Triton Cloud Privacy Policy

Last Updated: July 27, 2026

Welcome to Cloud.tritonsensors.com and the Triton Cloud application (the “App”) operated by Triton Sensors LLC (“Triton Sensors” or the “Company”).

The following Triton Cloud Privacy Policy applies when you use the Cloud.tritonsensors.com website or the App (collectively, the “Site”).

The Site provides the Service as explained in our Terms of Use.

We respect and protect the privacy of our Site users. This Triton Cloud Privacy Policy (“Policy”) explains how we collect and use your information when you use our Site and is incorporated by reference to our Triton Cloud Terms of Use at https://www.tritonsensors.com/cloud-terms.

Your Consent

By using our Site, you consent to this Policy and Terms of Use. If you don’t agree, please don’t use our Site.

Definitions

California Privacy Laws

“California Privacy Laws” refers to the California Consumer Privacy Act (CCPA) of 2018, as amended by the California Privacy Rights Act of 2020.

Company

“Company” means Triton Sensors LLC at 6426 Farmcrest Lane, Harrisburg, PA 17111.

Customer

“Customer” means the K-12 or higher education institution that has purchased the Cloud devices and corresponding App for use in their educational programs and buildings.

Data Controller

“Data Controller” means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data are, or are to be, processed. The Company is the Data Controller for the personal data you submit via the Site.

Data Processor

“Data Processor” means any natural or legal person who processes the data on behalf of the Data Controller.

The Company is a Data Processor when it receives information from our Customers. In these scenarios, the Customer is the Controller, and you may make your requests and inquiries directly to the applicable Customer. If you have comments, questions, or concerns about the privacy practices of a Customer, you should review the Customer’s privacy policy or contact them directly.

Data Subject

Data Subject is any living individual who is using our Site.

GDPR

“GDPR” means Regulation (EU) 2016/679 (General Data Protection Regulation) in the European Union (EU) and European Economic Area (EEA); and the UK General Data Protection Regulation together with the Data Protection Act 2018 and the Data (Use and Access) Act in the United Kingdom (UK).

Personal Data

“Personal Data” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular Data Subject, consumer, or household.

Principles for Processing Personal Data

Our principles for processing personal data under the GDPR are:

• Fairness and lawfulness. When we process personal data, the individual rights of the Data Subjects must be protected. All personal data must be collected and processed in a legal and fair manner.
• Restricted to a specific purpose. The personal data of Data Subject must be processed only for specific purposes.
• Transparency. The Data Subject must be informed of how his/her data is being collected, processed and used.
• Accuracy.We take reasonable steps to ensure that personal data will be accurate, and that any mistakes are rectified or erased without delay.
• Storage Limitation.We will not keep personal data for longer than we need it to fulfill the business purpose for which it was collected (however, we may keep anonymized data for an indefinite term).
• Confidentiality and Integrity.We use appropriate technical, physical, and organizational security measures to maintain the confidentiality and integrity of personal data.

What information do we collect?

When you register for the Service, you’ll be asked to provide certain information about yourself, and your organization, such as your name, company or school name, phone number, and email. This may be considered personal data.

We and our third-party service providers may collect certain information about your use of our Site. For example, we may collect and/or use:

• Account information, such as the email address and/or username in combination with a password or security code used to access your account.
• Log information (including your IP address, browser type, Internet service provider, referring and exit pages, operating system, dates/time of access, and related data)
• Information and data collected by cookies and tracking pixels (as discussed below)
• Information and data collected by web beacons (also called “Internet tags” or “clear gifs”; used to count visitors to our Site and which pages were viewed and links clicked)
• Information and data collected by embedded scripts (code temporarily downloaded onto your device to collect information about your interactions with the Service and thereafter deleted or deactivated)
• Information you provide via Live Chat Support: When you interact with our live chat support feature (provided by Crisp), we and Crisp may collect personal data you voluntarily provide, such as your name, email address, and the content of your chat messages. Crisp may also automatically collect your IP address and use cookies necessary for the chat functionality.
• Information and data collected by security camera systems: Our Customers may provide the Company access to Customers’ security camera systems to use particular features and services in the Site. This access is off by default and must be enabled by Customer-designated administrators. Customers may also choose a standard one-way integration, in which the Site does not ingest video footage. To learn if your employer or your student’s institution has enabled this feature, please review the policies and disclosures of your employer or your student’s institution.

We do not directly collect or store student data or information from individuals under the age of 18. For more information on how your student's information is collected, stored, and disclosed by our Customers, please contact your student’s educational institution directly.

Information Sent by Your Mobile Device

We collect certain information that your mobile device sends when you use our App, like a device identifier, user settings and the operating system of your device, as well as information about your use of our App and Services.

Categories of Personal Data Collected in the Past 12 Months

The tables below show the categories of personal data that we have collected in the past 12 months. Please note that while examples are listed for each category, we do not necessarily collect all of them in every instance.

Where do we store your information?

Your information may be stored in our own servers or in servers owned by third-party cloud storage providers, either of which may be located outside of your jurisdiction. For more information, see the "Do we transfer your data to other countries?” section, below

Third-party storage providers may not use your information except as provided in this Policy.

How do we use your information?

Information we collect from you may be used:

• To verify your identity when you return to the Site.
• To provide you with Services.
• For billing and collection purposes.
• To notify you about changes to our Site and Services.
• To respond to your messages and comments.
• To provide customer support.
• To detect, prevent, and address technical issues.
• To send you technical notices.

Legal Basis for Collecting and Processing Personal Data

Our legal basis for collecting and using the personal data described in this Policy depends on the personal data we collect and the specific context in which we collect the information, including when:

• We need to perform a contract with you.
• You have given us permission to do so.
• Processing your personal data is in our legitimate interests.
• We need to comply with the law.

Please be aware that if you do not provide personal data, we may be unable to provide some Services to you.

Do we use cookies or tracking pixels?

Yes.

Cookies are small files that include an anonymous unique identifier. Cookies let us recognize your browser and remember certain information about you to personalize your experience on our Site.

We also use cookies to compile aggregate data about traffic to our Site so that we can improve our Site.

We may use both persistent and session cookies. Persistent cookies remain on your device after you close your session and until you delete them; session cookies expire when you close your browser.

Cookies may be considered personal data under certain laws.

A tracking pixel is an object embedded in a page that allows us to track your Site visits, advertising impressions, and other types of Internet activity. It’s also sometimes called a web beacon or page tag.

Do we use Google Analytics?

Yes.

Users who visit the Site and have JavaScript enabled are tracked through Google Analytics. Google Analytics collects information anonymously and reports website trends to us without identifying individual visitors. Google Analytics collects a variety of information from users, including the Internet protocol (IP address) that is used to connect your computer to the Internet (which it does not report to us), your Internet service provider (ISP), browser type, type of operating system, the full Uniform Resource Locator (URL) clickstream to, through, and from our Site, including date and time, cookie, the length of time you spend on particular pages, which links you click while on our Site, and similar Site visit information. Google Analytics data is shared with Google.

For more information on Google Analytics or to opt-out of having your information shared through Google Analytics, visit: http://www.google.com/intl/en/analytics/privacyoverview.html.

For more information on Google’s privacy policy, visit http://www.google.com/intl/en/policies/privacy/.

We use this information to make our Site easier to find on the Internet and to improve our Site by learning which pages and features are interesting to our visitors. We treat this information as non-personal data and do not attempt to connect it to personal data, except as otherwise required by law.

Do we use Microsoft Clarity?

Yes.

We use Microsoft Clarity to capture how users interact with our Site through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Site usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for Site optimization, fraud/security purposes, and advertising. For more information about Microsoft Clarity, please visit Microsoft’s Privacy Statement.

Do we transfer your data to other countries?

Yes.

Your data may be transferred and maintained on computers located outside of your state, province, country, or other jurisdiction where the data protection laws may differ. If you are located outside of the United States and choose to provide information to us, note that we transfer the data, including, but not limited to, personal data, to the United States and process it there. Your use of the Site and submission of such information represent your consent to our Terms of Use, Policy, and transfer of personal data. We will take reasonable steps to ensure your personal data is treated securely and is not transferred to an organization or country unless there are reasonable security controls in place.

You may request more information about the safeguards that we have put in place in respect of transfers of personal data by contacting [email protected].

How do we respond to “Do Not Track” signals?

We do not respond to web browser “Do Not Track” or other universal opt-out signals at this time. We will respond to such signals in the future, if and when we are required to do so, and will update this Policy accordingly at that time.

How long do we store your information?

We will retain your personal data only for as long as is necessary for the purposes for which it was collected and as set out in this Policy.

We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

We intend to store some of your information indefinitely.

What about links to other websites?

We may provide links to or compatibility with other websites. However, we’re not responsible for the privacy practices employed by those websites or the information or content they contain. We encourage you to review the privacy policies and terms of use of these third party websites.

How do we protect your information?

We use appropriate technical, physical, and organizational security measures to safeguard and secure the information we collect. However, please be aware that the Internet is an inherently unsafe environment, and that hackers are constantly working to defeat security measures.

Thus, we cannot guarantee that your information will not be accessed, disclosed, altered or destroyed. By using our Site and providing personal data, you acknowledge and accept this risk.

How can you protect your information?

We urge you to take steps to keep your personal data safe by not sharing it with others or posting it online. Where we have given you or you have chosen a password, you must keep it confidential and not share it with anyone else for any reason.

Do we disclose any information to outside parties?

We do not sell, trade, or otherwise transfer to outside parties your personal data for commercial purposes.

We may share your personal data with third-party processors for business purposes, which can include:

• Payment processors
• Providers of email management and distribution tools
• Providers of security and fraud prevention services
• Providers of data aggregation and analytics software
• Customer service platforms

These third-party processors are subject to confidentiality obligations as outlined in our contractual agreements with them. In some circumstances, we may “sell” your personal data as that term is defined under California Privacy Laws.

We will, if required by a valid court order, provide your personal data in a civil or criminal proceeding.

Information Disclosed in Connection with Merger, Acquisition, or Asset Sale Transactions. If we are acquired by a third party as a result of a transaction such as a merger, acquisition, or asset sale, or if our assets are acquired by a third party in the event we go out of business or enter bankruptcy, some or all of our assets, including your personal data, may be disclosed or transferred to a third-party acquirer in connection with the transaction.

Information Disclosed for Our Protection and the Protection of Others. We cooperate with government and law enforcement officials or private parties to enforce and comply with the law. We may disclose any information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate: (i) to respond to claims and for legal process (including subpoenas); (ii) to protect our property, rights and safety and the property, rights and safety of a third party or the public in general; and (iii) to stop any activity that we consider illegal, unethical or legally actionable activity.

Categories of Data Shared in the Past 12 Months

In the past 12 months, we have disclosed or sold the categories of personal data shown in the table below.

Sub-processors

The Company works with certain third parties to provide specific functionality within the Site.

By using the Site, you also authorize the engagement of these third parties as sub-processors of your data.

If you object to the sub-processors’ handling of your data on the terms indicated at the links, please terminate your use of the Site.

We may update our list of sub-processors at any time and without prior notice.

Not Intended for Children

Our Site is not intended for children under the age of 18. We do not knowingly or collect information from or about children under the age of 18.

Your Rights Under European Law

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. If you wish to be informed what personal data we hold about you and if you want it to be removed from our systems, please contact us at [email protected].

In certain circumstances, you have the following data protection rights:

• The right to be informed of your rights
• The right to access, update or to delete the information we have on you
• The right of rectification (to correct mistakes)
• The right to erasure (known as “the right to be forgotten”)
• The right to restrict processing of your data
• The right to data portability
• The right to withdraw consent

If you are resident in the European Economic Area and you believe we are unlawfully processing your personal data, you also have the right to complain to your local data protection supervisory authority. You can find their contact details here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.html.

Your Rights Under California Privacy Laws

If you are a California resident, you may have additional privacy rights under California Privacy Laws, such as:

The Right to Know and to Confirm, and the Right to Data Portability

You have the right to request that we disclose certain information to you about our collection and use of your personal data over the past 12 months (the “right to know” and the “right to confirm”). Once we receive your request and confirm your identity, we will disclose to you:

• The categories of personal data that we collected about you.
• The categories of sources for the personal data we collected about you.
• Our business or commercial purpose for collecting or selling that personal data.
• The categories of third parties with whom we share that personal data.
• If we sold or disclosed your personal data for a business purpose, two separate lists disclosing:
• Sales, identifying the personal data categories that each category of recipient purchased; and
• Disclosures for a business purpose, identifying the personal data categories that each category of recipient obtained.
• The specific pieces of personal data we collected about you (also called a “data portability” request).
• If you submit a data portability request, we will provide you with a copy of your personal data in a common and portable format that you may transfer to another organization of your choosing.

The Right to Delete

You have the right to request that we delete any of your personal data that we collected from you and retained, subject to certain exceptions (the "right to delete"). Once we receive your request and confirm your identity, we will review your request to see if an exception allowing us to retain the information applies. We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

• Complete the transaction for which we collected the personal data, provide a service that you requested, take actions reasonably anticipated within the context of our ongoing relationship with you, or otherwise perform our contract with you.
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
• Debug products to identify and repair errors that impair existing intended functionality.
• Exercise free speech, ensure the right of another individual to exercise their free speech rights, or exercise another right provided for by law.
• Comply with specific laws, such as the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
• Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us.
• Comply with a legal obligation.
• Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

We will delete or deidentify personal data not subject to one of these exceptions from our records and will direct our Service Providers to take similar action.

The Right to Correct Inaccurate Personal Data

You have the right to correct any inaccurate personal data about you that we have in our possession (the “right to correct”). Once we receive your request and confirm your identity, we will disclose to you the specific pieces of personal data that we have collected about you. You will then have the opportunity to direct us to correct the pieces of information which you believe are inaccurate.

We may deny your request to correct if we believe the updated personal data is incorrect or is being used for any fraudulent or deceptive purpose.

The Right to Restrict Sensitive Personal Data Processing

You have the right to restrict our processing of your sensitive personal data (the “right to restrict”). Once we receive your request and verify your identity, we will cease the processing of your sensitive personal data for the purpose of inferring characteristics about you. Please note that we may continue to process your sensitive personal data for other purposes consistent with this Policy.

The Right to Opt Out of the Processing and Sale of Personal Data

You have the right to direct us not to process your personal data for targeted advertising and not to sell your personal data at any time (the "right to opt-out"). Once we receive your request, we will no longer use or process your personal data for the purpose of providing targeted advertising to you based on your activity and interests. We will also no longer sell (as that term is defined by relevant and applicable state law) your personal data to third parties for targeted advertising purposes.

The Right to Opt Out of the Sharing of Personal Data for Cross-Contextual Behavioral Advertising

You have the right to opt out of the sharing of your personal Data with third parties for cross-contextual behavioral advertising. Once we receive your request, we will no longer use or process your personal data for the purpose of advertising to you based on your individual activity.

The Right to Opt Out of Profiling

You have the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects to you. Once we receive your request, we will no longer use or process your personal data for making decisions that produce a legal or similarly significant effect to you.

The Right to Be Free from Discrimination

We will not discriminate against you for exercising any of your rights under applicable state privacy laws. Unless permitted by state law, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you with a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

However, we may offer you certain financial incentives permitted by state privacy law that can resultin different prices, rates, or quality levels. This may include loyalty and rewards programs. Any legally permitted financial incentive we offer will reasonably relate to your personal data’s value and will contain written terms that describe the program's material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.

Exercising Your Privacy Rights

To exercise your privacy rights, please email your request to [email protected] or mail us at Triton Sensors LLC, ATTN: Legal Department, 6426 Farmcrest Lane, Harrisburg, PA 17111.

Only you or someone legally authorized to act on your behalf may make a request related to your personal data. You may only submit a request twice within a 12-month period.

Your request must:

• Provide sufficient information that allows us to reasonably verify you are the person

about whom we collected personal data or an authorized representative, which may include:

• Providing at least three (3) pieces of information that match the information we have about you.
• Providing a signed declaration, under penalty of perjury, that you are the individual about whom you have submitted the request, or that you are legally authorized to submit the request on the individual’s behalf.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal data if we cannot verify your identity or authority to make the request and confirm that the personal data relates to you. We will only use the personal data provided in the request to verify the requester's identity or authority to make it.

You may appeal a decision concerning your privacy rights by contacting us at:

• [email protected] or
• Triton Sensors LLC, ATTN: Legal Department, 6426 Farmcrest Lane, Harrisburg, PA 17111.

Response Timing and Format

We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please email [email protected].

We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing.

Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal data that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Withdrawing Consent

If you wish to withdraw your consent to process your personal data, please contact us at [email protected]. If you withdraw your consent, this will not make processing which we undertook before you withdrew your consent unlawful.

Changes to our Privacy Policy

If we decide to change our Privacy Policy, we will post those changes on this page. We may also, but are not required to, send you an email notice.

Contact Us

If you have questions about our Privacy Policy, please contact us at [email protected].