Privacy Policy

Last updated: 5 October 2026

This policy explains what personal information the ESPBMS dashboard (“the Service”, “we”, “us”) collects, why we collect it, who we share it with, and the choices you have. It is written to align with the Protection of Personal Information Act, 2013 (POPIA).

1. Who we are

The Service is operated by Enerlytix (Pty) Ltd (registration number 2025/559385/07), 81 Drommedaris Street, Gordon's Bay, Western Cape, South Africa.

Our Information Officer, as required by POPIA, is Peter Schulze. If you have any question about this policy or about how your information is handled, contact him at peter@enerlytix.co.za.

2. Information we collect

• Account information — your name, email address, a hashed password, and the role/group your account belongs to (for example Installer, Client).
• Sign-in information — the date and time of each login and the browser/device description (user-agent string) of the device you logged in from, used for account security, to help us investigate suspicious access, and to assist with support queries.
• Device and installation details — information captured when an ESPBMS device is installed: site name, installer name, installer phone number and email, customer email, device serial numbers, Wi-Fi network name, IP address, and SIM card identifier (ICCID).
• Battery and device telemetry — readings reported by ESPBMS hardware (voltage, current, state of charge, temperature, cell data, warning and protection flags, and similar). Your access to a given device's data is determined by the installer email and customer email captured when that device was set up, or by an explicit share invitation.
• Preferences — settings you choose in the dashboard, such as theme, page density, favourite sites, alarm/alert thresholds, and chart colours.
• Notification channels — if you choose to link Telegram for alerts, we store the Telegram chat identifier needed to send you messages. You can unlink it at any time.
• Support content — messages you send through support tickets and the in-dashboard support assistant, and our replies.
• Email records — a copy of transactional emails we send you (for example registration, alerts, and invitations), kept so we can confirm delivery and content.
• Activity and audit records — a log of actions taken on devices through the dashboard (for example restarts, relay changes, and setting edits) and who performed them. Authorised support staff can view the dashboard as a specific user to troubleshoot a problem; every such session is logged.

3. Cookies and local storage

We use only what is needed to run the Service. We do not use advertising cookies, analytics cookies, or third-party tracking of any kind, so no cookie-consent banner is required for the current Service.

• Strictly necessary cookies
  • sessionid — keeps you logged in. Expires after 30 minutes of inactivity.
  • csrftoken — protects forms against cross-site request forgery.
• Local storage (stored in your browser, never sent to any server) — remembers small interface choices such as your theme, whether the sidebar is collapsed, your auto-refresh interval, and per-page view settings.

If we ever add analytics or any other non-essential tracking, we will update this policy and ask for your consent before it runs.

4. How we use your information

• To provide the monitoring dashboard and give you access to the correct devices.
• To send the alerts and notifications you configure, and essential account emails.
• To secure the Service, detect abuse, and investigate access issues.
• To provide support and improve the Service.
• To meet legal and record-keeping obligations.

5. Sharing and third-party processors

We do not sell your personal information. We share it only with service providers that process it on our behalf, under contract, so that the Service can function:

• Amazon Web Services — cloud hosting and database, and email delivery (Amazon SES). Data is hosted in the AWS Europe (London) region.
• DeepSeek — the in-dashboard support assistant sends your support chat messages to DeepSeek's API to generate answers. Do not include sensitive personal information in support chat.
• Telegram — only if you choose to link it for notifications; your linked chat identifier and the alert messages we send are shared with Telegram.
• Content delivery networks (jsDelivr, Google Fonts) — serve standard interface libraries and fonts. Your browser requests these files directly; we do not send them your account data.

We may also disclose information if required by law, or to protect the rights, safety, or property of our users or of Enerlytix.

6. Data retention

We keep account information for as long as your account is active. Device telemetry is retained for as long as it is useful for monitoring and historical analysis of the associated system. Support and email records are kept for a reasonable period for accountability and dispute resolution. When information is no longer needed, it is deleted or de-identified.

7. Security

Access is over HTTPS. Passwords are stored only as salted hashes. App-based two-factor authentication is available on every account and we recommend enabling it. Access to device data is restricted by role and by the email addresses matched or invited for each device.

8. Your rights

Subject to applicable law, you may ask us to:

• confirm what personal information we hold about you and get a copy;
• correct information that is inaccurate or out of date;
• delete information where there is no lawful reason for us to keep it;
• object to or restrict certain processing.

To exercise any of these, email peter@enerlytix.co.za. You also have the right to lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za.

9. Children

The Service is intended for use by installers, businesses, and system owners. It is not directed at children and we do not knowingly collect information from them.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, notified to you by email or in the dashboard.

11. Contact

Enerlytix (Pty) Ltd — Information Officer: Peter Schulze, peter@enerlytix.co.za
For device or installation queries, see the Contact Us page.