This Privacy Policy explains what information WaterTDS Inc. ("WaterTDS," "we," "us") collects when you use TDSBot devices, the TDSBot mobile and web apps, and watertds.com (together, the "Services"), how we use and share it, and the choices you have.
The short version: we collect what we need to run your TDSBot and your account. We do not sell your personal information. We use water readings to show you your data, send alerts, and improve our products, and we publish water-quality information only in aggregated, de-identified form.
1. Scope
This policy applies to consumers who buy and use TDSBot, and to individuals who use TDSBot on behalf of a business customer, such as facility managers, service technicians, and staff.
Where a business customer deploys TDSBot at its own sites, that business controls its account and the data from its devices. We process that data on the business's behalf under our agreement with it. Questions about how a business uses its TDSBot data should go to that business.
This policy does not cover third-party websites or services we link to, which have their own privacy policies.
2. Information We Collect
Information you give us
- Account information: name, email address, phone number, password, and, for business accounts, company name, job title, and the names and contact details of other users you invite.
- Installation information: the address or site where each device is installed, the type of filtration system, and device settings such as alert thresholds and filter types.
- Purchase information: billing and shipping addresses and order details. Payment card details are collected and processed directly by our payment processor, Stripe, and we do not store full card numbers. See Stripe's privacy policy.
- Communications: messages you send to support, feedback, survey responses, and records of calls or chats with us.
Information your TDSBot generates ("Device Data")
- Incoming and outgoing TDS readings, water temperature, flow rate, and volume filtered.
- Filter status, alerts, and estimates we calculate from these readings.
- Device identifiers, firmware version, Wi-Fi signal strength, connection status, and diagnostic logs.
Device Data is linked to your account and installation address, so we treat it as personal information for consumers. Water usage patterns can reveal when a location is occupied, and we handle Device Data with that in mind.
Information collected automatically when you use the apps and website
- IP address, device and browser type, operating system, app version, and mobile carrier.
- Pages viewed, features used, dates and times of access, and referring pages.
- Approximate location derived from IP address. We do not collect precise GPS location from your phone.
- Information from cookies and similar technologies, described in Section 8.
Information from others
- From business customers, when they invite you to their account.
- From distributors, installers, or resellers who sold or installed your TDSBot, such as your contact details and installation address.
- From service providers such as shipping carriers (delivery status) and analytics providers.
3. How We Use Information
We use personal information to:
- Provide the Services: set up and connect your device, show readings and history, send alerts you have configured, and estimate filter life.
- Process orders: take payment, ship products, handle returns and warranty claims.
- Support and communicate with you: answer questions, send service and security notices, account and order messages, and firmware update information.
- Improve our products: diagnose problems, improve sensor accuracy and filter-life models, and develop new features.
- Keep things secure: verify accounts, prevent fraud and abuse, and protect our systems.
- Market to you, with your choice: send newsletters and offers. You can unsubscribe at any time (see Section 7).
- Meet legal obligations: keep tax and accounting records, respond to lawful requests, and enforce our agreements.
Aggregated and de-identified water data: We may combine Device Data from many devices and remove information that identifies a person, account, or specific address. We use and may publish this data, for example average TDS or temperature by city or region, for research, public information about water quality, and product development. We publish figures for an area only when they combine data from enough devices that no individual location can be identified, and we do not attempt to re-identify de-identified data.
Text messages: If you give us your mobile number and agree to receive texts, we use it to send the alerts and account messages you choose. Message and data rates may apply. Reply STOP to opt out or HELP for help. We do not share mobile numbers or text-messaging consent with third parties for their marketing.
Legal bases (EEA and UK users): Where GDPR or UK GDPR applies, we rely on: performance of our contract with you (providing the Services and processing orders); our legitimate interests (security, product improvement, and business-to-business communications), balanced against your rights; your consent (marketing emails and texts, non-essential cookies), which you can withdraw at any time; and legal obligations.
4. How We Share Information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose personal information only as follows:
- Service providers that work on our behalf under contracts limiting their use of the data, including cloud hosting (such as Amazon Web Services), payment processing (Stripe), shipping carriers, email and SMS delivery, customer support tools, and analytics.
- Your business account administrator. If you use TDSBot through a business customer, that business and the users it authorizes can see Device Data and account activity for its sites.
- Installers, distributors, and service partners you ask us to work with, or that sold or service your device, to the extent needed to install, support, or service it.
- Others you direct. When you choose to connect or share data with someone else, such as a plumber, landlord, or water treatment provider.
- Legal and safety reasons. When we believe in good faith it is required by law, subpoena, or court order, or needed to protect the rights, property, or safety of WaterTDS, our users, or the public.
- Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this policy's protections continuing to apply.
We may share aggregated or de-identified information that cannot reasonably identify you for any lawful purpose, as described in Section 3.
5. Retention, Security, and International Transfers
Retention: We keep personal information for as long as your account is active and as needed to provide the Services, then delete or de-identify it, as follows:
Account information and Device Data: While your account is active. After you delete your account, we keep it for 3 months so it can be restored if deleted by mistake, then delete it. You can ask us to delete it immediately.
Order and payment records: 5 years after the transaction, for tax, accounting, and chargeback purposes
Support communications: Up to 3 years after the request is closed
Website and app logs: Up to 13 months
Aggregated or de-identified data: May be kept indefinitely, because it does not identify you
Deleted data may remain in backups for a limited period until overwritten, and we may keep information longer where the law requires it or to resolve disputes.
Security: We use administrative, technical, and physical safeguards appropriate to the information, including encryption of data in transit between the device, apps, and our servers, access controls, and monitoring. No system is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and keep your Wi-Fi network secured.
International transfers: WaterTDS is based in the United States, and we process and store information in the United States and other countries where our service providers operate. Where required, we use appropriate safeguards for transfers from the EEA, UK, or other regions, such as the European Commission's Standard Contractual Clauses.
6. Children
The Services are not directed to children under 13 (or under 16 in the EEA and UK), and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact privacy@watertds.com and we will delete it.
7. Your Choices and Rights
Account and alerts: You can review and update your account information, installation details, and alert settings in the app. You can export your Device Data from the app or by contacting us.
Deleting your account: You can delete your account in the app's account settings or by emailing privacy@watertds.com. Deletion follows the retention periods in Section 5.
Marketing: You can unsubscribe from marketing emails using the link in any email, and stop marketing texts by replying STOP. We will still send service messages such as alerts you configured, security notices, and order updates.
Privacy rights: Depending on where you live, you may have the right to:
- know what personal information we have about you and get a copy;
- correct inaccurate information;
- delete your information;
- receive your information in a portable format;
- opt out of the sale or sharing of personal information, or targeted advertising (we do not do these);
- object to or restrict certain processing, or withdraw consent; and
- not be treated differently for exercising these rights.
How to make a request: Email privacy@watertds.com or write to us at the address in Section 10. We will verify your identity by matching information in your account, and may ask for more if needed. You may use an authorized agent, and we may ask for proof of the agent's authority. We will respond within the time required by law, generally 45 days. If we deny your request, you may appeal by replying to our decision, and where applicable you may contact your state attorney general or local data protection authority.
California residents: In the past 12 months, we collected the categories of personal information described in Section 2: identifiers (such as name, email, phone, IP address, and device IDs); commercial information (purchase history); internet or other electronic activity (app and website usage); approximate geolocation (installation address and IP-based location); and sensor data (Device Data). We collected it from the sources and for the purposes in Sections 2 and 3, and disclosed it for business purposes to the categories of recipients in Section 4. We do not sell or share personal information, have not done so in the past 12 months, and have no actual knowledge of selling or sharing information of consumers under 16. We do not collect or use sensitive personal information to infer characteristics about you. California's "Shine the Light" law also lets you ask about disclosures to third parties for their direct marketing; we do not make such disclosures.
EEA and UK residents: You have the rights listed above, and you may lodge a complaint with your local data protection authority.
8. Cookies and Analytics
We use cookies and similar technologies to keep you signed in, remember preferences, secure the Services, and understand how the website and apps are used. We use Google Analytics to measure usage. You can opt out using Google's opt-out browser add-on or by blocking cookies in your browser, though some features may not work. We do not use advertising pixels or third-party advertising cookies. See our Cookie Policy for details.
Do Not Track and Global Privacy Control. Because we do not sell or share personal information or use it for targeted advertising, there is nothing for these signals to opt you out of. If that changes, we will honor Global Privacy Control signals as an opt-out request.
9. Changes to This Policy
We may update this policy from time to time. We will post the new version on this page and update the "Last updated" date. If we make material changes, we will notify you by email or in the app before they take effect. We will ask for your consent where the law requires it.
10. Contact Us
For privacy questions or requests, contact:
WaterTDS Inc. 2204 Oak Haven Ave, Simi Valley, CA 93065 USA privacy@watertds.com
For general support, email support@watertds.com.