Cerbrec Supervisory App — Privacy Policy

This Privacy Policy describes how Cerbrec Inc. (“Cerbrec,” “we,” “our,” or “us”) collects, uses, and shares information when you use the Cerbrec Supervisory App, including its mobile and desktop applications (the “App”).

The App is an enterprise tool used by authorized personnel to set up and supervise infrastructure managed on the Cerbrec platform. This policy is specific to the App and complements the general Cerbrec Privacy Policy, which covers our websites and platform services.

1. Information We Collect

Account Information

When you sign in, we receive account details from your organization's Cerbrec account or your chosen sign-in provider (Google or Microsoft), including:

• Your name and email address
• Your organization and role within it
• Authentication identifiers issued by our identity service

Operational Data

When you use the App to set up or supervise equipment, we process the information needed to perform those operations, such as:

• Equipment identifiers and device configuration details
• Network configuration you enter during device setup (for example, Wi-Fi network names and credentials, which are transmitted securely to the device being provisioned)
• Status, monitoring, and diagnostic data reported by the infrastructure your organization manages

Automatically Collected Information

When you use the App, we and our service providers automatically collect:

• Device information (model, operating system version, app version)
• Crash reports and diagnostics (via Google Firebase Crashlytics)
• Usage analytics, such as screens viewed and features used (via Google Firebase Analytics)
• Push notification tokens, so we can deliver alerts to your device

2. Device Permissions

The App requests only the permissions it needs to function:

• Bluetooth / Nearby devices — used to discover and set up nearby equipment (for example, sending Wi-Fi credentials to a device during provisioning). Some Android versions require the Location permission to perform Bluetooth scanning; the App does not collect or store your precise geolocation.
• Notifications — used to deliver operational alerts and updates relevant to your organization.
• Files and documents — used only when you choose to attach or upload a file from your device.

3. How We Use Your Information

• Provide, operate, and secure the App and the Cerbrec platform
• Authenticate you and enforce your organization's access controls
• Deliver notifications and operational alerts
• Diagnose crashes, monitor performance, and improve the App
• Comply with legal obligations and enforce our agreements

4. How We Share Your Information

We do not sell your personal information. We share information only as follows:

• With your organization — your account activity and the operational data you submit may be visible to your organization's administrators, as the App is provided for organizational use.
• With service providers — including Google Firebase (crash reporting, analytics, and push notifications) and our cloud hosting providers, who process information on our behalf under appropriate safeguards.
• For legal reasons — when required by law, legal process, or to protect the rights, safety, and security of Cerbrec, our customers, or the public.
• In business transfers — if Cerbrec is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

5. Data Security

We use technical and organizational measures designed to protect your information, including:

• Encryption of data in transit using TLS
• Authentication tokens stored in your device's secure storage (iOS Keychain / Android Keystore)
• Role-based access controls on the Cerbrec platform
• Monitoring and logging of our production infrastructure

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Data Retention and Account Deletion

We retain your information for as long as your account is active or as needed to provide the App to your organization, and afterwards as required for legitimate business or legal purposes.

Your account is managed by your organization. To request deactivation or deletion of your account and associated personal data, contact your organization's administrator or email us at privacy@cerbrec.com and we will respond in accordance with applicable law. Uninstalling the App removes locally stored data, including your sign-in tokens, from your device.

7. Children's Privacy

The App is an enterprise tool and is not directed to children. We do not knowingly collect personal information from anyone under 18 years of age.

8. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last Updated” date above and, where appropriate, provide additional notice through the App.

9. Contact Us

If you have questions about this Privacy Policy or how we handle your information, contact us at:

Cerbrec Privacy Team
Cerbrec Inc.
Email: privacy@cerbrec.com
Address: 200 Vesey St, 24th Fl, New York, NY 10281

We aim to respond to privacy inquiries within 30 days.