Cluefox customer app

Privacy, in plain English.

Penny Wise I.T provides Cluefox so authorised customers can ask questions about their security system, receive alerts and summaries, view customer-safe camera status, and play short event clips.

We process the account and membership information needed to sign you in and show only authorised sites. App use can include questions, activity, notification subscriptions, camera and site metadata, alerts, summaries, and requested clips or thumbnails. If the account owner adds it, site metadata also includes the property's street address, suburb, state, postcode, optional cross street and optional access notes for Call for help. A clip contains audio only where the commissioned camera and site policy permit it.

Sign-in session data is stored encrypted by Cloudflare and may be held outside Australia.

We do not sell personal information, use advertising identifiers, or use customer questions, footage or audio to train models. Planned service categories include sign-in, hosting, content delivery, transactional email and browser push. The exact providers, processing locations and contracts remain a publication gate; this scaffold does not claim that a transactional-email provider has been approved.

Default retention

• Questions, alerts, summaries and health history: 30 days.
• Alert clips and thumbnails: 7 days.
• Security edge logs: 30 days.
• Limited security and deletion audit records: 12 months.

A saved property address remains with the site until the account owner changes or deletes it. The owner can delete it immediately in Property address after a confirmation prompt. Cluefox does not send that address to police, emergency services, a camera provider or another third party through the help steps; it is displayed to the signed-in customer to read aloud if they choose to make a call.

A shorter commissioned policy applies where configured. A lawful evidence hold can preserve specified records for longer. Retail footage is processed and stored on the Australian master-server stack, not a home box.

For an erasure request through support, use the privacy contact below. An authorised operator uses the protected account service to erase the saved address from every site the customer owner can access, with retries and a deletion audit that does not contain the address. The broader planned account-deletion workflow is described at Delete your account; it is not connected in this scaffold. The approved broader workflow will revoke access promptly and normally remove ordinary active-system account data within 30 days, subject to stated legal or evidence obligations and backup expiry.

For access, correction, complaints, deletion or privacy questions, email steve@pennywiseit.com.au.

Publication gate: Penny Wise I.T must approve the privacy wording and confirm the live subprocessors, processing locations and commissioned retention before this draft becomes the production policy.