Privacy Notice

Plexusbit Software (Pune, India) ("we", "us", "the platform") is committed to protecting your personal data. This notice explains what we collect when you use the RMS platform, why, how long we keep it, and your rights.

1. Who we are and our role

We act in two roles depending on the data:

• We are the data controller for the personal data we process for our own purposes — for example, creating and securing user accounts, operating and protecting the platform, and managing our business relationship with customers.
• We act as a data processor on behalf of our business customers (who are the controllers) for the data they manage through the platform — for example, device data and the details of people who connect through their guest Wi-Fi (captive portal).

2. Who this notice covers

• Account users — staff of our business customers who log in to manage devices.
• Guest users — members of the public who connect through a captive-portal / guest Wi-Fi page on a device managed by our platform.

3. What personal data we collect, why, and our legal basis

3a. Account information (for people who log in)

What we collect	Why we collect it	Legal basis
Email address, name	To create and run your account, sign you in, and send service messages (e.g. password resets)	Performance of a contract
Password (stored only as a secure, irreversible hash — we never see it)	To keep your account secure	Performance of a contract
Your role and permissions	To control who can see and do what	Our legitimate interest in securing access
Sign-in dates and time zone	To operate and secure your account and show times correctly	Performance of a contract / legitimate interest
City and country	Account profile / user metadata used to operate and contextualise your account	Performance of a contract / legitimate interest
Google sign-in details (email, name), if you use Google to log in	To let you sign in with Google	Performance of a contract

3b. Device and network information

What we collect	Why we collect it	Legal basis
Device identifiers (e.g. MAC address, serial number), device name, firmware version	To identify and manage the devices in your account	Performance of a contract
Device activity and system measurements (e.g. status, performance metrics)	To monitor health and provide the management service	Performance of a contract / legitimate interest
Other operational data a device sends	To operate and support the service	Performance of a contract

3c. Guest Wi-Fi (captive portal) information

What we collect	Why we collect it	Legal basis
Name, email, location (when a guest enters them to get online)	To grant internet access and, where applicable, for the network operator's records	Consent
Device MAC address and IP address	To manage the connection, apply time/data limits, and protect the network	Legitimate interest of the network operator
Session and usage records (data used, time online, vouchers)	To enforce access limits and support billing	Performance of a contract / legitimate interest

3d. Logs and security records

What we collect	Why we collect it	Legal basis
Audit records of administrative actions (who did what, including email/name/role)	To keep the service secure and accountable	Legitimate interest
Remote-access session records	To secure and limit remote access to devices	Legitimate interest
System and error logs	To operate and troubleshoot the service	Legitimate interest

4. How we use your data

We use the data above to:

• provide, operate, secure, and support the RMS platform;
• authenticate users and control access;
• manage and monitor devices and networks;
• where the feature is used, provide guest Wi-Fi access and enforce its limits;
• keep audit and security records; and
• send you service-related messages.

We do not use your personal data for marketing or advertising, and we do not sell it.

5. Who we share it with

We use the following trusted third-party providers to run the platform:

• ZeptoMail — sending service emails.
• Amazon Web Services (AWS SNS) — sending certain SMS alerts.
• Amazon Web Services (AWS S3) — storing files such as firmware images and device backups.
• Google — only if you choose to sign in with Google.

We do not sell your personal data.

6. Where your data is stored and international transfers

Your data is hosted on Amazon Web Services in the Asia Pacific (Mumbai) region (ap-south-1), India. Because we serve users in the EU/EEA, personal data of EU/EEA users is transferred outside the EEA.

7. How long we keep your data

We keep personal data only as long as needed for the purposes described above.

Administrative audit records and captive-portal (guest Wi-Fi) logs are retained according to the customer's subscription plan and are then automatically moved out of active systems into secured archive storage:

Plan	Retention period
Dev	15 days
Essential	30 days
Professional	90 days
Enterprise	365 days

Other operational and device data is kept for as long as needed to provide the service. Account data is kept while your account is active and for a reasonable period afterwards. To request erasure of your personal data, contact us as described in sections 8 and 9.

8. Your rights

Subject to the conditions in data-protection law, you have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• erase your data ("right to be forgotten");
• restrict or object to certain processing;
• data portability — receive your data in a usable format, where technically feasible;
• withdraw consent at any time, where we rely on consent (e.g. guest Wi-Fi sign-up); and
• complain to a data-protection supervisory authority.

We handle these requests manually. See section 9 for how to make one; we will respond within the timeframe required by law.

9. How to contact us / make a privacy request

To exercise any right above, or to ask a question about this notice, contact us at:

• Email: info@plexusbit.com
• Post: Plexusbit Software, Pune, India

We have not appointed a Data Protection Officer; privacy queries are handled by the contact above. We will respond within the timeframe required by law.

10. Changes to this notice

We may update this notice. We will post the updated version and change the effective date shown above.