Privacy Policy

1. Who we are

is the operator of GuardianX ("we", "us"). For device-holder data collected on behalf of a Customer (parent or employer), that Customer acts as the data controller; we act as data processor, except where noted below.

2. What we collect

• Account data: administrator name, email, organization details.
• Device data: device model, enrollment status, integrity signals, policy compliance status.
• Authorized location data, only when enabled by the Customer's policy.
• Audit data: sign-ins, configuration changes, exports.
• Billing data processed by Creem.io on our behalf (we do not store full payment card numbers).

We do not collect credentials (passwords, payment card numbers) from monitored devices, and we do not operate covertly.

3. Legal basis

Where GDPR or similar law applies, we (or the Customer as controller) rely on: contractual necessity (providing the Service), legitimate interest (security, integrity verification), consent (where required, e.g. certain location or notification features), and legal obligation (e.g. record-keeping).

4. How we use data

To provide, secure and improve the Service; to detect abuse contrary to our Responsible Use Policy; to provide support; and to comply with legal obligations.

5. Sharing with third parties

• Cloud infrastructure providers — hosting and storage, acting as sub-processors under contract.
• Creem.io — payment processing and invoicing as Merchant of Record; receives billing data necessary to process your purchase.
• We do not sell personal data.

6. International transfers

7. Retention

Data is retained according to the retention period configured by the Customer's policy (from 30 days up to 2 years), and deleted automatically once that period expires, subject to legal hold requirements.

8. Your rights

Subject to applicable law, you may request access, correction, deletion, or export of your personal data, and may object to or restrict certain processing. Where a Customer (parent/employer) is the controller, requests regarding monitored-device data should first be directed to that Customer; we will assist as processor.

9. Children's data

GuardianX may process data about a minor when used by a parent or legal guardian for parental device management. In that context, the parent/guardian is the data controller responsible for the child's data and for complying with applicable children's-privacy law.

10. Security

See our Security page for technical and organizational measures, including encryption, access control and audit logging.

11. Cookies on this website

This marketing website does not use advertising or tracking cookies. Only strictly necessary, session-based technical storage (if any) is used.

12. Changes

We may update this Privacy Policy; material changes will be notified through the dashboard or by email before taking effect.

13. Contact

Privacy requests: see our Contact page.