Privacy Policy

1. Introduction

Smart Storage ("we," "our," or "us") operates the smart-storage.io platform and associated services, including the Admin Dashboard, Booking Portal, Tenant Portal, and mobile applications. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our services.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, company name, and billing address when you create an account or request a demo.
• Facility Data: Storage facility details including location, unit configurations, pricing, and operational settings.
• Tenant Data: Information about your tenants that you enter into the platform, including names, contact details, lease agreements, and payment records.
• Payment Information: Billing details processed through our third-party payment providers. We do not store full credit card numbers on our servers.
• Communications: Messages, support tickets, and correspondence you send to us.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, clicks, time spent, and navigation patterns within the platform.
• Device Information: Browser type, operating system, device identifiers, screen resolution, and language preferences.
• Log Data: IP addresses, access times, referring URLs, and server logs.
• Smart Lock Data: Access logs, lock/unlock events, and device connectivity status from integrated TTLock and Bluetooth smart locks.
• CCTV Metadata: Camera connection status and motion alert timestamps (video feeds are processed through third-party providers like Ezviz).

2.3 Information from Third Parties

• Payment Processors: Transaction confirmations and billing status from Stripe, PayPal, or local payment gateways.
• Smart Lock Providers: Device status and access event data from TTLock API.
• Analytics Services: Aggregated usage statistics and performance metrics.

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Smart Storage platform and all associated services.
• Process bookings, payments, and manage tenant relationships on your behalf.
• Send transactional notifications (booking confirmations, payment receipts, access alerts).
• Provide customer support and respond to inquiries.
• Generate analytics, reports, and insights for your storage operations.
• Monitor platform security and detect fraudulent or unauthorized activity.
• Comply with legal obligations and enforce our terms of service.
• Send product updates, feature announcements, and marketing communications (with your consent).

4. Data Sharing & Disclosure

We do not sell your personal information. We may share data with:

• Service Providers: Cloud hosting (Supabase, Vercel), payment processing, email delivery, and analytics services that help us operate the platform.
• Smart Lock & Security Partners: TTLock and Ezviz for device management and access control functionality.
• Your Tenants: Tenant-facing portals display relevant booking, access, and billing information that you have entered.
• Legal Requirements: When required by law, court order, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with prior notice).

5. Data Security

We implement industry-standard security measures including:

• TLS/SSL encryption for all data in transit.
• AES-256 encryption for sensitive data at rest.
• Role-based access controls (Superadmin, Admin, Operational) with permission boundaries.
• Regular security audits and penetration testing.
• Automated backups and disaster recovery procedures.
• Two-factor authentication support for admin accounts.

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Upon account termination:

• Account data is deleted within 30 days of your request.
• Backup copies may persist for up to 90 days before automatic deletion.
• Anonymized, aggregated analytics data may be retained indefinitely.
• Data required for legal compliance may be retained as required by applicable law.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing of your data for certain purposes.
• Withdraw Consent: Withdraw consent for marketing communications at any time.

To exercise these rights, contact us at privacy@smart-storage.io. We will respond within 30 days.

8. International Data Transfers

Smart Storage operates globally and your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for international data transfers, including standard contractual clauses and compliance with applicable data protection regulations.

9. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, contact us immediately at privacy@smart-storage.io.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the platform after such changes constitutes your acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices:

• Email: privacy@smart-storage.io
• Legal: legal@smart-storage.io
• Support: support@smart-storage.io