Privacy policy

Who we are

URMS (Universal Remote Management System) is operated by Universal Telematics Solutions Corp., 8457 Newman Blvd, Suite 272, LaSalle, Quebec H8N 0A2, Canada ("we", "us"). We follow the Personal Information Protection and Electronic Documents Act (PIPEDA) and, for people in Quebec, the Act respecting the protection of personal information in the private sector as amended by Law 25.

The person in charge of the protection of personal information is Alex Sergeev, CTO. You can reach them at info@urms.cloud with "Privacy" in the subject.

Two roles

Our own customers. For the people who use the URMS console (our customers and their staff), we decide why and how their information is used.

Your subscribers and end users. Routers managed through URMS can report information about the people and devices behind them. For that information, our customer is responsible for it and we process it only on their behalf and on their instructions, to provide the service.

What we collect

• Account information: name, work email address, company, role in the sandbox, and a hashed password.
• Router data sent by your devices: model, serial number, firmware, IP addresses, uptime, Wi-Fi network names and settings (including Wi-Fi passwords, which routers report), and the list of connected devices with their names, MAC and IP addresses.
• Data you enter: client names, contact details and notes, notification settings such as webhook URLs and Telegram chat IDs.
• Security records: the audit log of actions in the console, and IP addresses used to limit repeated sign-in attempts.
• This website: it uses no analytics, no tracking and no cookies. Choosing a light or dark theme is stored in your own browser only.

Why we use it

• To provide the service: show router status, run the commands you ask for, and send the alerts you configure.
• To secure the service: authenticate users and routers, prevent abuse and investigate incidents.
• To communicate with you about your account, early access and important changes.

We don't sell personal information, use it for advertising, or use your router data for anything other than providing the service to you.

Consent

By creating an account you consent to the uses above for your account information. Our customers are responsible for having a valid basis, such as notice to or consent from their subscribers, for the router data they manage through URMS. You can withdraw consent at any time by closing your account, subject to legal or contractual limits.

Where it's stored

The platform and its backups are hosted in Quebec, Canada. If we ever need to store or process personal information outside Quebec or Canada, we will assess the privacy impact first, as Law 25 requires, and update this policy.

Service providers

• OVHcloud, server hosting in Canada.
• Telegram, only if you set up a Telegram alert channel; the alert text is then sent to the bot and chat you chose.
• Any webhook URL you configure receives the event data you choose to send there.

How long we keep it

• Router status history: 35 days.
• Backups: 7 days.
• Account and sandbox data: while your account is active. After you close it we delete your sandbox, and backups containing it expire within 7 days.
• Audit and security records: 12 months.

How we protect it

Each customer's sandbox is isolated, router secrets are encrypted at rest, access is limited by role and logged, and all traffic to the console is encrypted. Details are on our security page.

Confidentiality incidents

If an incident creates a risk of serious injury, we will notify the people affected and the competent authorities (the Office of the Privacy Commissioner of Canada and, for Quebec, the Commission d'accès à l'information), keep a register of incidents, and inform affected customers without undue delay.

Your rights

You can ask to access, correct or delete your personal information, ask how it's used, withdraw consent, and, where Quebec law applies, ask for your information in a structured, commonly used technological format. We answer within 30 days. If the information belongs to one of our customers' subscribers, we'll pass the request to that customer.

If you're not satisfied with our answer you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.

Changes

We'll post changes here with a new date, and tell account holders by email about significant ones.