Privacy Policy

Our Privacy Mission

We are sensitive to the private nature of the information you, our service providers, partners, end-users and prospective end-user customers provide to us. Our Privacy Policy is designed to maximize your ability to protect your personal, private data while at the same time allowing us to provide you with the best back-office platform for security and automation providers possible. This Privacy Policy states our privacy practices for your use of (i) this website and any mobile sites or applications operated by SecurityTrax LLC (“SecurityTrax”) that post a link to this Privacy Policy (the “User Interfaces”); and (ii) any combination of products and services we provide or that can be purchased or accessed via any User Interface (the “Services”).If you reside in California, please also see the section below called California Consumer Privacy Act (CCPA) Rights.

If you are a customer of a security or automation provider who uses the SecurityTrax Services, your information will be processed by SecurityTrax acting as a data processor and your provider will remain responsible for the handling of any personal information it collects from you and for compliance with any applicable data protection and/or privacy laws. Please read the Privacy Policy carefully.

Information Collection and Use

SecurityTrax collects and stores certain information from or about you that can be used to uniquely contact, identify, or locate you (“Personal Information”). When using the User Interfaces, you may provide us with Personal Information including, but not limited to, your name, home or business address, phone number, email address, payment information, location, or zip code. When using our Services, you may provide us with certain additional information (e.g., home or business size and account information) in order for us to personalize your Services. SecurityTrax may receive Personal Information that you have provided to our partners to enable SecurityTrax to provide our Services. SecurityTrax may also receive other information from third parties (for example, if you incur a debt to SecurityTrax, we may conduct a credit check by obtaining additional information about you from a credit bureau, as permitted by law). SecurityTrax may process information regarding your use of the SecurityTrax Services, including but not limited to: demographic and navigation data, transactional information based on your activities on the User Interfaces (such as page views and data manipulation) and other information from your interactions with the User Interfaces and Services. We receive this type of information from your computer or other electronic device through which you may access, browse, download, receive, or otherwise use the SecurityTrax User Interfaces or Services (each a “Personal Device”), and we may also receive and process such information from third parties.

Location-based Information

Some features of our Services (“GeoServices”) use location information. Before certain GeoServices information can be used or collected, you must first opt-in to activate these Services. If you enable these features, we will automatically collect and store location information from your Personal Device or vehicle you designate which is capable of producing location data (e.g., mobile device, GPS device, or vehicle). This location information may include your current location or places you have recently visited. We also may aggregate this information, but this information will only be used for SecurityTrax’s internal purposes and to provide information requested by you. If you do not wish for us to collect and store this information, do not enable these features.

Information Sharing

SecurityTrax will not disclose your Personal Information to any other entity except:

• to members of the SecurityTrax corporate family, including Alarm.com Incorporated;
• as is necessary to provide the SecurityTrax User Interfaces and Services to you;
• when you have opted in to share the information;
• when we need to share the information with an entity who works on our behalf to provide the Services (these entities do not have any right to use the Personal Information beyond what is necessary for the purpose of fulfilling the agreement we have with them);
• if you are an existing end-user customer, to provide notifications of additional SecurityTrax-supported products or Services that may be of interest to you;
• as necessary in connection with other lawful business purposes; and
• as otherwise necessary when required or permitted by law.

In addition, we may disclose your information when the information has been converted to a form that cannot be used to identify you. It may also be necessary for us to disclose your Personal Information in case of a merger or combination with, or acquisition of a portion of its business by, another company or entity, in which case Personal Information collected by SecurityTrax would be expected to be one of the transferred business assets. Information Protection SecurityTrax has security measures in place to protect against the loss, misuse, and alteration of your information. For example, we protect your information through a unique username and password, and we protect certain sensitive communications with our website through server authentication and secure connections. However, no method of data transmission is completely secure.

Rights and Choices Regarding Your Personal Information

If you are an existing or potential end-user of SecurityTrax Services and have entered Personal Information directly through our website, you may request to correct or delete your Personal Information by contacting us at privacy@securitytrax.com. If you are an existing end-user of Services you may view, update, or delete your Personal Information at any time by logging in and navigating to the ’My Account’ page. These changes will be immediately made to our records. If you wish to stop notifications, you may do so through the User Interfaces.

California Consumer Privacy Act (CCPA) Rights

If you are a California resident, then the CCPA may provide you with specific rights regarding your Personal Information. You have the right to request that businesses subject to the CCPA (which may include your security or automation provider), disclose certain information to you about their collection and use of your Personal Information over the past 12 months. In addition, you have the right to ask such businesses to delete personal information collected for you, subject to certain exceptions. You may ask a business to limit its use of your sensitive Personal Information (e.g., biometric information or ethnicity), but know that SecurityTrax doesn’t use your sensitive Personal Information in a manner subject to that right. If you choose to exercise your rights, you also have the right not to be discriminated against and will not be charged different prices or provided different quality of services.

End Users of the Services

For end-users of SecurityTrax Services, SecurityTrax acts as a “service provider” under the CCPA and our receipt and collection of any consumer Personal Information is done on behalf of our business partners and customers (such as security and automation providers) in order for us to provide the Services. We do not sell Personal Information to third parties. We do allow third parties to collect Personal Information through our Services and share Personal Information with third parties for the business purposes described in this Privacy Policy.

You can exercise your applicable CCPA rights by following the procedures listed for “All Existing or Potential End-Users” above, contacting your security or automation provider or contacting us at privacy@securitytrax.com. If you contact SecurityTrax directly, we may forward your request to your security or automation provider. Please note that the CCPA requires us to verify the requests we receive from you when you exercise certain of the rights listed above. We may need more information when we receive your request before taking further action.

Business Contacts and Website Visitors

Sometimes we collect Personal Information when you’re acting on behalf of a company (e.g., as an employee, agent, or contractor) or otherwise interact with SecurityTrax directly (e.g., visiting the SecurityTrax website outside of receiving Services from us). Some of the rights described in this section do not apply until January 1, 2023.

Information we collect from consumers (Categories, Purposes, Sources)

We collect these categories of Personal Information:

• Identifiers – such as name, postal address, email address, or account name.
• Unique and online identifiers – such as internet protocol address or device IDs.
• Commercial information – such as records of products or services purchased.
• Demographic information – such as gender, age, income levels, and language preferences.
• Internet or other electronic network activity information – such as browsing history, search history and information regarding an individual’s interaction with an internet website, application, or advertisement.
• Professional or educational information.
• Location information.
• Online viewing activities (e.g., videos viewed, pages viewed).
• Inferences, such as preferences and behaviors.

We collect the above categories of Personal Information for the following purposes:

• Performing our Services.
• Auditing customer transactions.
• Fraud prevention and authentication/ID verification.
• Debugging errors in systems.
• Marketing and advertising.
• Internal research, analytics and development – e.g., user-preference analytics.
• Developing, maintaining, provisioning or upgrading networks, services or devices.

We collect the above categories of Personal Information from the following sources:

• Directly from you.
• Automatically-generated information – such as technical, equipment and usage information.
• Your employer.
• From other companies, such as marketing services.

We retain the Personal Information that we collect to achieve the purposes for which the Personal Information was collected. In certain cases, we may need to retain Personal Information for purposes required under applicable law, for tax, accounting, or audit purposes, or for other purposes permitted or required under law.

Disclosures of Personal Information

We may have disclosed each of the above categories of Personal Information with the following categories of third parties who perform services on our behalf:

• Product and services delivery companies.
• Marketing services companies.
• Cloud storage companies.
• Credit reporting agencies.
• Billing and payment processing companies.
• Fraud prevention and authentication/identity verification entities.
• Analytics companies.

We may allow certain third parties (such as online advertising services) to collect your Personal Information via automated technologies. We share the categories of Personal Information listed below for the business and commercial purposes of online advertising and to provide third-party social network features and functionality.

You have the right to opt out of this disclosure of your information, which may be considered a “sale” or “sharing” under California law. Beginning in January 2023, you may opt out of “sharing” or “selling” by setting a browser-level opt-out, the Global Privacy Control, sent by California consumers. You may learn how to set that signal by going to this website: https://globalprivacycontrol.org/.

As described above, we do not directly disclose your Personal Information with third parties for monetary consideration. Our “selling” or “sharing” is instead confined to the context of online tracking, and so we may have “sold” or “shared” the following categories of Personal Information:

Category of Personal Information	Category of Third Party
Identifiers	Advertising networks, data analytics providers, social networks
Commercial Information	Advertising networks, data analytics providers, social networks
Online Activity	Advertising networks, data analytics providers, social networks

We do not knowingly sell or share the Personal Information of minors under 16 years of age.

How to exercise your CCPA rights

You can exercise any of your CCPA rights described in this section by contacting us at privacy@securitytrax.com. We may need to collect additional information about your previous interactions with SecurityTrax to verify your identity. You may designate an authorized agent to submit requests on your behalf. To submit a request as an authorized agent on behalf of a consumer, please contact us at privacy@securitytrax.com

Virginia Residents Only

Under Virginia’s privacy law, the Virginia Consumer Data Protection Act, SecurityTrax acts as a data processor and your Authorized Service Provider will remain responsible for the handling of any Personal Information your Authorized Service Provider collects from you. You should refer to your Authorized Service Provider’s privacy notice for more information on your Authorized Service Provider’s privacy practices or to exercise a right under the Virginia Consumer Data Protection Act.

Cookies, Web Beacons and Website Analytics

When you use the User Interfaces or access SecurityTrax Services using your Personal Device, certain information may be collected by automated means, such as cookies. Information about SecurityTrax’s use of cookies can be found in our Cookie Policy.

Third Party Websites

For your convenience, some hyperlinks may be posted on the SecurityTrax website that link to other websites not under SecurityTrax’s control. SecurityTrax is not responsible for, and this Privacy Policy does not apply to, the privacy practices of those sites or of any companies that SecurityTrax does not own or control. SecurityTrax does not endorse any of these websites or pages, the services or products described or offered on such sites or pages, or any of the content contained on those sites or pages. SecurityTrax encourages you to seek out and read the privacy policy of each website that you visit. In addition, should you happen to initiate a transaction on a website linked to the SecurityTrax website, even if you reached that site through the SecurityTrax User Interfaces, the information that you submit to complete that transaction becomes subject to the privacy practices of the operator of that linked website. You should read that website’s privacy policies to understand how Personal Information that is collected about you is used and protected.

Utilizing our User Interfaces from Outside of the United States

If you are utilizing our User Interfaces from outside the United States, please be aware that your information may be transferred to, stored or processed in the United States, where our servers are located and our central database is operated. The data protection and other laws of the United States and other countries might not be as comprehensive as those in your country, but please be assured that we take steps to protect your privacy.

Privacy Policy Changes

We may change this Privacy Policy at any time. Any changes to this Privacy Policy will be posted on our User Interfaces. The most recent version of this Privacy Policy is reflected by the version date located below. This Privacy Policy is not intended to and does not create any contractual or other legal right in or on behalf of any party.

California and Delaware Do Not Track Disclosures

SecurityTrax responds to the Global Privacy Control, as described above. With respect to a different preference signal called Do Not Track browser requests, SecurityTrax adheres to the standards set out in this Privacy Policy and does not monitor or follow any Do Not Track browser requests.

Contact Information

If you have any questions, concerns, or suggestions regarding this Privacy Policy, please contact us at:

privacy@securitytrax.com

or

SecurityTrax LLC – Privacy
8281 Greensboro Drive, Suite 100
Tysons, Virginia 22102
USA

Last updated: December 31, 2022