, that data — including device identifiers, sensor readings, and connectivity status — is stored so the platform can display it back to you and your clients.

When you pay for a plan, billing is handled by our external payment processor directly — we never see or store your card details. We keep a record of your subscription status and billing history reference (not the card itself).

How we use it

To operate the platform: authenticate logins, display dashboards, run the automation rules you configure, send connectivity alerts, and process billing. We don't sell your data or your clients' data to third parties.

Who we share it with

Only the services required to run MrSanmiguel IOT Portal: our hosting provider, our payment processor for payment processing, and our email delivery service for invitations and alerts. Each of these processes data under their own privacy terms.

Cookies

We use a session cookie to keep you logged in and a language preference cookie to remember whether you last viewed the site in English or Spanish. On the public marketing pages, we also use Google Analytics to understand traffic and improve the site. We don't use advertising cookies or sell any data to third parties for advertising purposes.

Data retention

If a subscription is cancelled or lapses without payment, account data is retained for a grace period to allow reactivation, after which it is permanently deleted along with all associated client, group, and device records.

Your rights

You can request a copy of your data or ask us to delete your account at any time by contacting us. Deleting an Admin account removes that Admin's clients, groups, and devices — this cannot be undone.

Security

Devices connect using mutual TLS with individually signed certificates. Passwords are hashed, never stored in plain text. Access to the admin portal is scoped — an Admin can only see their own clients, and a Client can only see their own devices.

Changes to this policy

We'll update this page if our practices change. Continued use of the platform after an update means you accept the revised policy.

Questions

Reach out through our support chat for anything privacy-related.