Privacy Policy

Last updated: October 12, 2026

This Privacy Policy explains how Virtual Random LLC (Reg. No. 400481260), of 75a, Erosi Manjgaladze Street, Nadzaladevi District, Tbilisi, Georgia ("Virtual Random LLC", "we", "us", "our"), collects, uses, and protects information when you use SensorConsole (the "Service"). By creating an account or otherwise using the Service, you agree to the practices described here.

1. Information we collect

Account information

When you create an account, we collect the email address you provide and store a securely hashed version of your password (we never store your actual password in readable form).

Device and sensor data

When you connect a sensor, we store the information needed to retrieve its readings — this may include API keys, account credentials for a third-party sensor provider, device identifiers, and the location you choose to assign to a device (if any). We store the readings your connected sensors report (a history point for every five minutes, and the most recent value): values such as temperature, humidity, soil moisture, air quality, or similar measurements, along with the time each reading was recorded.

Waitlist emails

If you ask to be notified when a new integration launches, we store the email address you enter and the integration you asked about, and use it only to tell you when that integration is ready. You can ask us to remove it at any time by emailing sensorconsole@protonmail.com.

Camera data — not retained

Camera devices are treated differently from every other sensor type. We do not store or retain camera images, snapshots, or video. A camera's motion events (e.g. that motion occurred, and when) may be stored like any other reading, but an associated snapshot image is never hosted or kept by us — it exists only as a link back to wherever your own camera system already hosts it. Camera devices also cannot be made public on SensorConsole under any circumstance; this is enforced as a fixed rule, not a setting you or we can change.

Usage data

We use Google Analytics to understand how the Service is used — this may include pages visited, approximate location derived from your IP address, browser and device type, and similar standard analytics information. See Google's own privacy policy for how Google Analytics processes this data.

Cookies

We use a small number of cookies: one to keep you signed in, and one to remember that you've seen our cookie notice. Google Analytics sets its own cookies as part of standard operation.

2. How we use your information

To operate, maintain, and secure the Service — including authenticating your account and retrieving readings from the sensors you connect.
To generate personalized analysis of your own sensor data — historical context, trends, and charts built from your own reading history — and present these back to you within your dashboard.
To train our proprietary, global sensor-data models, as described in Section 3 below.
To respond to support requests sent to sensorconsole@protonmail.com.
To keep the Service secure and working. For support, security and abuse prevention, authorised Virtual Random LLC administrators can view account details and device data, including devices you have not made public. Administrator access is read only, never includes your password or the API keys you gave us, never shows camera snapshots or images, and every time an administrator opens an account or device it is recorded in an access log.
To understand aggregate usage of the Service via Google Analytics, in order to improve it.

3. Data used to train our models

SensorConsole is a free service. As part of how we sustain it, sensor reading data may be used, in de-identified or aggregate form, to train Virtual Random LLC's proprietary global data models.

We do not use personally identifiable information in model training. Before any reading data is used for this purpose, information that could identify you or your household — including your email address, account identifiers, API credentials, and any name you've given a device — is excluded or removed. What may be used is the measurement data itself (e.g. a temperature or humidity value and when it was recorded), not who it came from.

This is separate from the personalized analysis described in Section 2, which is generated from your own data and tied to your account, for your own use. Camera data is never used for model training, consistent with it not being retained at all (see "Camera data — not retained" above).

4. How we share information

We do not sell your personal information. We share information only in these circumstances:

Sensor providers you connect: to retrieve your readings, we communicate with the third-party provider (e.g. Ecowitt, PurpleAir, or others) you've chosen to connect, using the credentials you supplied.
Service providers: our hosting provider and Google Analytics process data on our behalf, solely to help us operate and understand the Service.
Legal requirements: if required to do so by law or in response to a valid legal request.
Public devices: if you mark a device as public, its readings and the name you gave it are visible to anyone who views the public map or that device's share link — this is a setting you control per device.

5. Data security

Passwords are hashed using industry-standard algorithms and are never stored or transmitted in plain text. Third-party API keys and passwords that you give us in order to collect readings from a provider are stored in encrypted form. Database queries use parameterized statements to guard against injection attacks, and access to your data is scoped to your account. One technical note: a small number of endpoints exist specifically to receive data from physical sensor hardware, some of which only supports older, unencrypted (HTTP) connections due to hardware limitations — these endpoints accept only sensor reading data via a device-specific credential, and never carry your account password or personal information.

6. Data retention

We keep your sensor history for as long as your account remains active, so that you always have your full history. For each device we save one history point every five minutes and the newest value, and we also keep daily summaries computed from every reading (counts, averages, lowest and highest values) so long-term charts load quickly. We retain your account and device data for as long as your account remains active. You may delete an individual device (and its reading history) at any time from your dashboard, or request deletion of your entire account by contacting sensorconsole@protonmail.com. Camera device data is the one exception: as described above, camera images/snapshots are never retained in the first place, so there is nothing to delete beyond the motion-event record itself.

7. Your choices and rights

You may access, correct, or delete the personal information associated with your account by contacting us, or by using the controls in your dashboard. Depending on where you are located, you may have additional rights under local law regarding your personal information; contact us at sensorconsole@protonmail.com and we will respond appropriately.

8. Children's privacy

The Service is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to remove it.

9. International data transfers

Virtual Random LLC is based in Georgia. Depending on our hosting and service providers, your information may be processed or stored on servers located in other countries.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above when we do; continued use of the Service after changes take effect constitutes acceptance of the revised policy.

11. Governing law

This Privacy Policy is governed by the laws of Georgia, including the Law of Georgia on Personal Data Protection (No. 3144, adopted 14 June 2023). This law was previously enforced by Georgia's Personal Data Protection Service; following legislative amendments, that body's functions were transferred to Georgia's State Audit Office, effective 2 March 2026, which now serves as the supervisory authority. Where applicable, you have the rights described in Section 7 above, which are aligned with that law's data subject rights of access, rectification, erasure, and portability.

12. Data Protection Officer

Georgian law requires a Data Protection Officer only past certain thresholds — broadly, processing data concerning 3% or more of Georgia's population, processing sensitive-category data at 1% or more, or carrying out systematic, large-scale behavioral monitoring (certain regulated sectors, which SensorConsole is not part of, require one regardless of scale). Virtual Random LLC does not currently meet any of these thresholds and has not appointed a Data Protection Officer. We will revisit this as the Service grows.

13. Contact

Questions about this policy or your data can be sent to sensorconsole@protonmail.com, or by mail to Virtual Random LLC, 75a, Erosi Manjgaladze Street, Nadzaladevi District, Tbilisi, Georgia.