Our principles on privacy

对绝大多数公司来说,隐私只是个噱头或是虚假承诺而已。但对我们来说,隐私就是一切。为了确保在科技进入现实领域时,让您有权控制隐私和个人数据。

Privacy is a basic right.

我们打造的产品是为了让它为您服务,就这么简单。您的数据就是您的数据,它只属于您一个人。只有您才能授权这些数据的使用方式和目的,如果您改变了主意,您也理应可以撤销任何一方对这些数据的访问权。 We created VationX to serve you. Full stop. Your data is your data. It’s owned by you and only you. Only you can consent to how it can be used and for what purposes, and if you change your mind you should be able to revoke access to your data from any party. These are not things we care about because of regulations. These are things we believe are fundamental to our humanity.

Technology centered around human

Privacy principles

Here are the fundamental beliefs that drive our approach to data privacy.

  1. 01

    We believe your privacy is a human right and is not something to be held at ransom.

  2. 02

    We believe you own your personal data and digital self as much as your physical self, and you should hold absolute authority on how your data is shared and used.

  3. 03

    We believe your personal data should be used to empower and positively serve you.

Privacy Policy

We respect your privacy and are committed to protecting it. This privacy notice describes the types of information we collect and our practices for using, storing, protecting, and disclosing that information. It covers information that you provide to us when you use the VationX app or manage VationX readers, as well as information generated while using the Proxy mobile access service.

Types of data we collect

User info

Your name, email address, and photo

Device info

Device model, OS type and version, OS language, hardware settings, network settings, MAC address, device identifier and device location (GPS).。

Usage activity

App logins, interactions your device has with VationX readers, door unlocks, and activity you perform within the VationX app.

Device logs

We store logs of IP address, system activity, and crashes of the app

Financial

Administrators provide their company credit card number and billing address.

When and how we collect data

Data you provide us

您向 Proxy 提供的姓名和邮箱地址会存储在您的个人资料中。您也可以在其中添加照片,并启用设备定位功能。如果您是管理员,则会向 Proxy 提供公司信用卡号和账单地址。

Data your employer provides us about you

Your employer can provide us your name, email address, and photo when setting up corporate access and ID cards. This data is owned by your employer, and is kept separate from your personal data.

Data we collect automatically

您在自己的设备上使用 Proxy 应用时,我们会自动收集其他所有被归为“设备信息”、“使用活动”、“设备日志”的信息。

How and why we use your data

Service operation

There are some core pieces of information that we need to make the system work. That includes the data in your user profile like your email and whenever your device running the app interacts with a reader. In the background, the app also needs some data to operate properly on your device such as your network settings, hardware settings, etc.

Mobile app operation

The app accesses your phone’s GPS location in order to “wake up” the app in the background whenever you’re near a VationX reader. We don’t store or transmit your GPS location off your device. However, our logs of device interactions with VationX readers could be used to infer your location if the location of the VationX reader is known to us.

Contact you about our service

我们可能会使用您的邮箱地址来通知您注册的服务,例如告知您我们即将对 Proxy 做的修改。如果您在我们的状态页面 https://status.proxy.com 订阅了更新信息,您也会收到关于服务操作的更新。

We will not send you email about any services other than the one you signed up for without your explicit consent.

Troubleshooting

When you contact us, we keep a record of your communication to help solve any issues you might be facing. Providing feedback in the app sends logs of your device’s system activity and app crashes so that we can help troubleshoot. We also look at some other data to diagnose issues with the app including device model, hardware settings, etc.

When interacting with our support staff, we will seek your consent before accessing any personal data or corporate data that you did not provide to us in your support request.

Security auditing

In order to prevent security incidents in the app, and to investigate incidents after they have occurred, we retain IP address, activity in the app, and logins to the app.

产品改进

We look at some of the collected data to make the service better, including IP address (which tells us in what geographic regions people are using VationX), OS language, and OS type and version.

Payment processing

Our products are free to install on your device and use, but administrators that manage our readers and associated software pay a subscription. We collect payment details from those administrators to process payments.

Whom we share your data with

Your employer or other organization you belong to

If you use our products as an employee or member of an organization or domain, we share only the information relevant to your activities within that organization or domain with its administrators. We will never share any of your information that is not related to the organization in question (for example, your activity as part of other organizations you belong to which may also use our products)

Payment processors

We share credit card and other payment details provided by administrators with our payment processors in order to facilitate payments

Email processors

In order to send you email related the service, such as your verification email when you first sign up, we rely on email service providers to process and send these emails on our behalf. Our contracts with them state they will not share your email address and content with other third parties such as advertisers or marketing affiliates.

Third-party processors

In order to send you email related the service, such as your verification email when you first sign up, we rely on email service providers to process and send these emails on our behalf. Our contracts with them state they will not share your email address and content with other third parties such as advertisers or marketing affiliates.

Law enforcement

We may also disclose your information if we are required to do so by any court order, law, or legal process, including to respond to government or regulatory request. We will disclose no more than that portion of your information which we are legally obligated to disclose, and will use commercially reasonable efforts to obtain assurances from the applicable court or agency that your information will be afforded confidential treatment.

Who owns what data

It is our intention to make you (the person) the owner of as much data related to your profile and transactions as possible as opposed to only the companies with readers that sense your signal. Each transaction that occurs in the physical world is generated through interaction of several parties, each contributing their own data towards the outcome and deserving to retain their part of the result.

当事人接受了邀请后,与 Proxy 读卡器交互

以 Jenna 为例,她正在使用 Proxy 访问雇主 Acme 公司的大厅和办公室。Jenna 的 Proxy ID 手机应用里有一张 Acme 公司门卡,而 Acme 公司的门禁控制系统与其业主 Buildings 公司的门禁系统相连。那么请问谁拥有哪些数据?

1. Jenna 的雇主 Acme 邀请她使用 Proxy

  • Jenna:
  • Acme:Jenna 的工作邮箱地址、她在公司人力资源系统中的姓名(可选)、她在公司人力资源系统中的照片(可选)、门卡号码
  • 业主:
  • Proxy:本次交互的元数据(可能包括 IP 地址、时间戳、设备操作系统、Proxy 应用程序版本)

2. Jenna 创建了一个 Proxy 账号,并关联了她的工作邮箱

  • Jenna:Jenna 选用的姓名(例如 Jen)、从她相册中选择的照片(可选)
  • Acme:
  • 业主:
  • Proxy:本次交互的元数据(可能包括 IP 地址、时间戳、设备操作系统、Proxy 应用程序版本)

3. Jenna 接受了邀请,并在她的 Proxy 应用中添加了一张 Acme 公司门卡

  • Jenna:“Jenna 接受了一张 Acme 公司的门卡。”
  • Acme:“Jenna 接受了一张 Acme 公司的门卡。”
  • 业主:— *Proxy:可接受审计的 Jenna 表示同意的记录,以及本次交互的元数据

4. Jenna 通过了大楼大厅内的一台闸机

  • Jenna:“Jenna 激活了一台闸机,并被 Acme 公司授予了访问权限。”
  • Acme:“Jenna 使用该门卡号码激活了一台闸机。”
  • 业主:“Acme 公司的员工激活了第七大街 555 号的闸机 A。”
  • Proxy:“用户 ID 号码与传感器 ID 号码进行了交互。”

5. Jenna 解锁了她所在楼层的一道办公室门禁

  • Jenna:“Jenna 解锁了一道 Acme 公司授权访问的门禁。”
  • Acme:“Jenna 解锁了 103 办公室的门禁。”
  • 业主:
  • Proxy:“用户 ID 号码与传感器 ID 号码进行了交互。”

在各方保持现有关系的情况下(Jenna 仍旧是 Acme 的雇员,Acme 仍旧是大楼的租户),他们可以看到与交互有关的所有数据——Jenna 和 Acme 均拥有她解锁了哪些办公室门禁的记录;Jenna 在楼内时,Acme 也能探测她的 Proxy 信号。

一旦他们之间的关系终止,每一方就只能保留自己的信息——Jenna 仍旧拥有她解锁了 Acme 公司办公室门禁的记录,但她无法再获得 Acme 办公室位置的识别信息;除了 Acme 自己提供的信息外,公司无法再获取 Jenna 更新的任何信息,Jenna 在楼内时,公司也无法再探测到她的 Proxy 信号。

当事人被 Proxy 读卡器探测到(受到了邀请,但未接受邀请)

继续以 Jenna 为例,假设有另一家名为 Other 的公司邀请她使用 Proxy 门卡参加一场会议,但她拒绝了接受门卡。Jenna 抵达会议现场时,经过了一台 Other 公司的 Proxy 读卡器。

1. Jenna 忽略或拒绝了 Other 公司的邀请

  • Jenna:“Jenna 拒绝了 Other 公司的一张门卡邀请。”
  • Acme:
  • Other 公司:“Jenna 拒绝了 Other 公司的一张门卡邀请。”
  • Proxy:可接受审计的 Jenna 拒绝的记录,以及本次交互的元数据

2. Jenna 经过了一台 Other 公司的 Proxy 读卡器

  • Jenna:
  • Acme:
  • Other 公司:
  • Proxy:“传感器 ID 号码探测到了用户 ID 号码。”

当事人被 Proxy 读卡器探测到(从未受到邀请)

最后,假如 Jenna 经过了一台和她没有任何关系的公司的读卡器,我们不妨把这家公司叫做 Unrelated 公司。在这种情况下,两者不会交换任何信息,也没有任何信息会与 Unrelated 公司共享。

1. Jenna 经过了一台 Unrelated 公司的 Proxy 读卡器

  • Jenna:
  • Acme:
  • Unrelated 公司:
  • Proxy:“传感器 ID 号码探测到了用户 ID 号码。”

隐私选项与权利

Your options

You can elect to not provide us with some data

You don’t have to upload a photo to your profile and you can decide not to enable location access to the app on your smartphone, although this will degrade your experience while using the product due to technical limitations of smartphones.

权利

You have the right to see the data we store about you

You have the right to ask for information about our collection and use of your information. Once we receive and verify your request, within 45 days we will disclose to you:

  • The categories of personal information we have collected about you
  • The sources of that information
  • Our purpose for collecting that information
  • The categories of third parties with whom we share that information
  • The specific pieces of personal information we collected about you

You have the right to correct any inaccuracies in your personal data

You can update information in your profile, such as your name and photo, from the app. We will honor your request to update your information unless we are required to keep the existing information for legitimate contractual or legal purposes.

If you believe that your employer or another organisation has inaccurate information about you, you can contact that organization to update your information as the data controller. We will honor the controller's request to update any information they control.

You have the right to have data about you deleted

You may request that we delete any information that we have collected from you and retained, subject to certain exceptions. These exceptions include completing the transaction or providing the service you requested, complying with legal obligations, or detecting and preventing security incidents or illegal or fraudulent activity.

How we secure data

我们会在物理、技术、行政上采取措施,保护您的数据安全。欲知详情,请访问我们的安全页面。

Where we store data

We store data in data centers in the United States and Ireland. Additionally, your data that is shared with third parties is stored in any location they have data centers.

Updates to this policy

When we make minor edits to this policy, we will make the changes on this webpage and describe the edits at the top of the page. For more extensive updates, we will send an email with details to the email address you have provided.

Privacy questions or issues?

If you have privacy questions or think you may have found a privacy issue, please get in touch with our team.