Privacy Policy

Effective Date: April 18, 2026

1. Introduction

This Privacy Policy describes how VARANUS LLC (“we” or “us”) collect, use, disclose, and safeguard personal information in connection with our websites and mobile applications (collectively, the “Services”). This policy is intended to comply with applicable United States federal and state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the Children’s Online Privacy Protection Act (COPPA), and, where applicable, the Gramm-Leach-Bliley Act (GLBA).

2. Scope

This Privacy Policy applies to personal information collected from users of the Services who reside in the United States. It does not apply to information governed by sector-specific regulations except where explicitly stated.

3. Categories of Personal Information Collected

We may collect the following categories of personal information:

• Identifiers
  • Name (if provided)
  • Phone number (if provided)
  • Email address
  • Account credentials
  • Device identifiers (e.g., MAC address, hardware serial number)
• Account Information
  • Account registration details
  • Subscription or service-related records
• Internet or Network Activity Information
  • IP address
  • Login activity
  • System and access logs
• Device and Sensor Data
  • Temperature readings
  • Humidity readings
  • Historical environmental data
  • Alarm thresholds and configurations
• Inferences
  • Operational insights such as system status or alert conditions derived from device activity

4. Sources of Personal Information

We collect personal information from:

• You directly (e.g., account creation, configuration)
• Hardware devices you use that transmit data to our Services
• Automated system logs generated during use

We do not collect personal information from data brokers.

5. Purpose for Collection and Use

We use personal information for the following business purposes:

• Providing, operating, and maintaining the Services
• Processing and storing environmental sensor data
• Enabling alarms, notifications, and device monitoring
• Associating devices with user accounts
• Ensuring system security, integrity, and performance
• Detecting, preventing, and responding to fraud or misuse
• Complying with legal and regulatory obligations

We do not use personal information for advertising or cross-context behavioral tracking.

6. Cookies and Tracking Technologies

We do not use:

• Advertising cookies
• Third-party analytics tools
• Cross-site or behavioral tracking technologies

We may use strictly necessary cookies or similar technologies required for:

• Authentication
• Session management
• Security

These technologies are not used for tracking or profiling.

7. Disclosure of Personal Information

We do not sell or share personal information.

We may disclose personal information only in the following circumstances:

• To comply with applicable laws, regulations, subpoenas, or legal process
• To respond to lawful requests from public authorities
• To protect the rights, safety, or property of users, our company, or others
• To service providers that perform functions on our behalf (e.g., hosting, infrastructure), subject to contractual confidentiality and data protection obligations
• To payment processing providers acting as independent controllers of payment data.

We may disclose limited personal information to third-party service providers that perform functions on our behalf, such as payment processing providers (e.g., Stripe), who process payment transactions independently and in accordance with their own privacy policies.

We do not authorize service providers to use personal information for purposes other than providing services to us.

8. Data Retention

We retain personal information only as long as reasonably necessary to:

• Provide the Services
• Maintain historical sensor data for user access
• Fulfill legal, regulatory, or contractual obligations

Retention periods may vary depending on the nature of the data and legal requirements.

9. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information, including:

• Encrypted transmission of data
• Encrypted data at rest
• Encrypted backups
• Access controls and authentication mechanisms
• System monitoring and logging

No method of transmission or storage is completely secure; however, we take appropriate measures to reduce risk.

10. Your Privacy Rights (California and Other State Laws)

Residents of certain states, including California, may have the following rights:

A. Right to Know

You may request:

• The categories of personal information collected
• The categories of sources
• The business purposes for collection
• The categories of third parties with whom information is disclosed
• Specific pieces of personal information collected

B. Right to Delete

You may request deletion of personal information, subject to legal exceptions.

C. Right to Correct

You may request correction of inaccurate personal information.

D. Right to Opt-Out of Sale or Sharing

We do not sell or share personal information; therefore, no opt-out mechanism is required.

E. Right to Limit Use of Sensitive Personal Information

We only use sensitive personal information as necessary to provide the Services.

F. Right to Non-Discrimination

We will not discriminate against you for exercising your rights.

11. Exercising Your Rights

To submit a request:

Email: privacy@varanustech.com
Website: https://varanustech.com/privacy

We will verify your identity before fulfilling requests. Authorized agents may submit requests on your behalf where permitted by law.

12. Children’s Privacy (COPPA)

The Services are not directed to children under the age of 13.

We do not knowingly collect personal information from children under 13. If we become aware that such information has been collected, we will take steps to delete it promptly.

Parents or guardians who believe that a child has provided personal information may contact us at privacy@varanustech.com.

13. Payment Processing and Financial Information

We do not collect, process, or store payment card information (such as credit card numbers, expiration dates, or security codes).

All payment transactions are processed by third-party payment processors, such as Stripe, which operate independently and are responsible for the security and processing of your payment information. Your payment details are provided directly to the payment processor and are governed by their privacy policy and terms.

We may receive limited information related to transactions, such as:

• Payment confirmation status
• Transaction identifiers
• Subscription or billing status

We use this information solely to:

• Confirm payment
• Provide access to Services
• Maintain account and billing records

We do not use or store full financial account information.

Because we do not collect or maintain nonpublic personal financial information, the Services are generally not subject to the Gramm-Leach-Bliley Act (GLBA). To the extent GLBA is deemed applicable, we will comply with its requirements.

14. Do Not Track Signals

Our Services do not respond to “Do Not Track” signals due to the absence of a consistent industry standard.

We do not use tracking or profiling technologies as outlined in section 5. Cookies and Tracking Technologies.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted with a revised effective date.

16. Statement on Sale and Sharing

We do not sell personal information

We do not share personal information for cross-context behavioral advertising

We only disclose personal information when legally required or necessary to operate the Services

17. Contact Information

To submit a privacy request or contact us regarding this Privacy Policy, you may use:

Company Name: VARANUS LLC
Email: privacy@varanustech.com
Contact: https://varanustech.com/contact/