CaSA’s Privacy Commitment
CaSA’s objective is to provide you, the end user, with efficient, remotely-controllable, next-generation connected devices. In the course of enabling data logging and bi-directional control over everyday items, it is inevitable that CaSA will collect data that will require the highest degree of security and privacy. We fully understand – and accept – the responsibility that comes with managing data in this new era of connected objects, so we make this commitment regarding any and all data collected from your visiting, buying or using our website and products:
- We will only collect data that is useful to improving CaSA products, services and your experience.
- We will be transparent about our data practices and will explain them in clear language;
- We will always take the security of your data seriously.
CaSA’s Privacy Statement For Products and Services
16 August 2016
This Privacy Statement for CaSA Products and Services (“Privacy Statement”) describes information that CaSA Connected Appliances Ltd. and its subsidiaries and affiliates (collectively, “CaSA”) collect, use, share, and store, including personal information (i.e., information that personally identifies you, such as your name, email address or billing information, or other data that can be reasonably used to infer this information).
This document focuses on information related to the operation of CaSA products and services, including the Caleo Thermostat and other products from CaSA (collectively, “CaSA Products”). In this Privacy Statement, the expression “CaSA Products” also includes our Web Apps, Mobile Apps, and Subscription Services as defined in our Terms of Service.
What you consent to :
Consent to data collection and processing.
By using CaSA Products, you agree to allow us to collect and process information as described in this Privacy Statement.
Consent to data export.
Your personal information may be collected, processed and stored by CaSA or its service providers in Canada and other countries where our servers reside. Please be aware that the privacy protections and legal requirements, including the rights of authorities to access your personal information, in some of these countries may not be equivalent to those in your country. If you are using CaSA Products in the European Union or other regions with laws governing data collection and use that may differ from Canadian law, you consent to the transfer of your personal data to Canada and other countries where CaSA operates.
ANY DATA CREATED BY CASA PRODUCT THAT YOU OWN REMAINS YOUR PROPERTY AND RESPONSIBILITY. IF YOU WISH FOR THIS DATA TO BE DELETED FROM OUR SERVERS, YOU MUST CONTACT CASA WITH A FORMAL REQUEST AND SUBSEQUENTLY CEASE USE OF ANY CASA PRODUCT. CONTINUED USE OF A CASA PRODUCT WILL RESULT IN NEW DATA BEING LOGGED TO YOUR ACCOUNT, WHICH WILL REQUIRE ANOTHER FORMAL REQUEST TO BE DELETED AGAIN.
What information does the Caleo Thermostat collect ?
- The Caleo Thermostat collects:
- Setup information you provide
- Environmental data from the Caleo Thermostat’s sensors
- Direct adjustments to the device, including temperature or settings
- Heating usage information
- Technical information from the device
Setup information you provide: When you install the Caleo Thermostat, you’ll be asked to provide information to assist in setting up your device properly. You may be asked for information like whether your thermostat is located in a home or a business, your home address or postal/ZIP code, the floor/room where your device is installed and so on. This information helps us to customize and optimize your experience by, for example, retrieving weather information for your neighbourhood or grouping several devices based on the floor they are on.
Environmental data from the Caleo Thermostat’s sensors: We collect data from several sensors built into the Caleo Thermostat. These sensors collect data such as current temperature, humidity and electricity usage.
Direct adjustments to the device: If you change settings like temperature setpoint on the Caleo Thermostat, it records and feeds that information to the CaSA servers for logging and analysis purposes.
Heating usage information: Every time your system turns on and off, CaSA records the time and duration during which your system was on in order to offer you features such as usage history.
Technical information from the device: In order to improve your experience over time and help troubleshoot any problem you may encounter with the Caleo Thermostat, we record your Caleo Thermostat model and serial number, software version, and technical information such as WiFi connectivity status and error codes.
What information is shared among multiple connected CaSA Products ?
If you have multiple CaSA Products interfacing with one another, the products will share certain information with each other, such as temperature or humidity data. This sharing may occur locally among connected devices (both CaSA and third-party devices). Sharing can also occur between CaSA Products and your mobile device or application, or among CaSA’s servers.
How does my CaSA Product or account interact with third parties ?
- If I connect third-party products and services to CaSA, will information be shared ?
When you choose to connect third-party products and services, such as an IFTTT channel for example, you are shown details about any proposed exchange(s) of data between CaSA and the third party that is providing the product or service. In some cases, CaSA or the third party will instead (or also) ask for permission to control the products that you have connected. Your explicit consent is required to allow any of these exchanges or requests for control and you will be able to revoke it at any time.
- Is information shared with or received from third parties ?
CaSA may share information with third parties with your permission. For example, when you enrol in an incentive program for CaSA Products offered by a partner, you may be asked for your permission to share certain data between CaSA and that partner. CASA REQUIRES YOUR EXPLICIT CONSENT BEFORE SHARING INFORMATION IN THESE CIRCUMSTANCES. We may also receive information from our partners and other sources and combine that with the information in your CaSA account. For example, in order to offer incentive programs, we might receive information (such as which of our partners offers services where you live) to determine eligibility and efficiency of those programs.
Additional information about the limited circumstances in which information from your CaSA account may be shared with third parties is described below in the section titled “In what circumstances does CaSA share my information ?“.
Any data that CaSA receives from third-parties will be processed and stored by CaSA and will be treated in accordance with this Privacy Statement. This information may be processed in the same ways as any other data that is a part of your CaSA account or the CaSA logs.
What additional information does CaSA collect and store when a user connects a CaSA Product to the Internet or creates an account ?
Wi-Fi Network Information: To connect your CaSA Product to our Services, or to access your CaSA Product over the Internet from a computer, a smartphone or a tablet, you will need to connect it to your Wi-Fi network. During setup, the CaSA Product will ask for your Wi-Fi network name (SSID) and password to connect to the Internet. It will save this information on the device, along with your IP address, so that you can access it and control it from your computer, smartphone or tablet, and so that it can communicate with CaSA servers and download software updates.
Once connected to your Wi-Fi network, your CaSA Product regularly sends the data described in this Privacy Statement (excluding sensitive information, such as your Wi-Fi password) to CaSA to provide you with the Services.
Additional Authorized Users: CaSA may provide you with the ability to enable additional authorized users to access your account. If you do so, the additional authorized users may control and view all of your devices, content, and Works with CaSA connections. Invited users may also add additional authorized users to your account, so be careful to add only those you trust. An invited user must have or create a CaSA account, and information about invited users (like email address, name, or changes to product settings) will be stored with your account.
Email Addresses: When you create a CaSA account, we collect and store your email address. From that point forward, your email address is used for communications from CaSA. In addition, CaSA may provide you with the ability to enable individuals to access your account as additional authorized users, or to invite other individuals such as friends or family to share access to your content such as recorded video footage. We will ask you for the email address of any such individuals and automatically send an email invitation on your behalf. CaSA stores this information to send this email, to register your friend if your invitation is accepted, and to track the success of our invitation services.
Basic Profile Information: Your account allows you to provide certain basic profile information like your name and profile photo. Names and profile photos may be shown to others in connection with the Services. For example, if you invite someone as an additional authorized user, he or she will be able to see your name and photo. You should only use photos you are willing to make public.
Mobile location data: Upon initial configuration of a CaSA Product, mobile location data will be leveraged to automatically assist in providing answers to questions such as geographical localization of the device and timezone.
Third-party login information: Upon creating an account, you may be offered to use a third-party service for authentication, such as Google or Facebook. The confidentiality agreement as well as the terms and conditions of that authentication service is that of the service only and conditions herein may not apply. CaSA will collect basic authentication data shared from that third-party account, such as your name and profile picture.
If you select an outside party for the purchase, installation, or service of your CaSA device and share your personal information, we cannot control the collection, storage or sharing of information collected by that party. For example, if you buy a Caleo Thermostat from a retailer, the retailer may collect personal information as part of the transaction. Or the party that installed the device may retain information that you provided to them to assist them in servicing the device if needed. Always check the privacy policies for any company that collects your personal information.
How long does CaSA save my personal information and how can I delete it ?
CaSA generally stores your personal information on CaSA’s servers until you ask for it to be deleted, or for as long as you remain a CaSA customer in order to provide you with CaSA Products.
As described above, some information is processed and stored directly on the CaSA device. All personal information is encrypted as it is transmitted to CaSA and cannot easily be accessed.
You can delete the information on the CaSA device by resetting it to the defaults (using Factory Default in the Settings menu).
You can access or amend your personal information from CaSA’s servers through the controls in your account. Because of the way we maintain certain Services, after your information is changed or deleted, backup copies may linger for some time before they are deleted, and we may retain certain data for a longer period of time if we are required to do so for legal reasons.
If you have any questions, please contact us :
by email at [email protected]
by mail at
CaSA Connected Appliances Ltd.
2510 rue de l’Aeroport
Canada, J3G 0C9
by calling 1-844-TEL-CASA