Privacy Policy

1. Who We Are

Welcome to DataKubo (“we,” “our,” or “us”). We are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, and disclose information about you when you use our services. DataKubo is a white-label IoT enablement platform operated by DataKubo S.L. Our registered address and contact details are available at info@datakubo.com.

2. Data We Collect

We collect data in two contexts:

From resellers (our direct customers):

• Account information: name, email address, company name
• Billing information: processed via Stripe (we do not store card details)
• Usage data: API calls, device counts, webhook activity
• White-label settings: logo, brand color, subdomain

From resellers' end users (on behalf of resellers):

• Name and email address
• IoT device data (e.g., water consumption readings, battery levels, timestamps)
• Device identifiers (Device EUI)

3. How We Use Your Data

• To provide and operate the DataKubo platform
• To process billing and manage subscriptions
• To send transactional emails (account setup, invoices)
• To monitor platform performance and security
• To improve our services using anonymized, aggregated analytics

We do not sell personal data. We do not use end-user data for advertising.

4. Data Ownership

Resellers own all data they and their customers generate on the platform. DataKubo stores this data on resellers' behalf. Resellers may export their data at any time and request deletion upon account closure. Data is deleted within 30 days of account closure.

5. Data Sharing

We share data only with trusted sub-processors required to operate the platform:

• Cloud database provider — database hosting and authentication
• Cloud hosting providers — frontend and backend infrastructure
• Stripe — payment processing

We never share reseller or end-user data with other resellers or third parties for commercial purposes.

6. Data Retention

IoT device data is retained for 12 months by default, after which it is automatically deleted. Account data is retained for the duration of the subscription plus 30 days after cancellation.

7. Security

We implement industry-standard security measures including TLS encryption in transit, bcrypt-hashed API keys, Row Level Security (RLS) on all database tables, and multi-tenant data isolation. No system is 100% secure; we will notify affected parties promptly in the event of a breach.

8. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability (export in machine-readable format)

To exercise these rights, contact us at info@datakubo.com.

9. Cookies

We use only essential cookies required for authentication and session management. We use anonymized web analytics to understand how visitors use our website. No advertising or tracking cookies are used.

10. Contact

For privacy-related questions, contact us at info@datakubo.com.