iotBind is a personal project to support the community of IoT developers. In the spirit of transparency, this policy explains which data is collected when you use the iotbind.com website, the platform, the apps and the APIs, why it is used, and how you can ask for a copy or its deletion. By using iotBind, you accept this policy and the terms of use.
Data we collect
- Account data: name, email address, password (stored only as a secure hash), country, time zone, preferred language and, if you give them, phone number and city. We also keep the registration date, the address (IP) used to register and, if you were invited, the inviting account.
- Device data: the values your devices send to the platform (readings, commands, positions), device names and settings, and the related history and logs.
- Security and usage records: sign-in history, the address and browser used, and records of failed or excessive attempts, kept to protect accounts and the service.
- Messages: what you write in the contact form (name, email, topic, message) and the address it was sent from.
- Downloads: for desktop app downloads we record the file, time, operating system, browser and a shortened address (the last part is removed).
- Analytics (only with your consent): pages visited, device type and approximate region, collected through Google Analytics and/or Umami.
- Payments (when paid plans are available): paid plans are handled by payment providers (such as Stripe or PayPal). We receive the subscription status and invoices, never your full card number.
We do not ask for sensitive data (health, religion, biometrics). Please do not send it through the service.
Why we use it
- Creating and running your account, storing and showing your device data, and running the apps and APIs.
- Confirming your email address and sending service messages (security alerts, billing, important changes).
- Protecting accounts and the service: rate limits, security checks, abuse prevention and security logs.
- Answering your messages.
- Sending the newsletter, only if you subscribe. You can unsubscribe at any time.
- Website analytics, only if you accept them in the cookie settings.
- Billing and accounting, when paid plans are available.
We do not sell your data, and we do not use it to make automated decisions about you.
Who we share data with
We share personal data only when it is needed for the purposes above, with:
- Service providers used to run iotBind: hosting, email delivery and backups. Our servers are hosted by a hosting provider. These providers may process data in countries other than yours.
- Payment providers (such as Stripe or PayPal) when you buy a paid plan.
- Analytics providers (Google Analytics, Umami at analyse.adelk.sa) only if you accept analytics.
- Services you connect yourself, such as Telegram, MQTT.one or your own webhook: we send them only what you configure.
- Authorities, when we are legally required to, or to protect the users and the service.
We never sell or rent your personal data.
How long we keep data
- Account and device settings: as long as your account exists. When you delete your account, they are deleted or anonymised.
- Device history: according to the history period of your plan.
- Registrations not confirmed: kept so that the owner of the address can finish the registration later. Ask us through the contact form and we delete them.
- Security and sign-in records: usually up to one year. Records of attempts used for rate limits: one day.
- Contact messages: as long as needed to handle your request, usually no more than two years.
- Invoices: as long as needed for accounting.
How we protect data
We make reasonable efforts to protect data: encrypted connections (HTTPS), password hashing, a secret key per device, limits against automated attacks, access restricted to authorised persons, separate database accounts with minimal rights, and regular backups. No system is perfectly secure, and we cannot guarantee that data will never be lost or exposed. If we learn of a breach affecting your data, we will do our best to inform you.
Your requests about your data
You can ask us to:
- tell you what data we hold about you and give you a copy;
- correct inaccurate data;
- delete your data or your account;
- stop the newsletter or analytics (you can also do this yourself at any time).
Use the contact form with the topic "Personal data request", from or mentioning the email address of your account. We may ask you to confirm your identity, and we handle requests as soon as we reasonably can. Some records may be kept when they are needed for security or accounting.
Educational use and minors
iotBind welcomes educational use and student projects. Users under 13 may use the service only under the supervision of a parent, guardian, teacher or educational institution. The supervising person is responsible for the account and for the data sent through it. In classrooms, we recommend that the teacher creates the account and manages the devices, and that no personal data of students is entered. If you learn that a minor has given us data without supervision, contact us and we will delete it.
Your responsibility
The service is provided "as is", without any warranty. You alone are responsible for how you use it, for the data your devices send, for having the right to collect that data, and for keeping your account and device keys safe. The person running iotBind accepts no liability for any loss, leak or corruption of data, for interruptions of the service, or for any direct or indirect damage resulting from its use, as described in the terms of use. If you do not agree, do not use the service.
Changes to this policy
We may update this policy when the service changes. The date at the top shows the latest version. If you keep using iotBind after an update, you accept the new version.
Contact
For any question about privacy, write to us through the contact form. Our terms of use also apply to the use of iotBind.