1. Scope
This policy describes how Remote2You ("we", "us") handles personal information collected through this website (remote2you.com) and through the Remote2You remote support platform (the "Platform"). The Platform is provided only to contracted client organizations ("Clients") under a written agreement. Where a Client's agreement, business associate agreement, or data processing agreement conflicts with this policy, that agreement governs for that Client's data.
2. Information we collect
Website visitors
- Consultation requests: name, role, organization, work email, phone (optional), sector, approximate endpoint count, and any message you provide.
- How the form is handled: a copy of each submission is stored on our own server so a request is never lost. We email the submission to our team and send you one acknowledgement email. Both emails are delivered through a transactional email provider acting on our behalf. We use the submission only to respond to you.
- Technical data: IP address, browser type, and pages visited, as recorded in standard server logs and used for security and reliability. We do not use third-party advertising or behavioral tracking on this website.
Platform users (operators)
- Account details: name, work email, role, organization (tenant), and multi-factor authentication enrollment status.
- Security and audit records: sign-in events, device and browser identifiers used for session binding, session start and end times, actions performed within the Platform, and connection metadata.
Endpoints (devices enrolled by a Client)
- Device identity and connection details: hostname, operating system and version, software version, last-seen time, and the signed-in user name as reported by the device.
- Session traffic: remote sessions are carried over encrypted connections. Do not assume that session content is hidden from the operator of the service.
- Quick Support: a one-time code, the time it was created, used, and expired, and the connection details of the computer that used it.
3. How we use information
- To respond to consultation requests and communicate with prospective and existing Clients.
- To provide, secure, operate, and support the Platform, including authentication, authorization, fraud and abuse prevention, and incident response.
- To produce audit trails required by Clients for their own compliance obligations.
- To meet legal obligations and enforce our agreements.
We do not sell personal information and do not use it for third-party advertising.
4. Platform data and client responsibilities
Within the Platform, each Client controls the devices it enrolls, the users it invites, the policies it configures (including access, remote-session, and security settings), and the notices it provides to its own end users. For data processed on behalf of a Client, the Client is the controller (or covered entity) and Remote2You acts as a processor (or business associate) under the applicable agreement. Clients are responsible for obtaining any consents required from their end users for remote access.
5. Sharing
We share information only with service providers who process it on our behalf under contractual confidentiality and security obligations (for example, infrastructure hosting, DNS, and transactional email delivery), with a Client's own authorized administrators, or where required by law or to protect the rights, safety, and security of our Clients, their users, or the Platform.
6. Retention
| Data | Default retention |
|---|---|
| Consultation requests | 24 months from last contact, unless an engagement follows |
| Operator accounts and audit records | Duration of the Client agreement plus the period required by the Client's compliance obligations |
| Deleted devices | Recoverable for 30 days, then purged |
| Website server logs | 90 days |
7. Security
We apply administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including multi-factor authentication, encryption in transit, separation between client organizations, role-based access, and audit logging. No method of transmission or storage is completely secure; we work continuously to protect information and will notify affected Clients of security incidents as required by law and by our agreements.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal information, to data portability, and to object to certain processing. If you are an end user of a Client, please direct requests to that Client, who controls your data; we will assist them in responding. Otherwise, contact us using the details below. We will not discriminate against you for exercising these rights.
9. International transfers
The Platform is operated from the United States. Where information is transferred from other jurisdictions, we rely on appropriate safeguards such as contractual commitments with Clients and service providers.
10. Changes
We may update this policy from time to time. Material changes will be indicated by a new effective date and, for Clients, communicated through the Platform or by email.
11. Contact
Privacy inquiries: [email protected]
Security reports: see our responsible disclosure policy.