Privacy policy

1. Controller and scope

EES Corporation ("EES", "we") is responsible for the EESIoT mobile application and the EESIoT services it manages. This policy applies to the Android application, web portal, monitoring access and notification services.

For enterprise deployments, the customer organization may control operational data and user accounts. EES processes that information under the customer agreement and instructions.

2. Information we process

• Account and organization: name, email, company, role, permissions and session information.
• Service configuration: project URL, organization, site or tenant association and app preferences.
• Device and notifications: random installation ID, platform, Firebase Cloud Messaging token, enrollment identifiers and notification permission status.
• Operational information: alarms, events, asset or site names, severity, time, destination links and customer-configured content.
• Technical information: IP address, access times, service responses and security or diagnostic records.
• Communications: name, company, email, phone and message when someone requests information, support or a demonstration.

The app locally stores the configured URL, enrollment information and up to 100 recent notifications. Credentials entered in the project screen are sent directly to the configured HTTPS server; the mobile app does not store a separate copy of the password.

3. Device permissions

EESIoT uses Internet access and, with the user's authorization, notifications and vibration. The current version does not request native access to location, camera, microphone, contacts, photos or device files.

4. How we use information

• Connect to the selected EESIoT project and maintain the session.
• Authenticate users, enforce roles and protect access.
• Enroll the device and deliver requested operational notifications.
• Display project information, history and linked views.
• Provide support, diagnose failures, prevent abuse and improve security.
• Respond to service requests and meet legal obligations.

5. Service providers and disclosure

We do not sell personal data or use it for behavioral advertising. We disclose it only as needed to the organization administering the account, hosting and security providers, and Google Firebase Cloud Messaging to generate and deliver notifications. We may also disclose information when legally required or to protect rights and safety.

A project may connect to infrastructure managed by EES or by the customer. Information and sessions are then also processed by the server configured by the user or organization.

6. Retention and security

We retain information as needed to provide the service, maintain security and comply with contractual or legal obligations. Notification and enrollment tokens remain while the device is linked or until no longer needed. Local data is removed when app data is cleared or the app is uninstalled; changing projects clears the previous local enrollment.

We use access controls, organization separation, audit records and HTTPS communications. No method is infallible, but we review safeguards according to service risk.

7. Choices, rights and deletion

You may disable notifications in Android settings, clear local app data or uninstall the app. To request access, correction, objection, export or deletion of your account and associated data, email info@ees-corporation.com with “EESIoT privacy request” as the subject and include your name, organization and account email.

See the public account and data deletion process.

We verify identity and organizational authority before acting. Records required for legal, contractual, security or audit purposes may be retained; remaining information will be deleted or anonymized as appropriate. Enterprise accounts may also require the customer organization administrator's authorization.

8. Transfers, children and changes

Service providers may process information in other countries under applicable contractual and technical safeguards. EESIoT is a business tool and is not directed to anyone under 18. We may update this policy as services or legal requirements change and will publish the effective date here.