SoberAuth Privacy Policy

SoberAuth respects your privacy and is committed to protecting the information collected through our website, platform, applications, and related services. This Privacy Policy explains how SoberAuth collects, uses, stores, and protects information when you use our services.

1. Information We Collect

We may collect the following types of information:

• Account Information: Name, email address, phone number, organization name, user role, and login credentials.
• Organization Information: Facility names, locations, administrative settings, supported users, and configured workflows.
• Verification Data: Verification attempts, access outcomes, timestamps, supported device activity, BAC estimates, and related event logs.
• Video Accountability: If enabled by an organization, short video recordings or related media may be collected during verification events.
• Device and Usage Data: Login activity, browser or device information, IP address, diagnostic logs, and platform usage data.
• Communication Data: Messages submitted through contact forms, email, phone, or support requests.

2. How We Use Information

• To create and manage user accounts.
• To authenticate users and authorize access requests.
• To record verification events and maintain activity history.
• To support compatible smart locks, breathalyzers, hubs, and related devices.
• To send notifications, alerts, reports, and administrative communications.
• To provide customer support and respond to inquiries.
• To improve platform security, reliability, and performance.
• To comply with legal obligations and protect our rights.

3. Third-Party Hardware and Services

SoberAuth may integrate with compatible third-party hardware and services, including supported smart locks, breathalyzers, communication providers, hosting providers, and analytics or diagnostic tools. Information generated by these devices or services may be processed as part of verification events. Third-party hardware and service providers may also collect information according to their own privacy policies.

4. Video Accountability

If enabled by your organization, SoberAuth may capture short video recordings during verification events. These recordings are intended to support organizational accountability, access review, and operational oversight. Organizations are responsible for determining when video accountability is enabled and how authorized staff may access or review such recordings.

5. How We Share Information

We do not sell personal information. We may share information only as necessary to operate, support, or protect SoberAuth, including with:

• Authorized administrators and staff within your organization.
• Service providers who help us host, operate, secure, or support the platform.
• Third-party hardware or integration providers when necessary for supported functionality.
• Legal authorities when required by law or to protect rights, safety, or security.

6. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, or disclosure. However, no system can be guaranteed to be completely secure, and we cannot guarantee absolute security of information transmitted or stored through the platform.

7. Data Retention

We retain information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, enforce agreements, and support legitimate business purposes. Verification logs, video accountability records, and activity history may be retained according to organization settings, platform requirements, or applicable law.

8. Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or request a copy of certain personal information. You may also have the right to object to certain processing or withdraw consent where applicable. To exercise these rights, please contact us using the information below.

9. California, Texas, European, Canadian, and International Privacy Rights

Residents of certain jurisdictions, including California, Texas, the European Economic Area, the United Kingdom, Canada, Brazil, and other regions may have additional privacy rights under applicable laws. We will respond to valid privacy requests as required by applicable law. SoberAuth does not sell personal information.

10. Children’s Privacy

SoberAuth is intended for use by organizations and authorized users. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

11. Communications

SoberAuth may send emails, push notifications, automated voice calls, or other service-related communications to authorized users as part of normal platform operation. These communications may include verification events, administrative alerts, security notifications, system status updates, and configurable escalation workflows.

By using SoberAuth or providing contact information through your organization, you acknowledge that these communications may be necessary for the operation, security, and administration of the platform. Standard carrier rates or messaging charges may apply depending on your mobile service provider.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last Updated” date above. Continued use of SoberAuth after changes are posted means you acknowledge the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at support@soberauth.com .