Effective 25 April 2026
This Privacy Policy explains how Coruscant (“we”) handles personal information when you use Taiao Ora. We aim to collect only what we need, keep it secure, and be straightforward about how it is used.
1. Information we collect
- Account data: name, email, organisation, and authentication identifiers.
- Subscription & billing data: plan, module selections, property count, billing status. Card data is handled directly by our payment processor; we never store full card numbers.
- Property & environment data: metrics you or your devices submit (e.g. energy, water, temperature, humidity, air quality), property labels, and alerts.
- Usage & device data: log data, IP address, language, browser, and basic interaction events.
2. How we use information
- Provide, secure, and improve the Service;
- Process subscriptions, trials, renewals, and refunds;
- Generate dashboards, alerts, and AI-assisted summaries;
- Communicate with you about your account or material changes;
- Comply with legal obligations and prevent abuse.
3. Legal bases (where applicable)
Where the GDPR or similar laws apply, we rely on: contract (to provide the Service), legitimate interests (security, product improvement), consent (optional communications), and legal obligation (e.g. tax, fraud prevention).
4. Sharing
We share personal information only with vetted processors who help us run the Service — including hosting, database, authentication, payment, email, and AI infrastructure providers. They are contractually required to protect your data and use it only for the purposes we specify. We do not sell personal data.
5. International transfers
Your data may be processed in countries outside your own. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.
6. Retention
We retain personal data while your account is active and for a reasonable period afterwards to satisfy legal, accounting, and security obligations. You can request deletion at any time, subject to those obligations.
7. Your rights
Depending on where you live, you may have rights to access, correct, port, restrict or delete your personal data, and to object to certain processing. To exercise these rights, contact mahi@coruscant.ch. You may also lodge a complaint with your local data-protection authority.
8. Cookies & local storage
We use a small number of strictly necessary cookies and browser storage items (for authentication, preferences such as language, and basic analytics). You can clear them via your browser settings; some features may not work without them.
9. Children
The Service is not directed to children under 16, and we do not knowingly collect personal data from them.
10. Changes
We may update this Policy as the Service evolves. Material changes will be highlighted in-app or by email.
11. Contact
For privacy questions or requests, contact mahi@coruscant.ch.