Privacy Policy

Last updated: February 2026

1. Introduction

Vakt Systems Ltd. ("Vakt," "we," "us," or "our") is a Canadian company that provides a cloud-based environmental monitoring platform for businesses. This Privacy Policy describes how we collect, use, store, and protect information when you use our platform, visit our website, or interact with our services.

2. Information We Collect

Account Information: When you create an account, we collect your name, email address, organization name, and role. Authentication is managed through AWS Cognito.

Sensor Data: Our platform ingests environmental readings (such as temperature, humidity, and water detection) from sensors deployed at your sites. This data is transmitted from Disruptive Technologies Cloud to our platform.

Device Metadata: We collect information about your sensors, including device identifiers, battery levels, signal strength, and configuration settings.

Usage Analytics: We collect information about how you interact with the platform, including pages visited, features used, and general usage patterns, to improve our service.

3. How We Use Information

We use the information we collect to deliver and operate the Vakt platform, including processing sensor data, generating alerts when environmental conditions exceed your configured thresholds, and providing dashboards and reports. We also use this information to communicate with you about your account, respond to support requests, and improve the platform.

4. Data Storage & Sovereignty

All customer data is stored in Canada using Amazon Web Services (AWS) in the ca-central-1 (Montreal) region. Data is stored in DynamoDB and S3. We do not transfer your data outside of Canada for processing or storage.

5. Data Sharing

We do not sell, rent, or trade your information. We share data only with the following third-party service providers, solely to operate and deliver the platform:

  • Amazon Web Services (AWS) — cloud infrastructure and data storage
  • Disruptive Technologies — sensor hardware and device cloud for data ingestion
  • Resend — transactional email delivery for alerts and notifications

6. Data Retention

Sensor readings are retained according to your account configuration. Account data is retained while your account is active and for a reasonable period afterward to fulfill legal obligations. System and operational logs are retained for 30 days.

7. Security

We implement industry-standard security measures to protect your data. All data is encrypted at rest and in transit. Access to the platform is controlled through role-based access control (RBAC) and authenticated via AWS Cognito. We regularly review our security practices and infrastructure.

8. Your Rights

You have the right to access, correct, or request deletion of your personal information. To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page and notify active customers by email if the changes are material.

10. Contact

If you have questions about this Privacy Policy or our data practices, contact us at [email protected].