Privacy Policy

At HotspotSaaS, we take the security and privacy of your data seriously. This Privacy Policy describes how we collect, process, store, and share information collected from tenant operators and guest end-users of our WiFi management software.

1. Information We Collect from Tenant Operators

When you register a workspace subdomain on HotspotSaaS, we collect:

• Account Details: Your name, business name, phone number, email address, and encrypted passwords.
• Billing Details: Subscription billing data, invoicing addresses, and credit card reference tokens (managed securely via Stripe).
• Network Configuration: NAS identities, IP addresses, router serial keys, and customized captive portal designs.

2. Information We Process on Behalf of Tenant Operators (Guest Users)

When guest clients log into a captive portal managed by a tenant operator on our platform, we coordinate the authentication query and store:

• Device Identifiers: MAC address, device hostname, OS version, and browser agent context.
• Session Accounting Logs: Session start/end timestamps, bytes uploaded/downloaded, connection latency, and IP assignments.
• Verification Context: Phone numbers (if SMS authentication is used) or email entries.

Tenant operators are the data controllers of this guest data, and HotspotSaaS is a data processor. Tenant operators are responsible for obtaining appropriate consent from guest users before collecting this information.

3. How We Use the Information

We process your data to:

• Provide, maintain, and secure the RADIUS and dashboard services.
• Coordinate voucher validation and verify reseller agent wallet transactions.
• Generate analytical reports for tenant dashboards.
• Respond to support tickets and transmit billing alerts.

4. Data Retention and Security

We implement industry-standard encryption protocols (SSL/TLS in transit, bcrypt encryption for credentials, database encryption at rest).

• Accounting Logs: Session logs are archived after 90 days to optimize database performance, unless a tenant requests custom retention limits.
• Account Persistence: If a tenant workspace is deleted, all associated configurations, reseller records, and voucher sheets are permanently deleted from our servers within 14 business days.

5. Your Privacy Rights

Depending on your location (e.g. European Union GDPR compliance), you may have the right to request access to, correction of, or erasure of your personal data stored on our servers. To exercise these rights, please send an email request.

6. Changes and Updates

We may update this Privacy Policy from time to time. We will notify tenant operators of any significant adjustments by email or through dashboard notifications.