The Smart City GroupPrivacy Policy
- Who we are
- Your data and your customers' data
- What we collect
- How we use it
- Who we share it with
- Cookies
- How long we keep it
- Security
- Where data is stored
- Your rights
- Children
- Changes
- Contact us
1. Who we are
This website and the PMIS platform are operated by Rigo Wireless L.L.C., doing business as Delpa Wireless and The Smart City Group, Ormond Beach, Florida, USA ("we", "us"). This policy explains how we handle personal information when you visit the website, contact us, sign up, or use the PMIS.
2. Your data and your customers' data
The PMIS is used by organizations ("customers") to manage wireless network projects. Two kinds of information are involved:
- Account information about the people who use the PMIS, and billing details. We decide how this is used, as described in this policy.
- Customer data — everything an organization enters or uploads: sites, leases, landlord and contact details, designs, documents, photos, work orders, customer installations and similar. The customer organization decides what goes in and is responsible for it; we process it only to provide, secure and support the service, under our End User License Agreement. Questions about customer data (for example from a landlord or a subscriber) should go first to the organization that entered it; we will help them respond.
3. What we collect
| Category | Examples |
|---|---|
| Account details | Name, e-mail address, username, phone number (optional), company, role in the PMIS |
| Sign-in and security | Password (stored only as a one-way hash, never readable), two-step sign-in settings, one-time codes (stored only as a keyed hash and deleted after use or expiry), sign-in times, IP address, failed sign-in attempts |
| Billing | Plan, billing status, and the Stripe customer and subscription IDs. Card numbers are entered on Stripe's secure page and never reach our servers. |
| Activity in the PMIS | An audit log of changes (who changed what and when), error logs, and questions asked to the in-app help and assistant |
| Customer data | Whatever your organization enters or uploads (see section 2) |
| Communications | E-mails and calls you send us, and our replies |
| Website visits | Standard server logs (IP address, browser, pages requested, time). We do not run analytics or advertising trackers on the website. |
4. How we use it
- To create and run your account, sign you in securely, and send sign-in and verification codes.
- To provide the PMIS features your organization uses, and to keep each organization's data separate.
- To bill subscriptions through Stripe and keep plan limits up to date.
- To send service e-mails: verification and sign-in codes, alerts and digests your organization turns on, billing notices, and important changes to the service or these terms.
- To provide support and answer your questions.
- To keep the service secure: detect abuse, investigate problems, and keep an audit trail.
- To improve the service using aggregated or de-identified information that does not identify you.
- To meet legal, tax and accounting obligations.
We use personal information because it is needed to provide the service you or your organization signed up for, because of our legitimate interest in running and securing the service, or because the law requires it. We do not sell or rent personal information, and we do not use it for advertising.
5. Who we share it with
We share information only with service providers that help us run the PMIS, and only what each one needs:
| Provider | What for |
|---|---|
| Amazon Web Services (USA) | Hosting of the PMIS and its database, backups, and sending e-mail |
| Stripe | Payments and subscriptions; Stripe handles card details under its own privacy policy |
| Anthropic (optional) | If the PMIS assistant is turned on: the question, your role and page, and the help articles — never project or customer data |
| Twilio (optional) | Text and WhatsApp notifications, only if your organization turns them on |
| Map, address and elevation services (OpenStreetMap, Esri, OSRM, Open-Meteo and elevation services) | Showing maps, finding addresses, routes, terrain and weather. They receive map coordinates or addresses you look up and your IP address, not your account details. |
| Cloudflare (cdnjs) | Delivering standard web libraries to your browser; receives your IP address |
| Google (Gmail) | Our support mailbox, when you e-mail us |
We may also disclose information when required by law, to protect our rights or the safety of others, or as part of a merger or sale of the business (the buyer would be bound by this policy). Inside your organization, your administrators can see your account and the changes you make.
6. Cookies
The PMIS uses one essential cookie to keep you signed in. It is secure, cannot be read by other websites, and ends when you sign out or the session expires. The PMIS also stores a few display preferences in your own browser. We use no advertising, analytics or tracking cookies, so there is nothing to opt out of.
7. How long we keep it
- Account and customer data: while the subscription is active. After it ends, your organization has 30 days to export its data; we then delete it, except copies in backups (removed on their normal cycle) and records the law requires us to keep.
- Sign-in and verification codes: expire after 10 minutes and are not kept in readable form.
- Audit and security logs: kept as long as the account exists, so your organization has a complete history.
- Billing records: as long as tax and accounting rules require (typically up to 7 years).
- Support e-mails: as long as needed to help you, and then deleted or archived.
8. Security
We protect information with encryption in transit (HTTPS), one-way password hashing, required two-step sign-in, strong-password rules, limits on repeated sign-in attempts, separation of each organization's data, role-based access, an audit log of changes, and regular backups. No system is perfectly secure; if we learn of unauthorized access to your information, we will notify the affected organization without undue delay.
9. Where data is stored
The PMIS is hosted in the United States (Amazon Web Services, Virginia). If you use the PMIS from another country, including Mexico, your information is transferred to and stored in the United States. We protect it as described in this policy wherever it is processed.
10. Your rights
Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, receive a copy in a usable format, object to or limit certain uses, and withdraw consent where we rely on it. Residents of Mexico may exercise their ARCO rights (access, rectification, cancellation and opposition). California residents may ask what we collect and request deletion; we do not sell or share personal information for advertising.
Many of these you can do yourself: update your details and two-step settings in the PMIS, and organization administrators can export data. For anything else, contact us (section 13). We will confirm your identity, respond within 30 days, and not treat you differently for using your rights. If your request is about customer data your organization controls, we will pass it to them.
11. Children
The website and the PMIS are for business use and not intended for anyone under 18. We do not knowingly collect information from children; if we learn we have, we will delete it.
12. Changes to this policy
We may update this policy. For important changes we will notify account administrators by e-mail or in the PMIS before they take effect. The date at the top shows the latest version.
13. Contact us
Rigo Wireless L.L.C. dba Delpa Wireless / The Smart City Group
Ormond Beach, Florida, USA
E-mail: parroyo@thesmartcitygroup.com (subject "Privacy request")
Phone: 321-704-3100