Privacy policy

1. Who processes the data

The data is processed by the Barnex seller. Its name and details are on the invoice we send after the order is confirmed. Contact for data questions: hello@barnex.io.

2. What we collect

Site forms (order, installer request): name, phone, email, city or Nova Poshta branch, number of systems, your comment and traffic source tags (UTM).

Portal account at my.barnex.io: email, name, role; the password is stored only as a hash.

Device data: MAC address, firmware version, readings (power, voltage, battery level, states), event log, settings and problem reports with your text.

Telegram: chat ID and name, only if you connected the bot yourself.

Technical data: IP address and request times in server logs; site analytics (Google Analytics and, when enabled, the Meta pixel).

3. Why and on what basis

To contact you about the order, ship the device, provide the portal and alerts, support you, improve the product and keep records as the law requires.

Basis: your consent (forms), performance of a contract (order, portal), legitimate interest (security and logs).

4. Who receives it

Providers the service cannot work without: hosting, email delivery, Nova Poshta (recipient data for shipping), the payment provider (to pay the invoice), Telegram (alerts, if you connected the bot). Analytics (Google, Meta) receive anonymised visit events. We do not sell data.

5. The installer and your data

If an installer set up the device, they can see its state and settings and help with support. The client sees who it is in the portal and can withdraw access with the "Revoke access" button.

6. How long we keep it

Account and device data: while the account is active and 12 months after. Form requests: up to 24 months. Server logs: up to 90 days. Accounting documents: as the law requires.

7. Your rights

You can ask to see, correct, delete or restrict the processing of your data, or withdraw consent: hello@barnex.io. We reply within 30 days. You can complain to the Ukrainian Parliament Commissioner for Human Rights.

8. Security, minors, changes

We use encrypted connections (TLS), mutual device authentication, role-based access and backups. The service is not intended for people under 18. The current version of this policy is always on this page.