Privacy Policy
What we collect, why, who we share it with, how long we keep it, and your choices.
Last updated:
1. Who we are and what this covers
TitanRFID is operated by Wonder Systems LLC ("we", "us"). This policy explains how we handle information when you visit titanrfid.com, use the Titan Cloud hub or API, connect RFID readers to it, or contact us. It is part of our Terms of Service.
TitanRFID is a business service, and we play two different roles depending on the data:
- Customer Data. The reader telemetry, tag reads, items and movement data that your organization's account stores in the Service (called "Customer Data" in the Terms) belongs to your organization. For Customer Data, we act as a processor: we process it on your organization's instructions to provide the Service, and your organization is the controller.
- Account data. Details of the account owner and users, the billing contact, sign-in and audit records, and support correspondence. For account data, we act as a controller.
The service providers that store and run the Service, carry its traffic and send its email (our cloud hosting, backup storage, network and email providers, described in section 4) process Customer Data for us as sub-processors, only to provide their service. A data processing agreement is available on request at [email protected].
If you are an individual whose information appears in an organization's Customer Data, please contact that organization first; we will help it respond.
2. Information we collect
Information you give us
- Account information: names, email addresses, company name, and the sign-in details of the people on your account. Passwords are stored only in hashed form.
- Billing information: billing contact, billing address, tax identifiers you enter, plan, reader count and payment history. Card details are entered on and held by our payment provider, Stripe. We do not receive or store your full card number.
- Communications: what you send us by email, such as support requests.
Contact form
If you use the form on our contact page, we collect your name, work email, company, roughly how many readers you need, whether you already own Impinj R700 readers, and your message. We use it only to reply to you about TitanRFID; we do not add you to a mailing list. It is stored on our own servers and read only by the TitanRFID team. We delete it 12 months after it arrives, or 90 days after closing your inquiry, whichever comes first. Your IP address is used briefly to limit repeated submissions and is not stored with your message. The form sets no cookies, and your details are not sent to any third party service.
Information the Service generates
- Reader telemetry and tag reads: reader identity and serial number, status and health information, and each tag read (tag identifier, reader, antenna, time and similar read details).
- Items and movement data: the items, zones and tag data you set up, and where and when tags were seen.
- Audit logs: a record of sign-ins and changes made in your account, including who acted, when, the IP address and browser of the request, and the API key used, if any.
- Device and log data: when you use the hub, API or website, our servers record technical information such as IP address, browser type, the pages or endpoints requested, and times.
RFID tags normally carry an identifier, not personal information. We do not collect personal information from tags unless you put it there or link it to a person yourself.
3. How we use information
- to provide, operate and maintain the Service, including showing your tag data, exports and API responses;
- to create and manage accounts, take payment, apply tax, and send billing and account notices, such as trial, payment and security emails;
- to answer support requests and other messages;
- to keep the Service and our customers secure, including detecting abuse, investigating incidents and keeping audit records;
- to diagnose problems and improve the reliability and performance of the Service; and
- to comply with the law and enforce our Terms.
We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use Customer Data for advertising. We send marketing email only if you ask us to.
Where the law requires a legal basis (for example, in the EEA or UK), we rely on performance of our contract with you, our legitimate interests in running and securing the Service, compliance with legal obligations, and, where we ask for it, your consent.
5. How long we keep information
- Raw tag reads are kept for 7 days and then deleted automatically.
- Information derived from reads and the data you manage, such as items, tag data and its history, where tags are, and the audit log, is kept while your account is active and is not deleted automatically. Your administrators can delete tags and their data from the hub.
- Suspended accounts: if an account is suspended, including an account suspended because no reader was claimed, nothing in it is deleted.
- Unpaid accounts: an account locked for non-payment keeps its data for at least 30 days after the lock. We do not delete accounts automatically. Deletion is a manual step taken only after we have warned the account by email.
- Closed accounts: if you close your account and want your data deleted, email [email protected] and we will tell you what will be removed and when.
- Billing records are kept as long as needed for tax and accounting obligations. Stripe also keeps payment records under its own policies.
- Backups: we take encrypted backups. Deleted data can remain in backups for a limited time until those backups are replaced.
6. Security
We use administrative, technical and organizational measures designed to protect information. These include encryption of data in transit between your browser, claimed readers and our servers, hashed passwords and API keys, encrypted storage of reader credentials, separation of each customer's data, access controls with audit logging, and encrypted backups kept off the production systems. No system is perfectly secure, and we cannot guarantee security. If we learn of a breach that affects your information, we will notify you as the law requires.
You are responsible for keeping your passwords, API keys and claim codes secret and for the security of your own readers and network.
7. Your rights and choices
Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, receive a copy in a portable format, restrict or object to some uses, and withdraw consent you have given. Residents of California and other US states with privacy laws may have the right to know what we collect and how we use and disclose it, and to not be treated differently for using these rights. We do not sell or share personal information as those laws define it.
Account administrators can export tag data as CSV and delete tags from the hub. For anything else, email [email protected]. We may need to confirm your identity before acting, and we will respond within the time the law requires. If your information is part of an organization's Customer Data, we may refer your request to that organization. You may also complain to your local data protection authority.
8. International transfers
We and our service providers may process information in countries other than yours, including the United States and countries in the European Union. Those countries may have different data protection laws. Where the law requires it, we rely on appropriate safeguards for these transfers.
10. Children
The Service is for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.
11. Changes to this policy
We may update this policy as the Service or the law changes. The date at the top shows when it last changed. If a change is material, we will email account administrators before it takes effect.
12. Contact
- Privacy questions and requests: [email protected]
- Support: [email protected]. We respond quickly, but responses may take up to 48 hours.
- Mail: Wonder Systems LLC, 6545 Market Ave. North, Ste 100, Canton, OH 44721, United States
Email from [email protected] is sent automatically for account and billing notices. Replies to it are not read.