Privacy Policy

01Who is responsible for your data

vmonitor is operated by Future Vision, a company registered in the United Arab Emirates. For the account data described below Future Vision is the controller. For the device data you collect through the service, you are the controller and Future Vision processes it on your behalf under the Terms of Service.

Contact for any privacy question or request: [email protected].

02Account data we collect

• Username, email address and a salted hash of your password — never the password itself.
• Two-factor authentication settings, if you enable them.
• Login times and the IP addresses your sessions come from, kept for security and abuse investigation.
• Billing details you enter at checkout — name, billing address and any tax registration number. These are collected and held by Stripe; we receive the subscription status, the invoice record and the last four digits of the card, never the full card number.

03Device data the agent collects

Once you install the agent on a device it reports the information needed to manage it. This is data about machines you administer, and it is yours — we process it only to run the service for you.

• Device name, operating system and version, hardware and network inventory.
• Connection state, IP address and connection history.
• The content of remote sessions while they are in progress: screen, terminal and files you transfer.
• Session audit records, and session recordings where you have enabled recording.

04What we do not do

• We do not sell your data or your customers’ data, and we do not share it for advertising.
• We do not use the contents of your remote sessions for any purpose other than delivering them to you.
• We do not access your devices ourselves except where you ask us to for support, or where we are legally compelled to.

05Who else processes it

• Stripe — payment processing, billing and invoicing.
• Amazon Web Services — the cloud infrastructure the service runs on.
• Cloudflare — DNS, TLS termination and content delivery in front of the service.
• Our own mail server — account verification, password reset and notification email.

06Where it is held

The service runs on cloud infrastructure operated by Future Vision outside the United Arab Emirates, and email is delivered through our own mail infrastructure. If your organisation needs data held in a specific country, contact us before enrolling devices — tell us your requirement and we will tell you plainly whether we can meet it.

07How long it is kept

• Account and device data: for as long as the account is open.
• A trial that never subscribes: deleted 7 days after the trial period ends, together with the device groups it solely owned.
• A cancelled paid account: retained until you ask us to delete it, so that a subscription can be reinstated without losing your fleet.
• Session recordings: kept until you delete them, in the storage attached to your account.
• Billing records: retained as long as UAE tax law requires, which is currently five years.

08Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Most of it you can also see and change yourself on the My Account page. Deleting your account from the console removes it and the device groups it solely owns.

Where you are managing devices used by other people, requests from those people should come to you first — you are the controller of that data and we will support you in answering them.

09Security

• All browser and agent traffic runs over TLS.
• Passwords are stored salted and hashed; two-factor authentication is available and we recommend it.
• Device rights are granular per user and per device group, and every session is written to the audit log.
• We will notify affected customers without undue delay if a breach affects their data.

10Cookies

The console sets a session cookie so you stay signed in, and stores your interface preferences. There are no advertising or third-party tracking cookies on the site or in the console.

11Changes

If we change this policy materially we will email the address on your account at least 30 days before the change takes effect.