Privacy Policy

1. Introduction

Devicely RMM ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Remote Monitoring and Management (RMM) platform and services.

By using Devicely RMM, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Display name
• Password (encrypted)
• Tenant information
• Role and permissions

2.2 Device Information

Our agent collects and transmits the following information from managed devices:

• Device identification (computer name, device ID, MAC address)
• Operating system information (OS name, version, architecture)
• Hardware information (CPU, memory, storage, network adapters)
• Installed software and versions
• Windows updates and security patches
• System configuration and settings
• Performance metrics (CPU, memory, disk usage)
• Network configuration and connectivity status
• Security status (antivirus, firewall, Windows Defender)
• Active Directory and Azure AD/Entra ID integration data

2.3 Usage Data

We collect information about how you use our platform:

• Login timestamps and session information
• Actions performed in the portal (audit logs)
• Remote access session records
• Deployment and command execution logs
• Productivity tracking data (if enabled)

2.4 Integration Data

When you integrate third-party services (e.g., Tenable Nessus), we may collect and store:

• Vulnerability scan results
• API credentials (encrypted)
• Integration configuration data

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide and maintain our RMM services
• To monitor and manage your Windows devices
• To enable software deployment and remote access
• To generate reports and analytics
• To maintain security and prevent fraud
• To comply with legal obligations
• To improve our services and develop new features
• To communicate with you about your account and services

4. Data Security

We implement industry-standard security measures to protect your data:

• End-to-end encryption for data in transit
• Encryption at rest for sensitive data
• Row-Level Security (RLS) for multi-tenant data isolation
• Role-based access control (RBAC)
• Regular security audits and updates
• Secure authentication with 2FA support
• Comprehensive audit logging

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: We may share data with trusted third-party service providers who assist in operating our platform (e.g., cloud hosting, email services), subject to confidentiality agreements.
• Legal Requirements: We may disclose information if required by law, court order, or government regulation.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
• With Your Consent: We may share information with your explicit consent.

6. Multi-Tenant Data Isolation

Devicely RMM is designed for multi-tenant use. Each tenant's data is completely isolated:

• Data is separated at the database level using Row-Level Security policies
• Users can only access data for tenants they belong to
• No cross-tenant data access is permitted
• Complete audit trails ensure data access compliance

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request access to your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal and contractual obligations)
• Portability: Request transfer of your data to another service
• Objection: Object to processing of your data for certain purposes
• Withdrawal of Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at privacy@devicelyrmm.com.

8. Data Retention

We retain your data for as long as necessary to provide our services and comply with legal obligations. When you delete your account or request data deletion, we will delete or anonymize your data within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes.

9. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: privacy@devicelyrmm.com
Support: support@devicelyrmm.com