Privacy policy
Last updated 18 September 2026.
The short version: we hold as little as we can, we say how long we hold it, and we delete it when that time is up. Data we do not hold cannot leak, and unlike every other protection, that one does not wear off.
What we collect
- Your account. Name, email address, and a phone number if you give us one for alerts.
- Your devices. What you have named each input and output, what state they report, and the commands sent to them.
- What we sent you. A record of alerts, so we can answer whether a message went out.
- Technical records. Server logs needed to run and secure the service.
We do not sell any of it, and we do not share it with anybody except the providers we need to run the service - the cloud that hosts it, and the services that send email and text messages on our behalf.
How long we keep it
| What | How long | Why |
|---|---|---|
| Account details | While the account exists | Your name and address are how we reach you and how sharing works. |
| Device state history | 90 days, then summaries only | Nobody has needed to know which minute a door opened two years ago, and holding it is a liability with no matching benefit. |
| Who commanded what | 2 years | This is the record that answers what happened after something goes wrong, so it outlives the rest - and is kept in narrow form: who, which device, which output, when, and the outcome. |
| Alerts we sent | 1 year | Every email and text message we sent, whether it arrived, and the items in your notification centre. Long enough to answer whether a message was delivered and to whom. |
| Dormant accounts | 2 years of no sign-in and no device | Warned by email, deleted 30 days later. A dormant account is the one whose password is reused elsewhere and whose owner would not notice a breach. |
These periods are enforced by a job that runs every day, not by intention. It writes down what it removed, and that record is kept longer than the data it describes, so what was deleted and when can be answered afterwards.
What this website does
These public pages load nothing from a third party. No analytics, no font service, no embedded video, no advertising network. Reading this page does not tell anybody else that you read it. Once you sign in, the application stores a session in your browser so it can keep you signed in; that is the only thing it keeps there beyond your own preferences.
Your choices
- See and correct anything we hold about you, from your account settings.
- Stop any alert at any time, from the settings or by replying STOP to a text message. Every email we send carries a one-click unsubscribe.
- Delete your account. Your devices, rules and sharing go with it.
- Ask us for a copy of your data, or to delete it, at privacy@remotii.com.
Security
Devices authenticate with their own certificates. Commands are carried on an audited path that records the identity behind every one - a person, a rule, or a connected assistant. Nobody at Remotii, including its founder, holds a standing permission to operate somebody's device; reaching for one is a deliberate, time-limited and recorded act.
Children
Remotii is not intended for anybody under 16, and we do not knowingly hold their data.
Changes
If we change this policy in a way that matters, we will say so in the application and by email before it takes effect.