innotech

Privacy

Privacy notice

Last reviewed 12 September 2026.

This site is run by PHITES Embedded R&D On Engineering, which trades as innotech, an engineering practice in Bulacan, Philippines. This page explains what personal data the site handles, why, how long it is kept, and what you can ask us to do with it. Questions go to [email protected].

The contact form

When you send the contact form we collect your name, email address, the company name if you give one, your message, the IP address the form was sent from, and the time. We use it to reply and to keep a record of the enquiry. The message is emailed to us and stored in the site database.

Services accounts

An account is created the first time you sign in with Google or ask for a one-time sign-in link by email, and we can also create one for you directly. However it starts, a new account has no access to any service until we grant it.

An account holds your email address and your name. If you set a password it is stored as an Argon2 hash, never in plain text; an account that only ever signs in with Google or an email link has a random placeholder instead, which nobody sees. You may add a profile photo, either one you upload or the picture from your Google account. If you turn on two-factor authentication we store the authenticator secret and your backup codes.

Every sign-in and sign-out records the date, the method used, the IP address, and a short description of the browser. You can see this list on your account page. These rows are deleted after 90 days.

While you stay signed in, we also keep one record per active browser or device, holding the last IP address and browser we saw it use and when. Your account page lists these so you can sign a device out. A record is removed when you sign that device out, when you change your password, or once its sign-in has expired.

Using a service

  • SMS. The messages you send, including their full text, and the recipient numbers are stored for as long as the account exists, so the console can show delivery status and history. Messages are also passed to a third-party SMS provider that is registered in the Philippines and NTC-approved, for delivery under your approved sender name over the Globe, Smart, and DITO networks.
  • LoRaWAN Network Server. We create a tenant for you on our ChirpStack server. Your devices, gateways, and their traffic are held there under that tenant.
  • Time-series data. We keep your device readings in a private database on our own infrastructure, under your LoRaWAN tenant, for as long as the service is on your account. You also get a Grafana login on our server, which stores your email address, the dashboards you build and any Grafana accounts you add. A dashboard you choose to share by public link can be seen by anyone who has the link. When the service is removed, the database is kept for 7 days and then deleted.
  • Firmware updates. We store the firmware images you upload. Records of devices fetching an image are kept for 14 days.
  • IoT Dashboard. We create a tenant for you on our own IoT Dashboard server, run on our infrastructure rather than a third party's. Your devices, dashboards, and their telemetry are held there under that tenant for as long as the account exists.

Free trials

If you have ever started a free trial of a service, we keep a record of the email address and which service, with no expiry. This is so the same address cannot start that trial again after an account is deleted. It is the only account data that is not removed when an account is deleted.

Collected automatically

The web server keeps standard logs of requests, which include the IP address, the page requested, the browser, and the time. Cloudflare sits in front of the site to keep it available and to block abuse. It also logs requests and may set its own operational cookies.

Livechat

Our marketing pages load a livechat widget from Tawk.to, which sees your IP address, browser details, and the pages you have viewed on the site. If you use it to chat with us, it also stores the conversation, and any name or email address you give it. The console (where you sign in and manage a service) does not carry this widget. See Tawk.to's own privacy policy for how they handle it.

Cookies

After you sign in, the site sets one cookie so it can keep you signed in. There are no advertising or analytics cookies. Cloudflare may set cookies that are needed to run the site securely, and the livechat widget on our marketing pages sets its own cookies to recognise you across a visit.

Who else can see it

We do not sell personal data. We use these providers to run the site, and each sees only what it needs to do its job:

  • Cloudflare, for the network in front of the site and for protection.
  • A third-party hosting and email provider.
  • A Philippine-registered, NTC-approved SMS provider, for message delivery, only if you use the SMS service.
  • Google, only if you choose to sign in with Google.
  • Tawk.to, for the livechat widget on our marketing pages.

Your rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173) you can ask to be informed about the data we hold, get a copy of it, have it corrected, object to how it is used, and have it deleted or blocked. You can also be told if a breach puts your data at risk. To make any of these requests, email [email protected]. We answer within the period the law allows.

Deleting your account removes your account data and the data your services hold, apart from the free-trial record described above and anything a law requires us to keep.

If you think we have mishandled your data, you can raise it with us first, and you can lodge a complaint with the National Privacy Commission at privacy.gov.ph.

Changes

If this notice changes we will update this page and the date at the top.