Privacy Policy - AirBuilding Remote

1. Introduction

This Privacy Policy describes how Aulinov ("we," "our," or "us") collects, uses, and protects your information when you use the AirBuilding Remote mobile application (the "App"). The App allows authorized users to control building automation systems including lights, blinds, fans, and temperature settings.

2. Information We Collect

2.1 Personal Information

• Email Address: We collect your email address for user identification and authentication. Employee emails are pre-registered by your organization's administrator.

2.2 Usage Data

• Device Control Actions: We log all user actions within the App, including which building devices you control (lights, blinds, fans, heaters), when you control them, and the values you set. This logging is implemented for security and accountability purposes.
• Room Access Information: We store information about which rooms and buildings you have access to, as configured by your organization's administrator through access groups.
• Authentication Tokens: JWT authentication tokens are stored locally on your device for secure access to the App.

2.3 Technical Data

• Anonymous Analytics: We collect anonymous error reports and usage analytics to improve the App's performance and reliability.
• Environmental Data: The App displays real-time environmental information (temperature, humidity, CO2 levels) retrieved directly from building automation systems. This data is not stored or logged by us.

3. How We Use Your Information

We use the collected information for the following purposes:

• Authentication: To verify your identity and provide secure access to the App
• Access Control: To determine which building systems and rooms you can control
• Audit Trail: To maintain logs of device control actions for security and accountability
• Service Improvement: To analyze anonymous usage data and fix technical issues
• Customer Support: To respond to your inquiries and provide technical assistance

4. Information Sharing

4.1 Building Administrators

Your device control actions and usage data are shared with your organization's building administrators. This includes logs of which devices you controlled and when.

4.2 No Third-Party Sharing

We do not share your personal information with third-party services, analytics providers, or building automation system vendors. All data processing is handled internally.

5. Data Retention

We retain your personal information and usage data for 90 days from the date of collection, after which it is automatically deleted from our systems. This retention period applies to:

• User action logs
• Device control history
• Access records

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• JWT-based authentication with token auto-refresh
• Secure communication protocols between the App and our servers
• Access controls limiting data access to authorized personnel only
• Regular security assessments and updates

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request access to your personal information
• Rectification: Request correction of inaccurate personal information
• Erasure: Request deletion of your personal information
• Portability: Request transfer of your personal information
• Objection: Object to processing of your personal information
• Restriction: Request restriction of processing

To exercise these rights, please contact us at contact@airbuilding.fr.

8. International Data Transfers

Your personal information is processed and stored in France. We currently serve users primarily in France, with plans to expand to other EU countries and the United States. When we expand our services internationally, we will ensure appropriate safeguards are in place for any cross-border data transfers.

9. Children's Privacy

The App is designed for workplace use by employees and is not specifically directed at children under 13 years of age. We do not knowingly collect personal information from children under 13.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify users of any material changes by updating the "Last updated" date at the top of this policy. Your continued use of the App after such modifications constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

12. Legal Basis for Processing (EU Users)

For users in the European Union, our legal basis for processing your personal information includes:

• Legitimate Interest: For security monitoring, audit trails, and service improvement
• Contract Performance: To provide the building control services you access through your organization
• Consent: Where you have provided explicit consent for specific processing activities