Privacy Policy

Information We Collect

• Building telemetry data: Real-time sensor readings including temperature, humidity, airflow velocity, compressor power draw, refrigerant pressure, and vibration signatures collected through BACnet and Modbus protocols.
• Occupancy data: Anonymized room-level occupancy counts derived from micro-occupancy sensors. No individual identification data is collected or stored.
• Account information: Name, email address, company name, and billing information provided during account registration.
• Usage data: Platform interaction logs, API call patterns, and dashboard usage analytics used to improve service quality.

How We Use Your Data

• HVAC optimization: Telemetry data is processed by our AI models to generate real-time setpoint adjustments, energy optimization recommendations, and predictive maintenance alerts.
• Platform improvement: Anonymized usage patterns help us improve AI model accuracy and platform usability.
• Communication: Account information is used for service notifications, security alerts, and product updates. Marketing communications require explicit opt-in consent.
• Legal compliance: Data is retained and processed as required by applicable regulations and for audit trail purposes.

Data Storage & Security

• All telemetry data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
• Data is stored in SOC2 Type II compliant data centers with geographic redundancy across multiple availability zones.
• Access controls follow the principle of least privilege with role-based access control (RBAC) for all internal systems.
• We maintain comprehensive audit logs for all data access and modification events.

Data Sharing & Third Parties

• We do not sell, rent, or trade your building operational data to third parties.
• Limited data sharing occurs only with your explicit consent for integrations with third-party BMS platforms (Siemens Desigo, Johnson Controls, Honeywell).
• Sub-processors (cloud infrastructure providers) are bound by Data Processing Agreements (DPAs) that meet or exceed our own security standards.
• Anonymized and aggregated data may be used for industry research and benchmarking, with no ability to identify individual facilities.

Data Retention

• Real-time telemetry data is retained for 24 months for active subscribers, with automatic compression to cold storage after 12 months.
• Account data is retained for the duration of the subscription and for 90 days following account closure.
• Predictive model training uses anonymized historical data with no personally identifiable information.

Your Rights

• Access: You may request a copy of all data we hold about your facility and account.
• Correction: You may update or correct your account information at any time through the platform settings.
• Deletion: You may request deletion of your account and associated data, subject to legal retention requirements.
• Portability: You may export your telemetry data in standard CSV, JSON, or Parquet formats.
• Objection: You may object to specific data processing activities, including marketing communications.

Contact

For privacy-related inquiries, contact our Data Protection Officer at privacy@exertiasystems.com or write to: Exertia Systems Ltd, Data Protection Office, N0. 7 Ezechukwu street, Ojo Lagos.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email and platform notification at least 30 days before they take effect.