Allthenticate is committed to protecting your privacy and providing you with a positive experience on our websites, while using our products and services ("Solutions"), and your personal or company-owned smartphone ("Device").
This Privacy Statement applies to Allthenticate websites and Solutions that link to or reference this Privacy Statement and describes how we handle personal information.
Types of data we collect
We collect the user's name, username, email address, and photo (optional) for use in their Allthenticate profile, which is provided by the user through the Allthenticator application.
We store a public key that is linked to each Device and generated randomly during the setup process of the Allthenticator application and a Device universally unique identifier (UUID) for identification purposes by Allthenticate door readers and software.
We collect usage statistics of based on application usage on the Device, interactions between the Device and other Allthenticate resources (e.g., door readers, computer logins, and Allthenticate-enabled websites) to provide logging services to our customers and to improve the user experience.
Logs obtained from a Device or Services include, but are not limited to, the type of access that was requested and timing information pertaining to the request and the response (e.g., a request to open the door that required no user interaction or a request to authorize the 'sudo' command that required user intent).
Allthenticate does not gather user location data or track the user's location from the Allthenticator application. Background location is used in the Allthenticator application to launch in the background and connect to other Allthenticate resources (e.g., door readers and computers) when in their vicinity.
Administrators provide their company payment method and billing address if electronic payment is the desired method of payment for the company.
When and how we collect data
User Provided Information
Users provide Allthenticate with their name, username, and email addresses associated with their organizations that are using Allthenticate services. Additionally, billing information, such as credit card number or billing address, will be provided by administrators.
Employer Provided Information
Customers may choose to import existing employee data into our system, which may include employee names, pictures, email addresses, department, and specific group information.
Automatically Collected Information
The Device and Service information, Device and Service usage, and Device and Service logs are automatically collected when using the Device and Service and will be periodically uploaded to Allthenticate.
How and why we use your information
We need to use the user's username, public key, and email to uniquely identify them and provide them access to our Services. Your public key is used to verify the user's identity for secure interactions. The username and email are used for registration and interactions with Allthenticate Services.
We may use provided email addresses to provide users with information regarding the Allthenticate service or any upcoming changes that may affect Allthenticate’s Services operations. We will not send emails about anything that does affect the Services or the user's Device directly.
We use the logs of how Allthenticate enabled devices interact to make a more seamless service. Your personal information is not tied to any of these logs.
Who we share your data with and why
Allthenticate will share information relevant to user activity within their employer's organization with the administrator of said organization. Allthenticate will never share information that is not directly related to said organization in question (e.g., if the user is a part of multiple organizations that use Allthenticate).
Allthenticate may share credit card and billing information provided by administrators with payment processors if that is the payment method used to pay for the provided Services.
Updates to this Policy
Any extensive updates to this policy will be summarized in an email that will be sent to the provided email addresses.