Privacy Policy
1. Who we are
Husaco is operated by [COMPANY LEGAL NAME] ("Husaco", "we", "us"), [COMPANY ADDRESS]. We make the Husaco connected mouse trap, the Husaco receiver that relays trap events over Wi‑Fi, and the Husaco app that shows those events on your phone.
2. What we collect
We collect only what the service needs to work. We do not collect precise location, contacts, photos, health or financial data, and we do not show ads or use advertising trackers.
| Category | What exactly | Why |
|---|---|---|
| Account | Your email address and a one‑way hash of your password (we never store the password itself) | To create your account, sign you in and send verification and password‑reset codes |
| Devices | Serial numbers of the traps and receivers you add, the names and locations you type for them (for example "Kitchen"), receiver firmware version and online status | To link devices to your account and show their status |
| Trap events | Event type (for example capture, reset, low battery, fault), which cavity, battery level, radio signal strength, timestamps, and the actions you take in the app (for example marking a trap as cleaned) | To show your event history and send notifications |
| Notifications | A push‑notification token issued by Google or Apple for your phone | To deliver notifications when a trap catches something or needs attention |
| Technical | IP address, app version, phone operating system, request logs and crash reports | To keep the service secure, rate‑limit abuse and fix bugs |
| Bluetooth | The app uses Bluetooth only to set up a receiver's Wi‑Fi and to update trap firmware. It does not use Bluetooth to track your location and does not scan for other devices. | Device setup and updates |
We do not knowingly collect information from children under 13. The Husaco app and devices are not intended for children.
3. How we use it
- Provide the service: show your traps, receivers and events, and send you notifications you have turned on.
- Keep it secure: verify your email, protect against unauthorized access, limit repeated failed sign‑ins.
- Support you: answer your questions and troubleshoot problems.
- Improve the product: understand crashes and failures. We do not profile you or make automated decisions with legal effect.
- Comply with law and enforce our Terms of Service.
4. Who we share it with
We do not sell your personal information and we do not share it for advertising. We share it only with service providers who process it for us under contract:
| Provider | What they do | What they see |
|---|---|---|
| Cloud hosting ([HOSTING PROVIDER], United States [and Singapore until migration is complete]) | Run our servers and database | All service data |
| Resend, Inc. | Send verification and password‑reset emails | Your email address and the code we send |
| Google (Firebase Cloud Messaging) and Apple (APNs) | Deliver push notifications | Your push token and the notification text (for example "Kitchen trap caught a mouse") |
We may also disclose information if required by law, to protect the safety of people or property, or as part of a merger or sale of the business (we will tell you before your information becomes subject to a different privacy policy).
5. How long we keep it
| Data | Kept for |
|---|---|
| Account, devices and event history | As long as your account exists. Deleting your account deletes them immediately. |
| Push tokens | Until you sign out or the token stops working |
| Verification codes | 10 minutes, then purged within 24 hours |
| Unverified accounts | Deleted automatically after 24 hours |
| Server request logs and crash reports | Up to 90 days |
| Database backups | Up to 30 days, then overwritten |
6. How we protect it
All traffic between the app, the receivers and our servers is encrypted (TLS). Passwords are hashed with bcrypt. Verification codes are stored only as keyed hashes. Access to production systems is limited to authorized staff using key‑based authentication. No system is perfectly secure; if we learn of a breach affecting your information we will notify you as required by law.
7. Your choices and rights
- Access and correction — everything we hold about you is visible in the app. You can rename devices and change your password at any time.
- Delete — in the app go to Me → Delete account, or follow the steps at husacotrap.com/delete-account. Deletion is immediate and permanent.
- Notifications — turn them off in your phone's settings for the Husaco app.
- Email — we only send transactional emails (verification codes, password resets). We do not send marketing email.
California and other U.S. state residents
Depending on where you live you may have the right to know what personal information we collect, to delete it, to correct it, and to opt out of its sale or sharing. We do not sell or share personal information, and we treat these rights as available to everyone regardless of state. To exercise them, use the app or email privacy@husacotrap.com. We will verify the request by asking you to confirm it from the email address on the account, and respond within 45 days. We will not discriminate against you for exercising your rights. You may designate an authorized agent to make a request on your behalf.
Do Not Track. Our app and website do not track you across other sites or apps, so there is nothing for a Do Not Track signal to change.
8. Where your information is processed
Our servers are operated by cloud providers in the United States [and, until our migration is complete, Singapore]. Your information may be processed in those locations. We do not transfer personal information to service providers in other countries.
9. Changes
If we change this policy in a way that matters, we will show a notice in the app or email you before the change takes effect. The effective date at the top always tells you when it was last updated.
10. Contact
[COMPANY LEGAL NAME]
[COMPANY ADDRESS]
Privacy questions: privacy@husacotrap.com
Support: support@husacotrap.com