Legal
Effective: May 3, 2026. Last updated: May 3, 2026.
Overview
Broadwater Systems Group LLC ("BSG", "we", "us", "our") provides industrial sensor monitoring and operational intelligence services. This Privacy Policy describes the personal information we collect, how we use it, who we share it with, and your rights regarding your information. We take privacy seriously because our customers depend on us to handle sensitive operational data with care.
By using BSG services — including our marketing website, customer portal, mobile applications, or SMS notifications — you agree to the practices described in this Policy. If you do not agree, please do not use our services.
Data Collection
Name, email address, phone number
Account credentials (passwords are stored as one-way hashes; we never see your actual password)
Two-factor authentication codes (sent to your email, not stored long-term)
Sensor readings from devices you deploy (temperatures, levels, pressures, etc.)
GPS coordinates of installed sensors
Configuration data (alert thresholds, notification preferences, naming, grouping)
Alert history and acknowledgment records
IP addresses when you access our services
Login timestamps and authentication events
Browser type, operating system, device information for service compatibility
Pages visited and features used within our portal and mobile applications
Contact form submissions including name, email, phone, message content, and source page
SMS interaction history (opt-ins, opt-outs, message delivery status)
Email correspondence with our support team
Use of Data
BSG uses your information solely to provide and improve our services to you and your organization. Specifically:
To deliver sensor monitoring services — process readings, detect threshold violations, route alerts to your designated recipients.
To authenticate and secure access to your account and your operational data.
To send operational notifications via SMS, email, and in-app channels based on your configured preferences.
To respond to your inquiries, support requests, and customer service needs.
To maintain service reliability, including monitoring system performance, debugging issues, and improving infrastructure.
To comply with legal obligations, respond to lawful requests from authorities, and protect the rights and safety of BSG and our users.
Our Commitments
BSG's position on customer data is straightforward: your data is yours. We process it on your behalf to provide our services. We do not exploit it. Specifically, BSG does not:
Sell your personal information or your operational sensor data to any third party, ever, for any purpose.
Share your sensor data with other BSG customers, even in aggregated or anonymized form.
Use your data to train artificial intelligence or machine learning models that benefit other customers or third parties without your explicit consent.
Provide your data to advertisers, data brokers, or marketing companies.
Use your contact information to market services from third parties.
If BSG ever changes any of these positions, we will notify you in advance and give you the opportunity to opt out or terminate service before the change takes effect.
Service Providers
BSG operates with a small number of carefully selected service providers who help us deliver our services. We share only the minimum information necessary for each provider to perform its function, governed by data processing agreements where applicable:
Twilio — delivers SMS notifications to phone numbers you have explicitly opted in. Twilio receives the message content and recipient phone number; they do not have access to your sensor data, account password, or other personal information.
Google Workspace — delivers email notifications and customer service correspondence. Google receives the email content and your email address; they do not have access to your sensor data.
Stripe — processes billing for paid BSG services. Stripe receives payment information you provide directly to them through their secure forms; BSG does not handle or store credit card numbers.
Cloudflare — provides content delivery and DDoS protection for our marketing website. Cloudflare may see IP addresses of website visitors but does not see authenticated portal data.
Hetzner Online GmbH — hosts BSG's portal infrastructure and database in their German data centers. Hetzner provides the underlying servers; they do not have routine access to customer data, which is encrypted and managed by BSG.
Mapbox / Google Maps — renders map visualizations within our portal and mobile apps. These services may see the geographic coordinates of your sensors when displaying them on a map; they do not see other associated data.
ChirpStack — runs as part of BSG's own infrastructure to manage the LoRaWAN network. Customer data does not leave BSG's infrastructure boundary through ChirpStack.
The Campaign Registry (TCR) — verifies BSG's business identity for SMS regulatory compliance. TCR sees BSG's business registration information but does not see customer-level data.
Infrastructure
BSG's primary infrastructure is hosted on Hetzner Online GmbH servers located in Germany. We chose German hosting deliberately. The German Federal Office for Information Security (BSI) actively monitors hosted infrastructure for security compliance issues — when BSG had a brief misconfiguration that exposed open ports, BSI proactively notified Hetzner. This level of regulatory oversight is rare among hosting providers worldwide and benefits BSG's customers through stronger infrastructure security.
All BSG customer data is processed in accordance with applicable US laws and the European Union's General Data Protection Regulation (GDPR), regardless of where you are located. By using BSG services, you consent to the transfer of your information to Germany for processing.
Security
BSG implements industry-standard security practices to protect your information:
Encryption in transit using TLS 1.2 or higher for all communications between your devices and BSG servers.
Encryption at rest for sensitive data in our database, including credentials, authentication tokens, and payment information.
Two-factor authentication for portal access, with email-based one-time passwords.
Strict access controls limiting which BSG personnel can access customer data; access is logged and audited.
Regular security updates and monitoring of all infrastructure components.
Network-level firewalls, intrusion detection, and DDoS protection.
While no system is completely immune to security incidents, BSG commits to maintaining current security practices, promptly addressing identified vulnerabilities, and notifying affected customers in the event of a confirmed data breach.
Your Rights
You have meaningful rights regarding your information. BSG honors the following rights for all customers regardless of geographic location, including rights typically extended only to California residents under the CCPA, EU residents under GDPR, and similar privacy frameworks:
Right to Access — You may request a copy of the personal information BSG holds about you. We will respond within 30 days.
Right to Correction — You may request correction of inaccurate information. You can also update most account information yourself through the portal.
Right to Deletion — You may request deletion of your personal information. Note that BSG must retain certain records for legal, accounting, or operational reasons (such as historical alert logs that are part of your operational record).
Right to Portability — You may request a copy of your data in a machine-readable format suitable for transferring to another service.
Right to Opt-Out of Marketing — You may opt out of any marketing communications at any time. Note: operational notifications about your monitored equipment are not marketing and continue regardless until you disable that notification channel.
Right to Object — You may object to certain types of processing. We will evaluate objections in good faith and either accommodate your request or explain why we cannot.
Right to Non-Discrimination — Exercising any of these rights will not result in BSG terminating your service, charging you different fees, or providing different service quality.
To exercise any of these rights, contact us at [email protected] or by mail at the address listed in our Contact section. Identity verification may be required to protect against fraudulent requests.
SMS Disclosures
BSG sends SMS notifications only to phone numbers that have explicitly opted in through our portal account setup process. By opting in, you consent to receive SMS messages including:
Operational alerts about your monitored equipment (threshold violations, equipment faults, status updates)
Account security notifications (login verification codes when applicable)
Service-related notifications (subscription changes, periodic operational summaries)
Message frequency varies based on your alert configuration, typically ranging from 0 to 30 messages per month. Message and data rates may apply per your carrier plan.
You may opt out at any time by:
Replying STOP, UNSUBSCRIBE, CANCEL, END, or QUIT to any BSG SMS message
Disabling SMS notifications in your portal account settings
Contacting BSG support at [email protected]
Opt-out requests are processed immediately. You will receive a confirmation message and will not receive further SMS until you explicitly opt back in.
Replying HELP to any BSG SMS message returns assistance information including support contact details.
BSG does not send SMS to phone numbers obtained from purchased lists, scraped sources, or third-party data sharing. All SMS communications relate to the recipient's own monitored infrastructure or direct account relationship with BSG.
Minors
BSG services are designed for business and institutional users. We do not knowingly collect personal information from individuals under 18 years of age. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.
Updates
BSG may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The "Last Updated" date at the top of this policy will reflect the date of any change. For material changes, we will notify active customers via email or in-app notification at least 30 days before the change takes effect, providing time to review the change and exercise rights as needed.
Contact
Questions about this Privacy Policy or BSG's data practices? Please contact:
Broadwater Systems Group LLC
Attn: Privacy Inquiries
62 Jack Farm Road
Townsend, MT 59644
