Privacy & Data Policy

Information We Collect

We only collect what we need to qualify, serve, and support our clients. Specifically:

• Lead & intake data submitted through our Estate Discovery or partnership forms — name, email, phone, neighborhood, approximate square footage, and the challenges you're trying to solve.
• Property & project data shared during onboarding — physical address, gate codes (if provided), device inventories, floor plans, and network topology details such as device types, IP ranges, and VLAN configurations.
• Account & portal data — your email and authentication identifiers used to sign in to the Client Portal via passwordless magic link.
• Payment data — when you book a paid Estate Discovery or service, payment is processed by Stripe. We never see or store your full card number, CVC, or bank details. We retain only the transaction reference, amount, tier, and billing email.
• Signed agreements — when you sign a Service Agreement, we store the signature image, printed name, signed date, IP address, and user account so we have a verifiable record of consent.
• Usage data — anonymized analytics about which pages are visited (Google Analytics 4), used to improve the site.

We never store Wi-Fi passwords, router admin credentials, smart home account passwords, or any other authentication secrets. Sensitive credentials are handled ephemerally during configuration and are never retained in our records or databases.

How We Use Your Information

• To respond to inquiries and schedule your Estate Discovery or project.
• To deliver the configuration, integration, and support services you've engaged us for.
• To process payments and issue receipts via Stripe.
• To send transactional emails (booking confirmations, payment receipts, scheduling) — these are not marketing.
• To maintain a record of signed Service Agreements for legal and audit purposes.
• To improve our website and service quality through aggregated analytics.

We do not sell, rent, or trade your personal information. We do not use your data for third-party advertising.

Cookies & Analytics

Our website uses essential cookies to keep you signed in to the Client Portal and a small number of analytics cookies set by Google Analytics 4 to measure aggregate traffic patterns. We do not use advertising or cross-site tracking cookies. You can disable cookies in your browser; doing so may prevent you from signing in to the Client Portal.

Network Monitoring (Care Plan Clients)

Where contracted under a Care Plan, Connected Estate may provide ongoing network health monitoring. This includes bandwidth utilization, device connectivity status, firmware update readiness, and intrusion-detection alerts at the network perimeter.

We do not, at any time, have the ability to access, view, or record feeds from your security cameras, video doorbells, baby monitors, or any audio-enabled devices. Our monitoring is strictly limited to network-layer telemetry and does not extend to the content transmitted by any device on your network.

Local-First Architecture

Connected Estate prioritizes local-control platforms such as Home Assistant and Firewalla to minimize the amount of your data that is shared with major cloud providers. Whenever possible, automations, device management, and data processing occur entirely within your home.

Some manufacturer integrations (e.g., voice assistants, streaming services) inherently require cloud connectivity. In those cases we configure only the minimum permissions necessary and advise you on each provider's own privacy policy before activation.

How We Protect Your Data

• All traffic to and from our website is encrypted with TLS (HTTPS) and HSTS is enforced.
• Database access is governed by row-level security: only you (or an authorized admin) can read your records.
• Uploaded files (floor plans, project documents) are stored in private buckets accessible only to you and authorized staff.
• API keys, payment secrets, and service credentials are stored in encrypted secret management — never in client-side code.
• All form inputs are validated and sanitized server-side to prevent injection attacks.
• Administrative access is restricted by role and audited.

Your Rights & Choices

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or outdated information.
• Delete your records — we will purge all associated data within 30 business days, subject to any records we are legally required to retain (such as signed agreements and tax records).
• Unsubscribe from non-transactional email at any time using the link at the bottom of any message.
• Export a copy of your data in a portable format on request.

To exercise any of these rights, email us using the address on our Contact section below.

Data Retention

We retain client and project records only as long as necessary to provide ongoing support and to comply with legal and tax obligations. Lead inquiries that do not become clients are retained for up to 24 months for follow-up purposes, then purged. Signed Service Agreements and payment receipts are retained for the period required by law.

Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal information from children under 13. If you believe a child has submitted information to us, please contact us so we can delete it.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements. The "Last updated" date at the top of the page reflects the most recent revision. Material changes will be communicated by email to active clients.

Contact Us

Questions about this policy or wish to exercise your data rights? Reach out through our Estate Discovery form or email us directly. We are based in St. Cloud, Florida and are happy to discuss our practices in detail.