EasyMesh - Privacy Policy
EasyMesh Team, its affiliates and subsidiaries (“we”, “us”, “our”, “EasyMesh”) are committed to protecting your privacy. This Privacy Statement (“Statement”) describes our practices in connection with information privacy on personal data we process through your individual use of the following services, products, and related mobile applications (collectively, the “Products”)
- EasyMesh App
In this Privacy Notice, “Personal Data” means information that can be used to identify an individual, either from that information alone, or from that information and other information we have access to about that individual. “Smart Devices” refers to those nonstandard computing devices produced or manufactured by hardware manufacturers, with human-machine interface and the ability to transmit data that connect wirelessly to a network, including: smart home appliances, smart wearable devices, smart air cleaning devices, etc. “Apps” refers to those mobile applications developed by EasyMesh Team that provide end users remote control to Smart Devices and with the ability to connect to EasyMesh Server.
What Personal Data do We Collect
In order to provide our services to you, we will ask you to provide necessary Personal Data that is required to provide those services. If you do not provide your Personal Data, we may not be able to provide you with our products or services.
1. Nickname (or username)
The nickname (or username) is a user-defined name, which is used as the user’s ID, and is unique within the product range. The nickname can be used without the user’s real name, and can be freely specified without duplication.
2. Password
The user logs in to use it and saves it on the server after encryption.
3. Email
The email address verifies the uniqueness of the user and protects the password of the user.
-
Register the user, change the password, delete the account, and send a verification code to the email address when the new device logs in. The user uses the verification code to prove their identity.
-
Changes to privacy policies, emergencies, major service changes, etc. will be emailed to users. When a user deletes his or her account, the nickname, encrypted password, and email address will be deleted from the server.
4. Devices
For each gateway of the user, the system automatically generates a random number as the unique identification ID of the gateway. After the user restores the gateway to factory settings, the system will generate a new random ID.
-
A list of user nicknames to which each gateway belongs is stored on the server.
-
For each Zigbee device joining the gateway, the device ID number, device name, device type, online status, activation time, firmware version, and upgrade information are saved. This data is to enable users to find the original device when they log in on the new mobile device.
-
When a user deletes a device, its data will be deleted from the server.
-
When a user deletes a gateway, all information about this gateway is deleted from the server.
-
When you use our products, we may collect information reported by your device. For example, a smart light bulb may report the on / off status, color temperature, hue, saturation, and brightness of a light.
-
If the user has Google Assistant and Amazon Alexa voice control enabled, the above information of the Zigbee device will be passed to Google and Amazon so that the user can query and control their device on the voice device.
All the above information is stored on a server in the European Union provided by Amazon AWS.
When push information is enabled, the user’s mobile phone’s identification information “Push Notification Identifier” will be saved on Google’s Firebase service so that users can receive push information.
Google is committed to helping our customers succeed with GDPR compliance, whether they are large software companies or independent developers. See the links below for specific information:
Privacy and Security in Firebase
When there is a service failure or a major change, a message may be pushed to the user.
Purposes and Legal Basis for Processing Personal Data
The purpose for which we may process information about you are as follows:
-
Provide You Services: We process your account and profile data, device information, usage data, location information, and Smart Device related information to provide you with our Products and Services that you have requested or purchased. The legal basis for this processing is to perform our contract with you according to our Terms of Use.
-
Improve Our Services: We process your device information, usage data, location information and Smart Device related information to ensure the functions and safety of our Products, to develop and improve our Products and Services, to analyze the efficiency of our operations, and to prevent and trace fraudulent or inappropriate usage. The legal basis for this processing is to perform our contract with you according to our Terms of Use.
-
Non-marketing Communication: We process your Personal Data to send you important information regarding the Services, changes to our terms, conditions, and policies and/or other administrative information. Because this information may be important, you may not opt-out of receiving such communications. The legal basis for this processing is to perform our contract with you according to our Terms of Use.
-
Personalization: We may process your account and profile data, usage data, device information to personalize product design and to provide you with services tailored for you, such as recommending and displaying information and advertisements regarding products suited to you, and to invite you to participate in surveys relating to your use of our Products. The legal basis for this processing is your consent.
-
Legal Compliance: We may process your Personal Data as we believe to be necessary or appropriate: (a) to comply with applicable laws and regulations; (b) to comply with legal process; (c) to respond to requests from public and government authorities (d) to enforce our terms and conditions; (e) to protect our operations, business and systems; (f) to protect our rights, privacy, safety or property, and/or that of other users, including you; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.
If there is any change in the purposes for processing your personal data, we will inform such change to you via email and/or a prominent notice on our website of such changes of purposes, and choices you may have regarding your Personal Data.
Who do We Share Personal Data with?
At EasyMesh, we only share Personal Data in ways that we tell you about. We may share your Personal Data with the following recipients:
-
To our third-party service providers who perform certain business-related functions for us, such as website hosting, data analysis, payment and credit card processing, infrastructure provision, IT services, customer support service, e-mail delivery services, and other similar services to enable them to provide services to us.
-
To our customers and other business partners who provide you, directly or indirectly, with your Smart Devices, and/or networks and systems through which you access and use our Sites and Services.
-
To an affiliate or other third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including without limitation in connection with any bankruptcy or similar proceedings). In such an event, you will be notified via email and/or a prominent notice on our website of any change in ownership, incompatible new uses of your Personal Data, and choices you may have regarding your Personal Data.
-
As we believe to be necessary or appropriate: (a) to comply with applicable laws and regulations; (b) to comply with legal process; (c) to respond to requests from public and government authorities, including public and government authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations, business and systems; (f) to protect our rights, privacy, safety or property, and/or that of other users, including you; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.
-
To subsidiaries or affiliates within our corporate family, to carry out regular business activities.
Except for the third parties described above, to third parties only with your consent.
International Transfer of Information Collected
To facilitate our operation, we may transfer, store and process your Personal Data in jurisdictions other than where you live. Laws in these countries may differ from the laws applicable to your country of residence. When we do so, we will ensure that an adequate level of protection is provided for the information by using one or more of the following approaches:
agreement on the basis of approved EU standard contractual clauses per GDPR Art. 46. For more information, see here.
If you would like further detail on the safeguards we have in place, you can contact us directly as described in this Privacy Policy.
Your Rights Relating to Your Personal Data
We respect your rights and control over your Personal Data. You may exercise any of the following rights:
- By emailing us at maginawin@163.com
You do not have to pay a fee for executing your personal rights. According to different data protection laws, if you are dominated in Mainland China, we will aim to respond you within 15 business days; and if you are dominated ex-Mainland China, and we will aim to respond you within 30 calendar days.
If you decide to email us, in your request, please make clear what information you would like to have changed, whether you would like to have your Personal Data deleted from our database or otherwise let us know what limitations you would like to put on our use of your Personal Data. Please note that we may ask you to verify your identity before taking further action on your request, for security purposes.
You may:
-
Request access to the Personal Data that we process about you;
-
Request that we correct inaccurate or incomplete Personal Data about you;
-
Request deletion of Personal Data about you;
-
Request restrictions, temporarily or permanently, on our processing of some or all Personal Data about you;
-
Request transfer of Personal Data to you or a third party where we process the data based on your consent or a contract with you, and where our processing is automated;
-
Opt-out or object to our use of Personal Data about you where our use is based on your consent or our legitimate interests.
About Delete of the Account: You can find the Delete function through “More > Delete Account”.
Security Measures
We use commercially reasonable physical, administrative, and technical safeguards to preserve the integrity and security of your Personal Data. We provides various security strategies to effectively ensure data security of user and device. As for device access, we proprietary algorithms are employed to ensure data isolation, access authentication, applying for authorization. As for data communication, communication using security algorithms and transmission encryption protocols and commercial level information encryption transmission based on dynamic keys are supported. As for data processing, strict data filtering and validation and complete data audit are applied. As for data storage, all confidential information of users will be safely encrypted for storage. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), you could immediately notify us of the problem by emailing maginawin@163.com.
Data Retention
We process your Personal Data for the minimum period necessary for the purposes set out in this Privacy Policy, unless there is a specific legal requirement for us to keep the data for a longer retention period. We determine the appropriate retention period based on the amount, nature, and sensitivity of your Personal Data, and after the retention period ends, we will destruct your Personal Data. When we are unable to do so for technical reasons, we will ensure that appropriate measures are put in place to prevent any further such use of your Personal Data.
If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third-party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately after they are posted on this page.
Contact Us
If you have any questions or suggestions about my Privacy Policy, do not hesitate to contact me at maginawin@163.com.