GaugeLink privacy notice

We use personal information to:

• Receive, review, and manage GaugeLink applications.
• Assess equipment, connectivity, deployment, and operational fit.
• Communicate about an inquiry, application, security review, or deployment.
• Create an approved GaugeLink SaaS account or dedicated-deployment provisioning record.
• Invite and authenticate authorized users.
• Display authorized inventory, alarm, delivery, forecast, analytics, and notification information.
• Register a user’s device, remember notification preferences, and deliver operational push notifications when the user opts in.
• Configure, operate, secure, support, and improve GaugeLink.
• Provide requested demonstrations, documentation, or service information.
• Maintain application, consent, security, and audit records.
• Detect abuse, investigate incidents, and protect GaugeLink and its users.
• Comply with law, enforce agreements, and establish or defend legal claims.
• Send product news or marketing where permitted and consented to.

We seek to collect only information reasonably necessary for these purposes.

Submitting an application does not create a production account. Applications are reviewed by authorized GaugeLink personnel.

If an application is approved, information from it may be used to create a GaugeLink SaaS account or a dedicated-deployment provisioning record. The approved owner will then receive a separate account invitation. Submitted equipment and site estimates are used for qualification and onboarding and are not automatically treated as verified operational records.

Submitting an inquiry or application allows us to respond to that request. It does not automatically subscribe you to unrelated marketing.

Where we offer marketing communications, we use a separate opt-in. Marketing messages will identify the sender and provide a way to unsubscribe. We retain records needed to honour and demonstrate consent and unsubscribe choices.

We may disclose relevant information:

• Within 2718551 Alberta Inc. to personnel who need it for the purposes described in this Notice.
• To GaugeLink AK LLC for Alaska inquiries and deployments.
• To hosting, email, security, support, cloud-messaging, implementation, and other service providers acting for us.
• To professional advisers, auditors, insurers, and financing parties where appropriate.
• To government, regulatory, law-enforcement, or other parties where required or permitted by law.
• In connection with a financing, reorganization, merger, sale, or transfer, subject to appropriate confidentiality and legal safeguards.

We do not sell personal information for money.

Push notifications are off until an authenticated user enables them on a device. When enabled, GaugeLink uses Firebase Cloud Messaging, provided by Google, and the applicable Apple or Android notification service to deliver alarms, low-inventory or restoration events, deliveries, and system notices. These providers process the device push token and the notification payload needed for delivery.

A notification may show operational details such as a site or tank name, alarm description, inventory level, or delivery quantity on the device lock screen, depending on device settings. Users can select notification categories in GaugeLink, disable push for the device, or use operating-system settings to control lock-screen previews. GaugeLink does not use push tokens for advertising or cross-app tracking.

The GaugeLink mobile app asks for a device capability only when a feature needs it. Each one is optional and can be declined or turned off in the app or in the device settings:

• Camera — used only to scan the organization connection QR code shown in your GaugeLink portal, so the app can find your server without typing. No photo or video is captured, stored, or sent to GaugeLink.
• Face ID, Touch ID, or Android biometrics — optional faster sign-in. When you turn it on, the app stores your sign-in e-mail and password in the device’s protected keychain or keystore, scoped to this app and this device. The biometric check itself is performed by the operating system: GaugeLink never receives biometric data, and the stored password never leaves the device. The credentials stay on the device until you turn the feature off in the app (More → Face ID, Touch ID, or fingerprint sign-in), until a saved password stops working because it was changed (they are then removed), or until the app is deleted.
• Notifications — optional, described under Mobile push notifications above.

On the device, the app keeps only what it needs to work: the operational snapshot described above, your notification and appearance preferences, the e-mail address last used to sign in to that server, and, if enabled, the biometric sign-in credentials. Signing out removes the session and the account-scoped snapshot; deleting the app removes everything it stored.

The app contains no advertising, analytics, or crash-reporting software development kit, and it does not access your contacts, photos, files, or location.

GaugeLink serves Canadian and United States markets. Personal information may be processed outside the province, state, or country where it was collected, including in Canada and the United States. Information processed in another jurisdiction may be accessible to courts, law-enforcement agencies, or regulators under that jurisdiction’s laws.

Customer deployment and data-location commitments, where applicable, are defined in the relevant proposal or customer agreement.

We keep personal information only for as long as reasonably necessary for the purposes described in this Notice and for contractual, legal, security, accounting, dispute-resolution, and enforcement needs.

As a general practice:

• Contact inquiries and applications that do not become customers may be kept for up to 24 months after the last meaningful activity.
• Converted applications and onboarding records may be retained for the customer relationship and an appropriate period afterward.
• Marketing consent and unsubscribe records are kept while needed to honour and demonstrate the applicable choice.
• Account, security, diagnostic, and backup records follow the applicable service, security, and retention schedules.
• Operational records follow the customer agreement and the customer’s configured retention practices.
• Active mobile-device registrations are retained while needed to provide opted-in notifications and are revoked when push is disabled or the token becomes invalid.

We may retain information longer when required for a legal hold, investigation, contractual obligation, or applicable law. When retention ends, information is deleted, anonymized, or isolated from normal use, subject to backup cycles.

We use administrative, technical, and physical safeguards appropriate to the nature of the information. These include access controls, authentication, role- and location-based restrictions, encryption for selected operational credentials, HTTPS transport, encrypted WireGuard VPN tunnels between DTU gateways and GaugeLink servers, network boundaries, logging, backup, and recovery controls.

WireGuard protects gateway data while it travels through the configured DTU-to-server tunnel. Other layers use their applicable safeguards; this does not mean every stored record, export, integration, email, or browser session is end-to-end encrypted by WireGuard.

No method of transmission or storage can guarantee absolute security.

Subject to applicable law, you may ask us to:

• Explain whether and how we process your personal information.
• Provide access to personal information we hold about you.
• Correct inaccurate or incomplete information.
• Withdraw consent where our processing depends on consent.
• Stop marketing communications.
• Delete information where applicable.
• Review a privacy concern or complaint.

We may need to verify your identity before completing a request. Some information may be retained where required or permitted by law. If we handle information on behalf of your organization, we may direct the request to that organization.

The GaugeLink mobile app does not create accounts. Your organization provisions and manages access through the administrative portal. To close or delete an organization-managed user account, contact your organization’s GaugeLink administrator or submit a privacy request using the contact details below.

GaugeLink may use cookies or similar technologies that are necessary for security, sessions, preferences, and reliable website operation.

If non-essential analytics or similar technologies are introduced, we will describe them and provide consent controls where required. Form field values, application details, equipment information, and contact information must not be sent to analytics services.

GaugeLink is a business and operational service. It is not directed to children or intended for personal consumer use, and public applications should be submitted only by adults acting for an organization.

Our website may link to third-party websites. Their privacy practices are governed by their own notices.

Customer-configured integrations are also subject to applicable customer agreements and the third-party provider’s terms and privacy practices.

We may update this Notice when our practices, services, or legal obligations change. We will post the revised Notice with a new effective date and provide additional notice when required.

For privacy questions, requests, or complaints:

Privacy Officer
2718551 Alberta Inc. — GaugeLink
Email: connect@gaugelink.app
Phone: +1 907-952-8512

Customer-support requests may be sent to support@gaugelink.app. Please do not send passwords, access tokens, or detailed vulnerability information by email.

Depending on your location, you may also have the right to contact the privacy regulator responsible for your jurisdiction.