This Privacy Policy describes how TentPilot ("we," "us," or "our") collects, uses, protects, and shares information when you use the TentPilot platform, including our website, web application, APIs, and related services (collectively, the "Service").
By using the Service, you agree to the collection and use of information as described in this Privacy Policy.
When you create an account, we collect: email address, name, password (stored as a salted cryptographic hash — we never store your plaintext password), timezone, and notification preferences.
When you connect devices, we collect:
Sensor data is collected at regular intervals (every 5–15 minutes depending on your plan) by polling your device manufacturer's cloud APIs.
To connect your IoT devices, you provide API keys, OAuth tokens, or device-specific secrets. How we handle them:
We automatically collect session data, alert interactions, dashboard usage patterns, API usage (Business tier), and basic browser/device information.
Payment processing is handled entirely by Stripe, Inc. We never receive, process, or store your full card number or CVV. We receive only: name, email, billing address, last four digits, expiration date, and subscription status.
Polling your devices, storing and displaying data, evaluating alert rules, sending notifications, running AI trend analysis, and managing your account and billing.
Your sensor data is periodically sent to an AI language model to generate advisory insights.
Sending threshold alerts, trend advisories, device offline notifications, daily digests, and essential account communications.
Analyzing anonymized usage patterns to improve the Service. We do not use your data for advertising, ad targeting, or sale to third parties.
Credentials use Fernet encryption at rest. All connections use HTTPS/TLS. Backups are stored on encrypted cloud storage.
Each user's data is stored in separate, isolated database files. There are no shared tables between users. Cross-tenant data access is architecturally impossible — each tenant has their own SQLite databases on disk.
Device credentials are write-only. Internal admin access is IP-restricted. Application logs are scrubbed of sensitive values.
| Plan | Sensor Reading Retention |
|---|---|
| Free | 7 days |
| Pro | 90 days |
| Business | 1 year |
Account data is retained for 90 days after termination to allow export, then permanently deleted. Device credentials are deleted immediately on removal. Payment records are retained as required by law.
Stripe, Inc. — processes all payments. See: stripe.com/privacy
Alerts are delivered through: Twilio (SMS), WhatsApp Business API, SendGrid (email), Telegram Bot API, and Novu (orchestration). We share only the minimum information needed for delivery. Message content never includes device credentials.
Anthropic (Claude API) — receives compressed sensor data summaries only. Does not receive credentials, email, name, phone, payment info, or any PII.
We access your device manufacturer APIs (Govee, Tuya, SensorPush, Kasa, etc.) using credentials you provide. We act as your agent — we do not share your data with these ecosystems beyond what is needed to authenticate and poll.
We use privacy-respecting, cookieless analytics. No personally identifiable information is collected, no cookies are used, and individual users are not tracked across sessions.
We use only essential cookies: a session authentication cookie and a CSRF protection token. No advertising cookies. No third-party tracking. No cross-site tracking. No fingerprinting.
Export your sensor data anytime via dashboard CSV download, API access (Business tier), or by contacting us for a complete account export.
Delete your account anytime. Credentials are deleted immediately. Account data is retained 90 days for export, then permanently deleted.
If you are in the EEA, you have rights to: access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent. Contact us to exercise these rights. Business tier customers may request a GDPR-compliant Data Processing Agreement.
You have rights to know, delete, and opt out of sale. We do not sell your personal information to third parties.
The Service is not intended for anyone under 18. We do not knowingly collect information from children under 18.
The Service is operated from the United States. If you access it from outside the US, your information will be transferred to and processed in the US.
In the event of a breach, we will notify affected users by email within 72 hours, provide details of affected information and remediation steps, and notify relevant authorities as required by law.
We will email you before material changes take effect and post updated policies with a revised date. Continued use after the effective date constitutes acceptance.
Questions about this Privacy Policy? Contact us at hello@tentpilot.com