Privacy Policy | Effortless Home

1. Scope and Role

This policy applies to EffortlessHome websites, applications, products, and related services worldwide. Depending on the service context, EffortlessHome may act as a data controller, business, or processor/service provider under applicable privacy law.

2. Categories of Personal Data We Collect

We may collect identifiers (name, email, account ID), contact details, billing records, device and network data (IP address, browser, operating system), usage and diagnostics data, support communications, and optional location or presence information where enabled by you.

3. Sources of Data

Personal data is collected directly from you, automatically from your devices and service interactions, and in some cases from integration partners, payment providers, distributors, or publicly available sources where permitted by law.

4. Purposes of Processing

We process personal data to provide and operate services, authenticate users, deliver support, monitor service health, prevent fraud and abuse, improve functionality, process payments, communicate transactional notices, and satisfy legal obligations.

5. Lawful Bases (GDPR and Similar Laws)

Where GDPR, UK GDPR, or similar laws apply, we rely on one or more lawful bases: performance of a contract, legitimate interests, compliance with legal obligations, protection of vital interests, public interest where applicable, and consent where required.

6. Cookies and Tracking Technologies

We use cookies, SDKs, and related technologies for core functionality, security, analytics, and preference management. Where required by law, we request consent before placing non-essential cookies and provide controls to manage preferences.

7. Location Data and Device Permissions

If you enable location, Bluetooth, camera, microphone, or notification permissions, we use those signals to provide requested smart-home features. You can revoke permissions at any time through your device settings.

8. Sharing and Disclosure of Personal Data

We may share personal data with service providers and subprocessors for hosting, analytics, communications, support, payment handling, and security. We may also disclose data when required by law, court order, or lawful government request, or to protect rights, safety, and platform integrity.

9. International Transfers

Your data may be transferred to and processed in countries other than your own. Where required, we use recognized safeguards for cross-border transfers, such as Standard Contractual Clauses or equivalent mechanisms, and implement additional technical and organizational protections.

10. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy, including contractual, operational, legal, accounting, dispute resolution, and regulatory requirements. Retention periods vary by data type and legal obligations.

11. Security Measures

We maintain reasonable administrative, technical, and physical safeguards to protect personal data against unauthorized access, alteration, disclosure, or destruction. No system is fully secure, but we continuously improve controls and incident response procedures.

12. Automated Decision-Making and Profiling

EffortlessHome does not use solely automated decision-making that produces legal or similarly significant effects unless required for service delivery and permitted by law. Where required, we provide additional notice and applicable rights.

13. Your Privacy Rights (Global)

Depending on your jurisdiction, you may have rights to access, correction, deletion, portability, restriction, objection, withdrawal of consent, and non-discrimination for exercising rights. You may also have rights to appeal decisions on privacy requests where applicable.

14. EEA and UK Rights (GDPR and UK GDPR)

If you are in the EEA or UK, you may exercise rights under GDPR or UK GDPR, including access, rectification, erasure, restriction, portability, and objection, plus the right to lodge a complaint with your local supervisory authority.

15. California Rights (CCPA and CPRA)

California residents may have rights to know, access, correct, and delete personal information, and to limit use of sensitive personal information where applicable. We do not discriminate against users for exercising statutory privacy rights.

16. Other Regional Rights (PIPEDA, LGPD, and Similar Laws)

Users in Canada, Brazil, Australia, and other jurisdictions may have equivalent rights under applicable laws, including rights to access, correct, and request deletion of personal data, subject to lawful exceptions.

17. Children and Minors

Our services are not directed to children below the digital age of consent in relevant jurisdictions. We do not knowingly collect personal data from children without required parental or guardian authorization.

18. Changes to This Privacy Policy

We may update this policy periodically to reflect legal, technical, or business changes. Updates become effective when posted unless otherwise stated. Continued use of services after the effective date constitutes acknowledgment of the revised policy.

19. How to Exercise Your Rights and Contact Us

To submit a privacy request or ask a policy question, contact us through our contact page. We may need to verify your identity before completing rights requests and will respond within timelines required by applicable law.