Privacy Policy for Econex SD

Last updated: October 2025

1. Introduction

Econex AS (“we”, “our”, or “us”) operates the Econex SD mobile application and web platform (collectively, “Econex SD” or “the Service”).

This Privacy Policy explains how we collect, use, and protect information when you use our app or related services.
We take your privacy seriously and comply with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act.

2. About Econex SD

Econex SD is a building management and energy analytics system designed for professional customers.
The system allows users to monitor and control lighting, heating, ventilation, and energy systems, including solar production, within their buildings.

The Econex SD app is intended only for registered customers with access to one or more buildings connected to the Econex SD platform.

3. Information We Collect

We collect only the minimum data required to provide secure access and deliver our services.

a. Account Information

When your organization is registered, we store:

• Name and email of authorized users

• Associated organization and building access rights

We do not collect payment data or personal addresses.

b. Authentication Data

When you sign in, we issue a secure JSON Web Token (JWT) that verifies your identity and permissions.
This token expires automatically after a limited period and is not shared with any third parties.

c. Building and Sensor Data

Econex SD processes technical data from your building’s automation system, such as:

• Energy consumption and solar production

• Temperature, CO₂, and other environmental readings

• Device states (lighting, heating, ventilation, etc.)

This data is tied to the building installation — not to individual persons.

d. Analytics and Diagnostics

We may collect anonymous usage logs for performance monitoring, bug fixing, and to improve the user experience.

4. How We Use Your Information

We use collected data for the following purposes:

• To authenticate users and secure access to the system

• To display and analyze building performance data

• To enable control of lighting, heating, and ventilation

• To provide customer support and technical maintenance

• To comply with legal obligations if required by authorities

We do not sell, rent, or otherwise share user data for marketing purposes.

5. Data Storage and Retention

All data is securely stored in EU-based data centers using encrypted connections and role-based access controls.
Technical data (sensor readings, logs, analytics) is typically retained for up to 12 months, unless otherwise agreed with the customer.

User account data is retained only as long as necessary to maintain your active organization account.

6. Data Security

Econex SD uses Cloudflare Zero Trust, TLS encryption, and JWT authentication to ensure secure data transfer and access.
Access to sensitive data is restricted to authorized personnel under strict confidentiality agreements.

7. Data Sharing

We do not share your personal or technical data with third parties, except:

• When required by law or court order

• When using trusted infrastructure providers (e.g., Cloudflare, Supabase) under GDPR-compliant Data Processing Agreements (DPAs)

8. Your Rights

You have the right to:

• Access a copy of your personal data

• Request correction or deletion of inaccurate data

• Withdraw consent for data processing (where applicable)

• File a complaint with the Norwegian Data Protection Authority (Datatilsynet)

Requests can be sent to: post@econex.no

9. Children’s Privacy

Econex SD is not intended for individuals under the age of 16.
We do not knowingly collect personal information from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time.
All changes will be published at https://econex.no/privacy, and the date at the top of this page will be updated accordingly.

11. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Econex AS
Org.nr: [Insert organization number]
Email: [post@econex.no]
Website: https://econex.no