Top ↑

Xcentrix Privacy Policy

Version 2.0 — Effective 2026-08-XX

1. Who We Are

Xcentrix provides industrial environmental monitoring and alarm notification services. This policy describes how we collect, use, and protect information in connection with our SMS, email, push notification, and voice alert services.

2. Information We Collect

We collect only the information necessary to deliver alarm notifications:

  • Phone numbers — to send SMS alert notifications
  • Email addresses — to send email alert notifications
  • Push notification tokens — to deliver browser push alerts
  • Device telemetry data — sensor readings from monitoring equipment (temperature, humidity, pressure, etc.) stored edge-locally; not stored in cloud.
  • Alarm history metadata — timestamps, severity, acknowledgements; retained in cloud audit log per §5 below.
  • Account credentials — email address, bcrypt-hashed password, optional TOTP secret (encrypted at rest).

3. How We Use Your Information

Your information is used solely for:

  • Delivering alarm and alert notifications via SMS, email, push, or voice
  • Monitoring environmental conditions and device status
  • Maintaining alarm history and audit trails
  • Authentication and account security

4. Mobile Information Sharing

We do not share, sell, rent, or disclose mobile phone numbers, SMS opt-in data, or any mobile subscriber information to any third parties or affiliates for marketing or promotional purposes. Mobile information will only be shared with service providers necessary to deliver SMS messages (Sinch, our SMS gateway provider) and as required by law.

5. Third-Party Service Providers

We use the following sub-processors to operate the service:

  • Sinch — SMS and voice notification delivery
  • Mailgun (Sinch) — transactional email delivery
  • Vultr — cloud hosting infrastructure

We do NOT use third-party analytics, tracking pixels, or advertising networks. See our Cookies section and docs/cookie-policy-decision.md for the full COMP-11 rationale.

6. Data Retention

We retain personal data for as long as your account is active. Audit log events are retained for 2 years by default (configurable per platform settings). Telemetry data is stored edge-locally and is not uploaded to the cloud. You may request deletion of your personal data at any time by contacting us.

7. Your Rights

You have the right to access, correct, or delete personal data we hold about you. To exercise these rights, email support@xcentrix.net. Requests are processed within 30 days per GDPR Article 17.

8. Cookies

We use only functional session cookies (to keep you logged in) and one localStorage preference (sidebar collapsed state). We do NOT use third-party analytics, tracking pixels, or advertising cookies. No cookie consent banner is required under GDPR Recital 30 / ePrivacy Art. 5(3) for these strictly-necessary cookies.

9. SMS Opt-Out

You may opt out of SMS notifications at any time by replying STOP to any message. Reply HELP for assistance. Message and data rates may apply. Message frequency varies based on alarm conditions.

10. Data Security

We use industry-standard security measures including encrypted communications (TLS/HTTPS), bcrypt password hashing, AES-256 encryption for sensitive secrets at rest, access controls, and audit logging.

11. Changes to This Policy

We may update this policy from time to time. Changes will be posted at this URL with an updated version number and effective date. Material changes will be notified by email to account holders.

12. Contact

Questions about this privacy policy or your data: support@xcentrix.net

← Back to sign-in · Xcentrix — 2026