Privacy Policy - AirBuilding: Analytics

1. Introduction

This Privacy Policy describes how Aulinov ("we," "our," or "us") collects, uses, and protects your information when you use the AirBuilding: Analytics application (the "App"). The App provides comprehensive analytics and reporting tools for building automation systems, including usage statistics, performance metrics, and environmental data visualization.

2. Information We Collect

2.1 Personal Information

• Email Address: We collect your email address for user identification and authentication. Employee emails are pre-registered by your account administrator.

2.2 Usage Data

• Analytics Interactions: We log your interactions with analytics features, including reports viewed, data filters applied, time periods analyzed, and dashboard customizations. This logging helps us understand usage patterns and improve the analytics experience.
• Report Generation: We track the generation of analytics reports, including report types, parameters used, and frequency of access for performance optimization and feature improvement.
• Device Mutations: We record all changes made to writable points in building automation systems, including the point identifier, old value, new value, timestamp, and user identity. This audit trail is implemented for security, accountability, and system monitoring purposes.
• Authentication Tokens: JWT authentication tokens are stored locally on your device for secure access to the App.

2.3 Technical Data

• Anonymous Analytics: We collect anonymous error reports and usage analytics to improve the App's performance and reliability.
• Environmental Data: The App displays real-time environmental information (temperature, humidity, CO2 levels) retrieved directly from building automation systems. This data is not stored or logged by us.

3. How We Use Your Information

We use the collected information for the following purposes:

• Authentication: To verify your identity and provide secure access to the App
• Analytics Access Control: To determine which analytics data and reports you can access based on your account permissions
• Device Mutation Audit Trail: To maintain comprehensive logs of all value changes made to building automation system points for security and accountability
• Usage Analytics: To track analytics platform usage patterns and optimize performance
• Service Improvement: To analyze anonymous usage data and fix technical issues
• Customer Support: To respond to your inquiries and provide technical assistance

4. Information Sharing

4.1 Account Administrators

Your analytics usage data, access patterns, and device mutations are shared with your account administrators. This includes information about which reports you access, your usage patterns for analytics optimization, and comprehensive logs of all value changes made to building automation system points (including point identifiers, old values, new values, timestamps, and user identities).

4.2 No Third-Party Sharing

We do not share your personal information with third-party services, analytics providers, or building automation system vendors. All data processing is handled internally.

5. Data Retention

We retain your personal information and usage data for 90 days from the date of collection, after which it is automatically deleted from our systems. This retention period applies to:

• Analytics usage logs
• Report generation history
• Device mutation logs (value changes to writable points)
• Access and authentication records

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• JWT-based authentication with token auto-refresh
• Secure communication protocols between the App and our servers
• Access controls limiting data access to authorized personnel only
• Regular security assessments and updates

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request access to your personal information
• Rectification: Request correction of inaccurate personal information
• Erasure: Request deletion of your personal information
• Portability: Request transfer of your personal information
• Objection: Object to processing of your personal information
• Restriction: Request restriction of processing

To exercise these rights, please contact us at contact@airbuilding.fr.

8. International Data Transfers

Your personal information is processed and stored in France. We currently serve users primarily in France, with plans to expand to other EU countries and the United States. When we expand our services internationally, we will ensure appropriate safeguards are in place for any cross-border data transfers.

9. Children's Privacy

The App is designed for workplace use by employees and is not specifically directed at children under 13 years of age. We do not knowingly collect personal information from children under 13.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify users of any material changes by updating the "Last updated" date at the top of this policy. Your continued use of the App after such modifications constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

12. Legal Basis for Processing (EU Users)

For users in the European Union, our legal basis for processing your personal information includes:

• Legitimate Interest: For security monitoring, device mutation audit trails, and service improvement
• Contract Performance: To provide the analytics services you access through your account
• Consent: Where you have provided explicit consent for specific processing activities