As a hosted infrastructure provider for device management services, we collect and securely manage information necessary to provide our platform services:

• Account Information: Business contact details, company information, and billing data
• Device Data: Device identifiers, configurations, security status, and management metadata
• Usage Analytics: Platform usage patterns, API calls, and performance metrics
• Website Analytics: With your analytics consent, page views, referral source, approximate country, browser and device category, active reading time, scroll depth, article sections viewed, link or call-to-action interactions, and privacy-masked usability recordings and heatmaps
• Security Logs: Threat detection data, remediation actions, and compliance reports

After you grant analytics consent, we use Google Analytics 4 to measure visits, traffic source, active reading time, reading-depth milestones, article-section engagement, outbound links, calls to action, and completed contact requests. We also use Microsoft Clarity to generate privacy-masked session replays and heatmaps that help us identify navigation problems, dead clicks, repeated clicks, and reading friction.

We do not send form values, email addresses, company names, or the contents of anything you type to either analytics service. Lead forms are explicitly masked, and Clarity is not loaded on authentication or editorial administration pages. Advertising storage, advertising user data, and ad personalization remain disabled. You can accept, reject, or change analytics consent through Cookie Preferences; withdrawing consent removes Smplify analytics cookies from this browser and ends the consented Clarity session.

We use collected information to:

• Host and manage device management infrastructure
• Provide secure storage and management of device data
• Control vendor access through customer entitlements
• Enable threat detection and automated remediation
• Generate compliance and security reports
• Improve platform performance and reliability
• Provide customer support and technical assistance
• Facilitate API integrations and white-label solutions

Security is fundamental to our business. We implement enterprise-grade security measures:

• End-to-end encryption for all data in transit and at rest
• Multi-factor authentication and role-based access controls
• Regular security audits and penetration testing
• SOC 2 Type II compliance and industry certifications
• Secure API architecture with rate limiting and monitoring

We may share information with:

• Service Providers: Trusted partners who assist in platform operations
• Legal Requirements: When required by law or to protect our rights
• Business Partners: With explicit consent for integrated solutions

We never sell your data. For MSPs and MSSPs, client data remains under your control with clear data ownership agreements.

We retain data as long as necessary to provide services and meet legal obligations:

• Active account data: Retained while service is active
• Security logs: Retained for 2 years for compliance purposes
• Billing records: Retained for 7 years as required by law
• Device configurations: Retained for 90 days after device removal

You have the right to:

• Access your personal and business data
• Correct inaccurate information
• Request data deletion (subject to legal requirements)
• Export your data in standard formats
• Opt out of non-essential communications

For privacy-related questions or to exercise your rights, contact our Data Protection Officer: