Privacy Policy

Website visitors. If you only visit aegislox.com or contact us, we hold the information you give us.

Service users. Aegislox is provided to businesses ("Organizations") to control access to their doors. An Organization's administrator creates your account. We process your data on the Organization's behalf, and the Organization decides who has access.

On the Website

• Information you send us: name, email address, phone number, company name and your message, when you use a contact or quote form or email us.
• Basic technical data: IP address, browser type, pages visited and request times, collected in server logs by our hosting provider to run and secure the Website.
• We do not use advertising cookies or trackers.

In the client portal and apps

• Account details: name, email address and role (owner, admin or member).
• Sign-in data: your password, stored only in hashed form by our authentication provider. We never see it in readable form.
• Door activity: the time, door, result (unlocked or denied) and method of each access attempt, linked to your account.
• Organization data entered by administrators: doors, locations, groups and access schedules.
• Technical data: request times and error messages needed to operate and secure the Service.

We do not collect your location, contacts, photos, advertising identifiers or payment card details through the apps. We do not use advertising or analytics trackers in the apps.

If you turn on biometric sign-in, your phone's own Face ID or fingerprint system confirms it is you. Your face or fingerprint data stays on your device and is never sent to us. The app keeps your sign-in details in your phone's secure storage so the biometric check can unlock them.

• To sign you in and unlock the doors you are permitted to use.
• To show access history to you and to your Organization's administrators.
• To reply to enquiries, quotes and support requests.
• To operate, secure, troubleshoot and improve the Service.
• To meet legal obligations.

We do not sell personal information, and we do not use it for advertising.

• Your Organization: its administrators can see your name, email, role and door activity.
• Service providers that run the Service for us: Supabase (database and authentication), Cloudflare (hosting and network security) and n8n (automation that relays unlock requests to door controllers). They may process data only to provide those services.
• Legal and safety: where the law requires, or to protect rights, safety and the security of the Service.
• Business transfers: if Aegislox is sold or merged, information may transfer to the new owner under this policy.

Our providers may store and process data in Canada, the United States and other countries. Where data leaves Canada or the EU, we rely on appropriate safeguards.

• Account data: while the account is active.
• Door activity: 12 months, then deleted or anonymized.
• Website enquiries: 24 months after the last contact.
• When an Organization closes its account, we delete its data within 30 days, unless the law requires us to keep it.

You can change your password in the app under My Account, and reset it by email. You can ask to access, correct or delete your personal information by contacting your Organization's administrator or us at imaginalinnovation@gmail.com. To delete your account and data, email us from your account address. We will confirm and complete the deletion within 30 days.

Canadian residents have rights under PIPEDA and applicable provincial law. EU and UK residents have rights under the GDPR, including access, correction, deletion, restriction, portability, objection, and the right to complain to a data protection authority.

The Website uses only the cookies needed to work and keep it secure. You can block or delete cookies in your browser settings.

Data is encrypted in transit (HTTPS), and access is limited by role and by Organization. No system is perfectly secure, but we work to protect your information and will notify affected people and regulators of a breach where the law requires.

The Service is for workplaces and is not directed to children under 13 (under 16 in the EU). We do not knowingly collect their information.

We will post changes on this page and update the effective date. If a change is significant, we will tell Organizations by email or in the Service.

Imaginal Innovations Inc., Toronto, Ontario, Canada
Email: imaginalinnovation@gmail.com
Website: aegislox.com