Who we are
CaIoT RemoteViewer is provided by CaIoT Inc in Canada (“CaIoT”, “we”, “us”). We are responsible for personal information under our control. Questions or requests go to our privacy contact at [email protected].
Local features stay on your computer
Local Android control over USB or the same Wi-Fi network, backups, restores, files and screenshots are processed on your own devices. Backup archives are saved where you choose. We do not receive copies of them.
Information we collect
- Account information. When you sign in for remote services we receive your email address and authentication identifiers through Google Firebase Authentication.
- Session information. To connect a remote session we process device and session identifiers, temporary session codes, timestamps, IP addresses and connection diagnostics.
- Session content. Screen, input and camera data in a remote session travels through network and relay infrastructure so the two devices can connect. We do not sell session content or use it for advertising.
- Billing information. When paid plans are available, payments are processed by Stripe. We receive your plan, billing status and limited payment details (such as card brand and last four digits), never your full card number.
- Messages you send us. If you email us or book a demo, we keep that correspondence to reply and provide support.
How we use it
- To provide, connect and secure remote sessions
- To manage your account and subscription
- To provide support and respond to requests
- To detect, investigate and prevent abuse, fraud and security incidents
- To meet legal obligations
We do not sell personal information, and we do not use it for third-party advertising.
Consent
We collect and use personal information with your consent, which you give by creating an account, starting or approving a session, or contacting us. You can withdraw consent at any time by deleting your account or contacting us, though some features will then stop working.
Who we share it with
We use service providers to operate the Service: Google for Firebase/Google Cloud hosting, authentication, relay infrastructure and demo booking; Stripe for payments; and Cloudflare for website delivery and security. These providers may process account, transaction or request information as needed for their roles, subject to applicable contracts and law. Cloudflare may process IP addresses and request metadata, protect public email links and use necessary security cookies. We may also disclose information when required by law or to protect people from harm.
Where it is processed
Our providers may process information in Canada, the United States and other countries. When information is processed outside your province or country, it may be subject to the laws of that place.
How long we keep it
We keep personal information only as long as needed for the purposes above, then delete or anonymize it. Session records are kept only as long as needed to operate, secure and support the service. Billing records are kept as long as tax and accounting law requires.
Your rights
You can ask to access, correct or delete your personal information, or ask how it has been used and shared, by writing to [email protected]. We will respond within 30 days. Residents of Quebec, the European Union and the United Kingdom may have additional rights under their local laws. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada or your local privacy regulator.
Security
We use temporary session credentials, owner approval for remote sessions, user-controlled Android permissions and encrypted connections to our providers. No system is perfectly secure, so please report concerns to [email protected].
Children
CaIoT RemoteViewer is not directed to children under 13, and we do not knowingly collect their personal information.
Changes
If we change this policy we will update the date at the top of this page, and for significant changes we will notify account holders by email or in the app.
Download and publisher measurement
We count download starts and outbound publisher referrals to understand distribution, not completed installations. For deduplication and abuse prevention we process the request IP address and browser user agent into a daily hash; the download event does not retain the raw values. Events are marked for short retention; deletion may not be immediate. Aggregated daily counts and separately entered publisher reports are retained for reporting. Hosting and security providers may separately keep request logs under their own retention settings. No advertising cookies or tracking pixels are used for this measurement.
Questions about this page? Email [email protected].