Privacy Policy

ELECTROCEAN TECHNOLOGIES PRIVATE LIMITED ("we," "our," "EOT," or "us") operates the EOT HOME smart home automation application and devices. This Privacy Policy explains how we collect, use, protect, and share your information when you use EOT HOME in connection with the Google Home Developer Platform and Google Assistant.

By using EOT HOME and integrating it with Google Home, you consent to the data practices described in this policy.

1. Information We Collect

We collect only the minimum information necessary to provide EOT HOME's smart home automation services. Our data collection is limited to what is required for the primary functionality of the application.

1.1 Data NOT Collected

In compliance with Google Home Developer policies, we explicitly DO NOT collect or transmit to Google:

• Persistent device identifiers
• Precise geolocation data (beyond what's necessary for home automation)
• User personally identifiable information (PII) in analytics data sent to Google
• Audio or video recordings
• Biometric data

2. How We Use Your Information

We use collected information strictly for the following purposes, and only as necessary to provide our services:

• Service Provision: To enable smart home device control and automation through EOT HOME and Google Assistant integration
• Device Management: To configure, monitor, and control your connected smart home devices
• Automation: To execute scenes, routines, and scheduled tasks you configure
• Personalization: To provide customized automation suggestions based on your usage patterns
• Communication: To send service-related notifications, security alerts, and important updates
• Support: To provide customer support and troubleshoot technical issues
• Security: To protect against unauthorized access, detect abuse, and maintain platform security
• Improvement: To analyze aggregated, anonymized data to improve service performance and develop new features
• Compliance: To fulfill legal obligations and enforce our Terms of Service

3. Data Sharing and Disclosure

3.1 Google Home Integration

When you connect EOT HOME with Google Assistant, we share device information with Google to enable voice control and automation. This includes:

• Device types, names, and capabilities
• Device states and status information
• Control commands and responses

This data sharing is necessary for the Google Home integration to function and is governed by both this Privacy Policy and Google's Privacy Policy.

3.2 Service Providers (Limited)

We share minimal data with trusted service providers who assist us in operating EOT HOME:

• Cloud Infrastructure: For secure data storage and app hosting (data is encrypted at rest and in transit)
• Analytics Services: Only anonymized, aggregated data for performance monitoring
• Customer Support Tools: Only when you contact us for support

All service providers are bound by strict confidentiality agreements and are prohibited from using your data for any purpose other than providing services to EOT HOME.

3.3 Device Manufacturers

To enable compatibility with your smart devices, we may share necessary device configuration data with the manufacturers of connected devices. This is limited to technical information required for device operation.

3.4 Legal Requirements

We may disclose your information only if required by law, valid legal process, or to:

• Comply with legal obligations or court orders
• Protect the rights, property, or safety of EOT HOME, our users, or the public
• Detect, prevent, or address fraud, security, or technical issues

3.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice and ensure the acquiring entity honors this Privacy Policy.

3.6 No Data Transfers to Third Parties for Marketing

We do not and will never share, sell, or transfer your data to third parties for their marketing or advertising purposes.

4. Data Security

We implement industry-leading security measures to protect your information throughout its entire lifecycle:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Authentication: Multi-factor authentication and OAuth 2.0 for account security
• Access Controls: Strict role-based access controls limiting employee access to personal data
• Network Security: Firewalls, intrusion detection systems, and regular security audits
• Secure Infrastructure: Data stored on secure cloud servers with regular backups
• Vulnerability Management: Regular security assessments and penetration testing
• Incident Response: Comprehensive incident response plan with prompt user notification

5. Your Rights and Choices

You have comprehensive rights regarding your personal information:

5.1 Access and Portability

• Request a copy of all personal data we hold about you
• Receive your data in a structured, machine-readable format (JSON/CSV)
• Export your device configurations, automation rules, and usage history

5.2 Correction and Updates

• Update your account information directly in the app
• Correct inaccurate or incomplete data
• Modify device names, configurations, and settings at any time

5.3 Deletion and Account Closure

• Delete your account and all associated data at any time
• Request selective deletion of specific data categories
• Upon account deletion, all personal data is permanently deleted within 30 days

5.4 Opt-Out Options

• Unsubscribe from marketing communications (we don't send them anyway)
• Disable location services in your device settings
• Opt out of analytics data collection (may affect service quality)
• Disconnect Google Home integration at any time

5.5 Exercising Your Rights

To exercise any of these rights, you can:

• Use the in-app settings and privacy controls
• Email us at privacy@eotipl.com or electroceantech@gmail.com
• Contact us using the information in Section 12

We will respond to all requests within 30 days and verify your identity before processing requests.

6. Data Retention

We retain your data only as long as necessary for the purposes outlined in this policy:

• Account Data: Retained while your account is active
• Device Configurations: Retained while devices are connected to your account
• Usage Logs: Retained for 90 days for troubleshooting, then anonymized
• Support Communications: Retained for 2 years for quality assurance
• Legal Compliance Data: Retained as required by applicable law

When you delete your account:

• Personal data is deleted within 30 days
• Anonymized, aggregated data may be retained for analytics
• Data required for legal compliance is retained as necessary
• Backup systems are purged according to standard rotation schedules (90 days maximum)

7. Children's Privacy

EOT HOME is not intended for use by children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@eotipl.com. We will promptly delete such information from our systems.

In compliance with COPPA and similar regulations, if we learn we have collected information from a child under 13 without parental consent, we will delete that information as quickly as possible.

8. International Data Transfers

Your information may be transferred to and processed in countries other than India, including countries where our cloud service providers operate. These may include:

• United States (for Google Cloud infrastructure)
• European Union (for backup and redundancy)

We ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by regulatory authorities
• Compliance with GDPR, CCPA, and other applicable data protection laws
• Encryption of all data in transit and at rest
• Regular audits of international data transfer processes

9. Cookies and Tracking Technologies

EOT HOME uses minimal cookies and tracking technologies:

9.1 Essential Cookies

• Authentication and session management
• Security and fraud prevention
• Remembering user preferences

9.2 Analytics (Optional)

• Anonymized usage statistics to improve app performance
• Crash reporting and error tracking
• You can opt out of analytics in app settings

9.3 No Third-Party Advertising Cookies

We do not use cookies for advertising purposes or allow third-party advertisers to place cookies through our app.

10. Your Privacy Controls

You have granular control over your privacy settings:

• Google Home Integration: Connect or disconnect at any time in app settings
• Device Sharing: Control who can access and control your devices
• Notifications: Customize which notifications you receive
• Data Collection: Opt out of optional analytics and diagnostic data collection
• Location Services: Enable or disable location-based automation features
• Voice Control: Enable or disable Google Assistant integration

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated through:

• Prominent in-app notification
• Email notification to your registered email address
• Updated "Last Updated" date at the top of this policy
• Notice period of at least 30 days before material changes take effect

We encourage you to review this Privacy Policy periodically. Your continued use of EOT HOME after changes are posted constitutes acceptance of the updated policy.

12. Compliance with Laws and Regulations

12.1 India

We comply with:

• Information Technology Act, 2000
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Digital Personal Data Protection Act, 2023 (when enacted)

12.2 International Compliance

Depending on your location, we also comply with:

• GDPR (European Union) - For EU residents
• CCPA/CPRA (California) - For California residents
• LGPD (Brazil) - For Brazilian residents
• COPPA (United States) - Regarding children's privacy

12.3 Google Home Developer Platform Compliance

This Privacy Policy and our data practices fully comply with:

• Google Home Developer Policies
• Google API Services User Data Policy
• Google OAuth 2.0 Policies
• Works with Google Home certification requirements

13. Security Incident Response

In the unlikely event of a data breach:

• We will notify affected users within 72 hours of discovery
• We will notify relevant regulatory authorities as required by law
• We will provide details about the nature of the breach and steps being taken
• We will offer assistance and guidance to affected users
• We will conduct a thorough investigation and implement additional safeguards