Privacy Policy

1. About This Policy

Ecological Automation ("we", "us", "our") is a New Zealand company. We provide IoT energy monitoring and environmental sensing hardware, a cloud-based management platform, and a companion mobile application (together, the "Services").

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information in accordance with the New Zealand Privacy Act 2020 and its Information Privacy Principles (IPPs).

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Full name
• Email address
• Password (stored in hashed form)
• Phone number (if provided)
• Business name and address

2.2 Device and Telemetry Data

Our IoT devices collect operational data from your premises, including:

• Energy monitoring: Active power, voltage, current, power factor, and energy consumption readings
• Environmental sensors: Temperature, humidity, and air quality measurements
• Automation events: Device on/off states, scheduled actions, and triggered automations

2.3 Site Location Data

Devices are associated with a physical site address that you provide during setup. We use this to organise your devices and deliver location-relevant functionality. We do not track real-time GPS location.

2.4 Technical and Usage Data

When you use our web platform or mobile app, we automatically collect technical information such as IP address, browser or device type, operating system, and pages or features accessed. This helps us maintain and improve the Services.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Services
• Display energy, environmental, and automation data on your dashboard
• Send alerts and notifications you have configured
• Generate reports and historical analytics for your account
• Communicate with you regarding your account, support requests, and service updates
• Diagnose technical issues and improve the reliability of our hardware and software
• Comply with legal obligations

4. Sharing and Disclosure

We do not sell, rent, or trade your personal information. We do not currently share your data with third-party services.

We may disclose personal information only where:

• You have authorised the disclosure
• It is necessary to provide the Services (e.g., to our hosting provider, under strict contractual obligations)
• Required or permitted by New Zealand law, including in response to lawful requests by public authorities

5. Where Your Data Is Stored

Our servers are hosted in Australia. By using our Services, you acknowledge that your data is transferred to and stored in Australia.

Australia is recognised under the New Zealand Privacy Act 2020 as having comparable privacy protections. Our hosting provider is contractually required to protect your data in accordance with applicable privacy standards.

6. Data Retention

We retain your personal information and device telemetry data for as long as your account remains active. When you close your account, we will delete or anonymise your data within a reasonable timeframe, unless we are required by law to retain it.

7. Data Security

We take reasonable steps to protect your personal information from unauthorised access, use, modification, disclosure, or loss. Our security measures include:

• Encryption of data in transit (TLS) and at rest
• Hashed and salted password storage
• Access controls limiting data access to authorised personnel
• Regular security reviews of our infrastructure

No system is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Rights Under the Privacy Act 2020

Under the New Zealand Privacy Act 2020, you have the right to:

• Access the personal information we hold about you (IPP 6)
• Request correction of any inaccurate, incomplete, or misleading information (IPP 7)
• Request deletion of your personal information by closing your account
• Withdraw consent for any processing based on consent

To exercise any of these rights, please contact us using the details below. We will respond to your request within 20 working days, as required by the Act.

9. Cookies

Our web platform uses essential cookies required for authentication and session management. We do not use third-party tracking or advertising cookies.

10. Children's Privacy

Our Services are designed for business use and are not directed at individuals under the age of 16. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through a notice on our platform. Your continued use of the Services after such changes constitutes acceptance of the updated policy.

12. Complaints

If you believe we have breached your privacy, please contact us first so we can attempt to resolve the issue. If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Privacy Commissioner (New Zealand).

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, contact us at: