Key Definitions
This section defines terminology used in this policy to avoid ambiguity. Definitions follow common data protection terminology and are adapted to the context of connected consumer AI devices and online services.
Personal data: any information that identifies or can reasonably identify a natural person, including contact details, device identifiers, usage logs, location metadata and purchase history.
Processing: any operation performed on personal data, whether automated or manual, including collection, recording, storage, adaptation, retrieval, transmission and deletion.
User: an individual who purchases, installs, configures or interacts with viaireo devices or services, including account holders, household members and trial users.
Service: the combination of online account services, mobile applications, device firmware, cloud-based AI features and customer support that enable operation of viaireo products.
Cookies: small text files or similar technologies stored in a user's browser or on a device to support functionality, analytics and personalization for the website and web-based device portals.
Data We Collect
We collect data necessary to provide device functionality, fulfill orders, maintain security, and improve product reliability. Collection occurs through user inputs, device telemetry, third-party integrations and automated logging. We minimize collection to data types relevant to the requested service and operational needs.
Data You Provide Directly
When you register, purchase, or interact with support, we collect information you supply to create and manage accounts and orders.
- Contact details: full name, email address, shipping and billing addresses, phone number.
- Account credentials and profile information: username, password (stored securely), preferences and device names chosen by the user.
- Order and payment information: order history and billing details. Payment card data is processed by certified payment partners and not retained by viaireo except for the minimum required billing references.
- Communications: messages to customer support, warranty claims, and feedback submitted through forms or email.
- Device setup inputs: Wi‑Fi credentials entered locally on the device (stored only on-device or transmitted securely to cloud services as required), custom schedules and user-defined automation rules.
- Marketing preferences and consents you choose to provide for newsletters or promotional contact.
Automatic and Device-Generated Data
When you use our website, app or connected devices, we collect technical and usage data automatically to operate services, diagnose issues, and improve performance.
- Device telemetry: operational status, error logs, battery levels, filter status and functional metrics necessary for diagnostics and maintenance.
- Usage data: timestamps of device operation, feature usage patterns and anonymized aggregated behavior to inform product development.
- Network and connection data: IP addresses, connection timestamps and signal quality for connectivity troubleshooting.
- Performance analytics: crash reports and performance measurements from apps and cloud services.
- Location metadata: coarse location derived from IP or device network context when required for localized services such as climate control recommendations or distribution logistics.
- Cookies and similar identifiers used by web and mobile platforms to maintain sessions and preferences.
Third-Party Data Sources
We may receive information about you from third parties that support our services, such as payment processors, logistics providers and analytics platforms. We evaluate partners for appropriate security practices before integration.
- Payment processors: limited billing references and transaction identifiers required to complete purchases and refunds.
- Logistics and fulfillment partners: shipping details and delivery confirmations necessary to complete orders.
- Analytics and crash reporting providers: aggregated and technical analytics to monitor product usage and stability.
Purposes of Processing
We process personal data for legitimate operational purposes necessary to provide products and services, maintain security, and support customers. Processing is purpose-limited and documented.
- Order processing, invoicing and delivery management for purchases made via viaireo.
- Account creation, authentication and profile management for device control and cloud features.
- Device operation and maintenance: telemetry collection for diagnostics, firmware updates and preventive maintenance notifications.
- Customer support: responding to inquiries, troubleshooting and warranty handling.
- Security and fraud prevention: detection and mitigation of unauthorized access and abuse.
- Product improvement: aggregated analysis to enhance usability, reliability and energy efficiency of smart devices.
- Regulatory and legal compliance: retention and disclosure when required by applicable law.
- Marketing and communications where you have provided consent, including product updates and offers tailored to your device usage preferences.
Legal Basis for Processing
Where applicable, we rely on one or more legal bases for processing personal data: contract performance, legitimate interests, consent and compliance with legal obligations. We assess and document the appropriate legal basis for each processing activity.
- Contract: processing necessary to fulfill orders, provide devices and perform services requested by the user.
- Legitimate interests: processing for fraud prevention, security maintenance and product improvement after balancing against user rights.
- Consent: where required for marketing communications, analytics tracking beyond strictly necessary cookies, and optional personalization features.
- Legal obligation: processing required to comply with statutory or regulatory duties, such as tax and customs requirements.
Data Subject Rights
Depending on applicable law, users may exercise rights regarding their personal data. We provide practical channels to address these requests and evaluate each request in light of legal requirements and the security of the account and devices.
- Right of access: request a copy of personal data we hold about you.
- Right to rectification: request correction of inaccurate or incomplete personal data.
- Right to erasure: request deletion of personal data where retention is no longer necessary and legal obligations do not require continued storage.
- Right to restriction: request temporary limitation of processing under certain conditions.
- Right to data portability: obtain a machine-readable copy of personal data you provided to us for transfer to another provider where technically feasible.
- Right to lodge a complaint with a supervisory authority if you consider our processing incompatible with applicable law.
Cookies and Similar Technologies
viaireo uses cookies and similar technologies on our website and web portal to enable essential functionality, measure performance and provide personalized content. We employ a cookie consent mechanism so users can manage preferences for non-essential cookies.
We use session cookies for authentication, persistent cookies for preferences, performance cookies for analytics, and third-party cookies for embedded content and optional features.
Categories: essential (required for site function), functional (preferences), analytics (usage measurement), advertising (behavioural advertising performed by third parties when you opt in).
You can manage cookie preferences through the cookie banner, browser settings or device settings. Disabling non-essential cookies may reduce functionality such as personalized recommendations and usage analytics.
Full Cookie Policy
Data Sharing and Disclosures
We share personal data only with entities that need it to deliver services, process transactions, or meet legal obligations. All sharing is limited to necessary fields and governed by contracts or data processing agreements.
- Service providers: cloud hosting, analytics and customer support platforms acting on behalf of viaireo under contractual restrictions.
- Payment and business partners: to process transactions and refunds.
- Logistics and fulfillment partners: to enable shipping and delivery of purchased products.
- Technical partners: certified vendors that provide device integration, firmware distribution and remote diagnostics.
- Legal and regulatory authorities: when disclosure is necessary to comply with legal obligations or to respond to lawful requests.
- Acquirers and advisors: in event of corporate restructuring, sale or merger, with appropriate safeguards to protect privacy.
International Transfers
Personal data may be processed or stored in Thailand and in jurisdictions where our subprocessors operate. When transferring data internationally, viaireo implements contractual safeguards and evaluates local protections to maintain an appropriate level of security.
Where required, transfers are governed by data processing agreements including standard contractual clauses or equivalent safeguards. We validate subprocessors and require technical and organizational measures to protect data in transit and at rest.
Data Retention
Retention periods reflect the purpose of processing, legal obligations and operational needs. We retain the minimum amount of data necessary and apply secure disposal mechanisms when data is no longer required.
Account information and order history are retained for as long as your account is active and thereafter for a limited period to support warranty claims, tax and commercial recordkeeping in line with applicable law.
Customer support communications are retained for a period necessary to resolve issues and to improve support quality, typically up to 3 years unless a longer retention is required by law.
System logs and telemetry used for diagnostics are retained in aggregated or pseudonymized form for product improvement; retention periods vary by log type but are designed to balance utility with privacy.
When you request deletion or when retention periods expire, we remove personal data from active systems and undertake secure deletion of backups within a reasonable timeframe, subject to legal holds or ongoing contribute.
Security Measures
viaireo employs a multi-layered security approach covering technical, administrative and physical controls. Measures are regularly reviewed and adjusted to address evolving threats while ensuring operational continuity of AI device services.
- Technical safeguards: TLS encryption for data in transit, encryption at rest for sensitive records, and network segmentation for cloud services.
- Access controls and monitoring: role-based access, multi-factor authentication for administrative systems and logging with regular audit reviews.
- Operational practices: secure development lifecycle for firmware and apps, vulnerability management, incident response procedures and periodic security assessments.
Exercising Your Rights
To exercise rights related to your personal data or to request clarification about our processing activities, contact our privacy team. We verify requests to prevent unauthorized disclosures and respond within applicable timeframes.
- Access and portability requests: submit a request to receive a machine-readable copy of your personal data.
- Correction and deletion requests: ask us to correct inaccurate data or to remove data where lawful to do so.
- Objection and restriction: object to certain processing activities or request limitation of processing while matters are assessed.
- Right to data portability: request a structured, commonly used, machine-readable copy of personal data provided to viaireo, to the extent technically feasible.
- Right to restriction of processing: ask viaireo to limit processing when accuracy is contested, processing is unlawful, or data is needed for legal claims.
- Right to object: object to processing based on legitimate interests or direct marketing; viaireo will cease processing for those purposes unless overriding lawful grounds exist.
- Right to withdraw consent: when processing is based on consent, you may withdraw it at any time without affecting processing prior to withdrawal.
- Right to lodge a complaint: file a complaint with the Thailand data protection authority or another supervisory authority if you believe your rights are not respected.
How to exercise your data rights
To exercise any data rights described here, contact viaireo using the contact details below. Provide a clear description of the personal data and the right you wish to exercise. We will verify identity as necessary and respond in a timely manner in accordance with applicable law.
[email protected]
We aim to acknowledge requests within 7 business days and provide a substantive response within 30 calendar days. Where requests are complex or numerous we may extend the response period and will inform you of the reason and expected timeframe.
Marketing communications and tracking
viaireo may send service updates, promotional offers, and product recommendations about smart home devices and related services if you opt in. Marketing messages include clear unsubscribe options. We use email analytics and website cookies to tailor communications and measure effectiveness, retaining marketing analytics data for defined retention periods to improve product relevance.
To stop marketing messages, click the unsubscribe link in any email or contact us at the address below. Processing necessary for order fulfillment and service notifications will continue unless you request otherwise.
Children's privacy
viaireo does not knowingly collect personal data from children under applicable age limits without parental consent. If we become aware that we have inadvertently collected personal data from a minor, we will take steps to delete that information. For parental inquiries, contact us using the details below.
Third-party links and services
Our site or devices may link to or integrate with third-party services (payment processors, cloud services, analytics providers). viaireo is not responsible for third-party privacy practices. We recommend reviewing the privacy policies of any third-party services you interact with.
Changes to this privacy policy
We periodically review and may update this privacy policy to reflect changes in technology, legal requirements, or business practices. Material changes will be posted on viaireo.club with an updated effective date. Continued use of our services after publication constitutes acceptance of the revised policy.