Privacy Policy
Last updated
This policy explains what information the Telemetri Cloud analytics portal processes, why, where it is stored, and who else touches it. It covers the portal only — not any separate product or service you may have purchased.
Who controls your data
Telemetri Cloud is provided to organizations, not to individuals. Where your employer or building operator subscribes to the portal, that organization decides what data is sent to it and who may see it; we process that data on their behalf and under their instructions. If you are an employee or visitor asking about data held about you, your organization is the right first point of contact, because they control it and we cannot release it to a third party without their authority.What we process
- Physical-security event data from your sites — door and badge events, occupancy counts, line crossings, turnstile passages and sensor-derived counts. These arrive as structured numeric records. We do not receive or store video, images or audio.
- Directory information about named individuals, but only where your own access-control system supplies it: typically a name, and sometimes a work email address or phone number. This is visible to your organization’s own administrators. It is not used in the aggregate charts and counts that make up the analytics.
- Portal account information for people who sign in — name, email address, sign-in and failed-sign-in times, IP address, and session records. This exists so accounts can be secured and administered.
- Configuration you create — dashboards, reports, zone and device labels, schedules and notification preferences.
Signing in with Microsoft
Where your organization connects its own Microsoft Entra tenant for single sign-on, Microsoft sends us only your name, your email address, and two identifiers for your account and your organization’s tenant. We request theopenid, profile and email permissions and nothing else, and the application holds no Microsoft Graph application permissions at all — so it cannot read your mail, files, calendars, contacts or directory, and could not do so even if asked to. Your administrator can confirm this on the Microsoft consent screen itself, and can withdraw access at any time from Enterprise applications in their own Microsoft admin center.Where it is stored
In Microsoft Azure, in the East US 2 region, in the United States. Each organization’s data is isolated inside the database itself by row-level security keyed on the organization, which is the mechanism that prevents one customer’s queries from reaching another’s data rather than a check applied afterwards in application code.Who else processes it
We use a small number of service providers, and only these:- Microsoft Azure — hosting, database, and single sign-on. United States.
- Twilio SendGrid — sending email, such as invitations, password resets, scheduled reports and alerts.
- Anthropic — the optional AI features. These send aggregated metrics and the names of zones and devices. They are designed to exclude person-level records, identifiers and raw event payloads.
- Open-Meteo — weather and place lookup for sites that have set a location. This receives coordinates, not personal data.
- Slack — only where your organization chooses to configure a Slack notification channel, and only the alert content it sends.