Privacy Policy

Last updated: 2026-06-22

OhioIoT (“we”, “us”) provides MQTT connectivity and related services. This policy explains what information we collect, how we use it, and your choices.

What we collect

  • Account information: email address and basic account identifiers.
  • Phone number: if you provide your phone number for SMS alerts, your phone number is collected to deliver alert notifications you configure.
  • Authentication data: login and identity information handled by our authentication provider.
  • Billing information: subscription and payment status handled by our payment processor. We do not store full payment card numbers.
  • Service usage: operational metrics such as connection counts, message rates, error rates, and logs needed to operate the service and enforce limits.
  • Technical data: IP address, device/user agent data, and security events (for abuse prevention and reliability).

What we do not do

  • We do not sell your personal information.
  • We do not use your MQTT payloads for advertising.
  • We do not access user content unless required for troubleshooting a support request you initiate (and only with your cooperation).

How we use information

  • To provide and maintain the service (connectivity, authentication, billing status).
  • To secure the platform (fraud prevention, abuse detection, rate limiting).
  • To improve reliability (monitoring, alerting, debugging).
  • To communicate with you about service changes, billing, and support.

Service providers

We use third-party providers to run OhioIoT (for example: hosting, authentication, payments, and email and SMS delivery). These providers process information on our behalf to deliver the service, and are not permitted to use it for their own marketing.

Email communications

We use your email address only to operate your account and to send transactional and service-related messages: billing receipts, security notifications, password resets, service status updates, responses to support requests, and material changes to our Terms or this policy. We do not send marketing emails or newsletters, and we do not use your email for any purpose other than operating your account and the communications described here. We do not share your email address with third parties for marketing or promotional purposes; we share it only with service providers that process it on our behalf to deliver these communications. To stop receiving service communications, you can delete your account at any time in account settings or by contacting support.

Data retention and deletion

We keep account and billing records as needed to provide the service and to comply with legal obligations. Operational logs are retained for a limited period and may be aggregated to improve performance and stability.

When your subscription is cancelled or lapses, your account data is retained for up to 90 days so you can resubscribe without losing it. After 90 days, the account and all associated data — including settings, device data, device twins, uploaded firmware, and MQTT and HTTP credentials — are permanently deleted. You may instead choose, in account settings, to have your data deleted immediately when your subscription ends.

You can also delete your account at any time from the Settings page. Deletion is immediate and permanent, removes the account data described above, and cannot be undone.

SMS alert notifications

If you choose to enable SMS alerts, we collect your phone number solely to send you the alert notifications you configure within the platform. We do not share your phone number or SMS opt-in data with third parties for marketing or promotional purposes, and we will never call your number or use it for any purpose other than delivering the alerts you have configured. We share your number only with the service providers and carriers necessary to deliver those messages. You may opt out of SMS alerts at any time by replying STOP to any message or by removing your phone number from your account settings.

Your choices

  • You can cancel your subscription at any time on the Settings page.
  • You can download a copy of your data at any time on the Settings page.
  • You can choose to have your data deleted immediately when your subscription ends, rather than retained for the 90-day period.
  • You can delete your account and its data at any time on the Settings page.

Contact

Questions about this policy: [email protected]