Privacy Policy

This Privacy Policy explains how Aeroshi collects, uses, and protects personal information when you use our website, login flows, dashboards, APIs, and pilot services (together, the "Service").

1. Information We Collect

• Account and contact data: name, email, optional phone, optional company/organisation.
• Authentication data: magic-link requests, verification events, and session metadata.
• Service usage data: device/site configuration data, audit events, and operational logs.
• Support data: messages and details you provide when contacting support.

2. How We Use Information

• To provide secure access to accounts using email magic links and verification codes.
• To operate, maintain, and improve features, including onboarding and device claim workflows.
• To provide support and communicate important service or security notices.
• To detect abuse, enforce rate limits, and protect platform reliability.

3. School and monitoring-study data

Aeroshi monitoring studies use room-level environmental data. Standard studies do not require pupil names, staff names, cameras, microphones, audio recording, video recording, or location tracking of individuals.

Environmental metrics may include CO₂, particulate matter, VOCs, temperature, humidity, and device status data. This data is used for monitoring, dashboards, evidence summaries, support, and reporting.

4. Legal Bases

Depending on your location, we process personal data to perform our contract with you, comply with legal obligations, pursue legitimate interests (such as fraud prevention and service reliability), and where required, based on consent.

5. Sharing and Processors

We do not sell your personal information. We may share data with trusted service providers that host infrastructure, deliver transactional email, and support platform operations, subject to contractual and security safeguards.

6. Retention

We retain personal data only for as long as needed to provide the Service, meet legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and operational requirements.

7. Security

We use reasonable technical and organisational measures to protect data, including access controls, secure authentication flows, and operational monitoring. No system can be guaranteed perfectly secure.

8. Your Rights

Subject to local law, you may have rights to access, correct, delete, or restrict processing of your personal data, and to object to certain uses. You may also request account deletion.

9. International Transfers

Your information may be processed in countries other than your own. Where required, we apply appropriate safeguards for cross-border data transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised "Last updated" date.

11. Contact

For privacy questions or requests, contact privacy@aeroshi.com.