Privacy Policy

LeakSense ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website leaksense.io, use our services, or interact with us, including through smart home platform integrations.

By using our services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

1. Information We Collect

Information You Provide to Us

We collect information that you voluntarily provide to us, including:

• Contact Information: Name, email address, phone number, mailing address, city, state, and zip code
• Account Information: Username, password, and account preferences
• Payment Information: Payment transaction IDs and order details (note: we do not store credit card numbers; payments are processed securely through Square)
• Communication Data: Information you provide when you contact us, sign up for our waitlist, schedule consultations, or participate in surveys
• Property Information: Details about your property type, homeownership status, and specific concerns related to leak detection
• Device Information: Information about your LeakSense devices, including device IDs, sensor data, installation location, and operational status

Information Collected Automatically

When you visit our website or use our services, we automatically collect certain information, including:

• Usage Data: IP address, browser type, device information, pages visited, time spent on pages, and referring URLs
• Sensor Data: Water flow data, leak detection events, valve status, and device health metrics
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to track activity and improve user experience
• Analytics Data: We use Google Analytics to understand how visitors use our website
• Smart Home Integration Data: Data shared through connected platforms (Google Home, Amazon Alexa, Samsung SmartThings, Apple HomeKit, Home Assistant)

2. Smart Home Platform Integrations

Google Home Integration

When you connect LeakSense to Google Home:

• Data Shared with Google: Device names, device types, device status (on/off), and control commands
• Data Collected from Google: Voice commands, user interactions, and authentication tokens
• Purpose: Enable voice control ("Hey Google, turn off Main Valve") and Google Home app management
• Google's Privacy Policy: https://policies.google.com/privacy
• Control: You can disconnect Google Home integration at any time through the LeakSense dashboard or Google Home app

Amazon Alexa Integration

When you connect LeakSense to Amazon Alexa:

• Data Shared with Amazon: Device names, device types, device states, and control responses
• Data Collected from Amazon: Voice commands ("Alexa, turn off Kitchen Valve"), skill interactions, and OAuth tokens
• Purpose: Enable Alexa voice control and smart home routines
• Amazon's Privacy Policy: https://www.amazon.com/alexa-privacy
• Control: You can disable the LeakSense skill in the Alexa app at any time

Samsung SmartThings Integration

When you connect LeakSense to Samsung SmartThings:

• Data Shared with Samsung: Device information, capabilities, status updates, and automation triggers
• Data Collected from Samsung: Hub information, automation rules, and control commands
• Purpose: Enable SmartThings hub integration and create automation rules with other smart devices
• Samsung's Privacy Policy: https://www.samsung.com/smartthings/privacy
• Control: You can remove LeakSense from SmartThings through the SmartThings app

Apple HomeKit Integration (Coming Soon)

When available, Apple HomeKit integration will:

• Data Shared: Device accessories, characteristics, and status (processed locally on your Apple devices via HomeKit Secure Video protocols)
• Privacy Note: HomeKit uses end-to-end encryption and processes data on-device when possible
• Apple's Privacy Policy: https://www.apple.com/privacy

Home Assistant Integration (Coming Soon)

When available, Home Assistant integration will:

• Data Shared: Device entities, states, and attributes (processed locally on your Home Assistant server)
• Privacy Note: Home Assistant is self-hosted, giving you full control over your data
• Control: You manage the integration through your Home Assistant configuration

SMS Alerts Integration

When you enable SMS alerts:

• Data Shared: Phone number, alert preferences, and leak notification messages
• Service Provider: Twilio or similar SMS gateway services
• Purpose: Send real-time text notifications for leaks and valve control confirmations
• Control: You can disable SMS alerts in your LeakSense account settings

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our leak detection services and smart home monitoring products
• Device Control: Process commands from you and connected smart home platforms to control your LeakSense devices
• Monitoring and Alerts: Monitor sensor data, detect leaks, and send real-time notifications via app, email, SMS, or smart home platforms
• Automation: Enable automation rules and integrations with third-party smart home platforms
• Waitlist Management: To manage our waitlist, send welcome emails, and notify you about product launches and availability
• Communication: To send you transactional emails, appointment reminders, installation schedules, and respond to your inquiries
• Marketing: To send you promotional emails, special offers, product updates, and newsletters (you can opt-out at any time)
• Order Processing: To process your orders, manage installations, and provide customer support
• Analytics and Improvement: To analyze usage patterns, understand user preferences, and improve our website and services
• Legal Compliance: To comply with legal obligations, enforce our terms of service, and protect our rights
• Fraud Prevention: To detect, prevent, and address fraudulent activity, security issues, and technical problems
• Product Development: Aggregate and anonymized sensor data to improve leak detection algorithms and product features

4. How We Share Your Information

We may share your information in the following circumstances:

Smart Home Platform Providers

When you connect your LeakSense account to smart home platforms:

• Google LLC: For Google Home integration (device status, control commands)
• Amazon.com, Inc.: For Amazon Alexa integration (device information, voice command responses)
• Samsung Electronics: For SmartThings integration (device capabilities, automation data)
• Apple Inc.: For HomeKit integration when available (accessory data via encrypted HomeKit protocol)

Service Providers

We share information with third-party service providers who perform services on our behalf, including:

• Email Service Provider: Brevo (for sending transactional and marketing emails)
• SMS Service: Twilio (for sending text message alerts and notifications)
• Analytics: Google Analytics (for website analytics and usage tracking)
• Payment Processing: Square (for payment processing and transaction management)
• Installation Services: Licensed plumbers and contractors who install our sensors
• Cloud Hosting: AWS or similar providers that host our website, databases, and APIs
• Customer Support: Zendesk or similar platforms for managing support tickets

Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction.

Legal Requirements

We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to:

• Comply with legal obligations
• Protect our rights, property, or safety
• Prevent fraud or illegal activity
• Protect the rights and safety of our users and the public
• Respond to law enforcement requests

With Your Consent

We may share your information with third parties when you give us explicit consent to do so.

5. Your Privacy Rights

General Rights

Depending on your location, you may have the following rights:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Opt-Out: Unsubscribe from marketing emails by clicking the "unsubscribe" link in any email
• Data Portability: Request a copy of your data in a structured, commonly used format
• Object to Processing: Object to certain types of data processing
• Disconnect Integrations: Disconnect smart home platform integrations at any time

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to know what personal information we collect, use, and disclose
• Right to request deletion of your personal information
• Right to correct inaccurate personal information
• Right to opt-out of the sale or sharing of personal information (note: we do not sell personal information)
• Right to limit use of sensitive personal information
• Right to non-discrimination for exercising your CCPA/CPRA rights

European Residents (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have rights under the General Data Protection Regulation (GDPR):

• Right to access, rectification, erasure, and data portability
• Right to restrict or object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority
• Right to object to automated decision-making and profiling

To exercise any of these rights, please contact us at the information provided below.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest (AES-256)
• Secure server infrastructure with firewalls and intrusion detection
• Regular security assessments, penetration testing, and vulnerability scans
• Multi-factor authentication for administrative access
• Access controls and role-based permissions
• Employee training on data protection and security best practices
• Secure OAuth 2.0 authentication for smart home platform integrations
• API rate limiting and DDoS protection
• Regular security audits and compliance reviews

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information using industry-standard security measures, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.

Retention periods vary depending on the type of information:

• Account Information: Retained for the duration of your account plus 3 years after account closure
• Transaction Records: Retained for 7 years for tax and legal compliance
• Sensor Data: Raw sensor readings retained for 90 days; aggregated data retained for 2 years
• Marketing Data: Retained until you unsubscribe or request deletion
• OAuth Tokens: Access tokens expire after 1 year; refresh tokens after 2 years or account disconnection
• Analytics Data: Aggregated and anonymized data may be retained indefinitely
• Support Tickets: Retained for 5 years for quality assurance and dispute resolution

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities. Cookies are small text files stored on your device that help us:

• Remember your preferences and settings
• Authenticate your login sessions
• Understand how you use our website
• Improve website functionality and user experience
• Provide targeted advertising (with your consent)
• Analyze traffic and usage patterns

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our website and services.

Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly (authentication, session management)
• Analytics Cookies: Help us understand how visitors use our website (Google Analytics)
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements and track campaign performance (with consent)

9. Third-Party Links and Services

Our website and services may contain links to third-party websites and integrate with third-party services. These include:

• Google Home, Amazon Alexa, Samsung SmartThings, Apple HomeKit, Home Assistant
• Calendly for scheduling consultations
• Social media platforms
• Payment processors
• Cloud service providers

We are not responsible for the privacy practices or content of these external services. We encourage you to review the privacy policies of any third-party sites or services you interact with.

10. Children's Privacy

Our services are not intended for children under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@leaksense.io, and we will promptly delete such information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States, where LeakSense operates. These countries may have different data protection laws than your jurisdiction.

When we transfer data internationally, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the European Commission for EU data transfers
• Adequacy decisions where applicable
• Compliance with applicable data transfer regulations
• Technical and organizational measures to protect transferred data

By using our services, you consent to the transfer of your information to the United States and other countries where we and our service providers operate.

12. Do Not Track (DNT) Signals

Some web browsers have a "Do Not Track" (DNT) feature that tells websites you do not want to be tracked. We do not currently respond to DNT signals because there is no industry standard for how to interpret these signals. However, you can control tracking through:

• Browser cookie settings
• Opt-out preferences in your LeakSense account
• Analytics opt-out tools (e.g., Google Analytics Opt-out Browser Add-on)

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending you an email notification (for significant changes)
• Displaying a prominent notice in our mobile app or dashboard

Your continued use of our services after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

14. Contact Us

15. Your Consent

By using our website, services, and smart home integrations, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. If you connect LeakSense to third-party smart home platforms, you also agree to share the necessary data with those platforms as described in this policy.