Last Updated: April 2, 2026

OceanRemote ("Company", "we", "us", "our") provides an Internet of Things (IoT) platform that allows users to remotely monitor and control compatible electronic devices (the "Service"). By registering for or using the Service, you ("User", "you") agree to be bound by these Terms of Service ("Terms"). If you are using the Service on behalf of an organization, you represent that you have authority to bind that organization.

1. Acceptance of Terms

By accessing or using any part of the Service, you agree to be bound by these Terms. If you do not agree to all the Terms, you may not access or use the Service.

2. Eligibility & Account Registration

You must be at least 18 years old to create an account. You agree to provide accurate, current, and complete information during registration and to update it as necessary. You are solely responsible for maintaining the confidentiality of your password and account.

3. User Responsibilities & Prohibited Conduct

You are solely responsible for all activities that occur under your account. You agree NOT to:

• Use the Service for any illegal purpose or in violation of any local, state, national, or international law.
• Attempt to bypass or disable any security features of the Service.
• Use the Service to control devices that could cause death, personal injury, or severe physical or environmental damage ("High-Risk Activities"). High-Risk Activities include, but are not limited to: life support systems, emergency response, autonomous vehicle control, nuclear facilities, military applications, or medical devices.
• Share, publish, or distribute your device firmware containing your WiFi credentials or API tokens in any public forum.
• Generate excessive API requests that degrade the Service for other users.

4. Firmware and Device Control – ASSUMPTION OF RISK

YOU EXPRESSLY ACKNOWLEDGE AND AGREE THAT:

• Your use of the Service to generate firmware and control devices is entirely at your own risk.
• The firmware generated by the Service is provided "AS IS" without any warranty of any kind, including but not limited to warranties of merchantability, fitness for a particular purpose, or non-infringement.
• You are solely responsible for testing the firmware on your devices before deploying them in any environment.
• OceanRemote is NOT responsible for any damage to your devices, property, data, or any personal injury or death resulting from the use or misuse of the Service or firmware.
• You assume full responsibility for any consequences arising from remotely controlling devices, including but not limited to electrical shorts, fires, equipment damage, or unintended operation.
• If you choose to share your firmware code, you assume all risks of unauthorized access, device cloning, or control by third parties.

5. Service Availability & Modifications

We strive to maintain high availability but do not guarantee uninterrupted or error-free service. We reserve the right to modify, suspend, or discontinue the Service (or any part thereof) with or without notice. We will not be liable to you or any third party for any modification, suspension, or discontinuation of the Service.

6. Intellectual Property

All intellectual property rights in the Service, its source code, APIs, and design belong to OceanRemote. You retain ownership of any firmware code you generate, as well as your device configurations and sensor data. However, you grant us a limited license to host, transmit, and process your data solely to provide the Service to you.

7. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT SHALL OCEANREMOTE, ITS DIRECTORS, EMPLOYEES, OR AGENTS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING WITHOUT LIMITATION, LOSS OF PROFITS, DATA, USE, GOODWILL, OR OTHER INTANGIBLE LOSSES, RESULTING FROM (i) YOUR USE OR INABILITY TO USE THE SERVICE; (ii) ANY CONDUCT OR CONTENT OF ANY THIRD PARTY ON THE SERVICE; (iii) UNAUTHORIZED ACCESS, USE, OR ALTERATION OF YOUR TRANSMISSIONS OR CONTENT; (iv) DAMAGE TO YOUR DEVICES, PROPERTY, OR PERSONAL INJURY; OR (v) ANY OTHER MATTER RELATING TO THE SERVICE. OUR TOTAL LIABILITY SHALL NOT EXCEED THE AMOUNT YOU PAID US, IF ANY, FOR THE SERVICE DURING THE SIX (6) MONTHS PRIOR TO THE EVENT GIVING RISE TO THE CLAIM.

8. Indemnification

You agree to defend, indemnify, and hold harmless OceanRemote and its affiliates, directors, employees, and agents from and against any and all claims, damages, obligations, losses, liabilities, costs, or debt, and expenses (including but not limited to attorney's fees) arising from: (i) your use of and access to the Service; (ii) your violation of any term of these Terms; (iii) your violation of any third-party right, including without limitation any copyright, property, or privacy right; or (iv) any claim that your firmware or device caused damage to a third party.

9. Governing Law & Dispute Resolution

These Terms shall be governed by and construed in accordance with the laws of Morocco, without regard to its conflict of law provisions. Any dispute arising under or in connection with these Terms shall be resolved exclusively through binding arbitration in Casablanca, Morocco, in accordance with the rules of the Moroccan Arbitration Center. The language of arbitration shall be English. You agree that any claim must be filed within one (1) year after it arose, or it is permanently barred.

10. Termination

We may terminate or suspend your account and bar access to the Service immediately, without prior notice or liability, under our sole discretion, for any reason whatsoever, including without limitation a breach of the Terms. Upon termination, your right to use the Service will immediately cease. You may delete your account at any time from the dashboard.

11. Entire Agreement

These Terms constitute the entire agreement between you and OceanRemote regarding the Service and supersede all prior agreements and understandings, whether written or oral.

By clicking "Create account" you acknowledge that you have read, understood, and agree to be bound by these Terms of Service, including the assumption of risk and limitation of liability clauses.

Last Updated: April 2, 2026

OceanRemote ("Company", "we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our IoT platform (the "Service").

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.

1. Information We Collect

We collect information that you provide directly to us, as well as information generated automatically through your use of the Service.

1.1 Information You Provide

• Account Information: Username, email address, and a hashed (not plain text) password.
• Device Configuration: Board type (e.g., ESP8266, Pico W), relay names, sensor types, and WiFi SSID (but never your WiFi password).
• Support Data: Information you provide when you contact us for support.

1.2 Automatically Collected Information

• Device Information: Device ID, IP address, MAC address, connection timestamps, relay states, and sensor readings (temperature, humidity).
• Usage Data: API request logs, session IDs, token usage timestamps, and error logs.
• Security Data: Failed login attempts, blocked IP addresses, and honeypot triggers.

1.3 Cookies and Tracking

We use only essential session cookies to keep you logged in. We do not use any tracking cookies, analytics cookies, or third-party advertising cookies.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, maintain, and improve the Service.
• Authenticate you and your devices.
• Process and respond to your requests (e.g., toggling relays).
• Monitor for security threats, including detecting and blocking malicious IP addresses.
• Comply with legal obligations.

3. Data Retention

We retain your account data for as long as your account is active. Device sessions and tokens are automatically deleted after expiry. If you delete your account, all associated data (device configurations, tokens, sensor history) will be permanently removed within 30 days. Security logs (honeypot triggers, failed logins) may be retained longer for forensic analysis.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share your information in the following limited circumstances:

• Service Providers: We use PythonAnywhere to host our servers. Your data resides on their infrastructure in the United States. They are contractually bound to process data only on our behalf.
• Legal Requirements: We may disclose your information if required to do so by law or in response to a valid request by a governmental authority (e.g., court order, subpoena).
• Business Transfers: If OceanRemote is acquired or merges with another company, your data may be transferred as part of that transaction.

5. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in Transit: All traffic is encrypted via HTTPS/TLS.
• Hashing: Passwords and device tokens are stored as SHA-256 hashes, never in plain text.
• Rate Limiting: We limit API requests to prevent abuse.
• IP Banning: Suspicious IPs are temporarily blocked.

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security.

6. Your Rights (GDPR, CCPA, etc.)

Depending on your jurisdiction, you may have the following rights:

• Right to Access: You can request a copy of your data.
• Right to Rectification: You can correct inaccurate data via your profile.
• Right to Deletion: You can delete your account and associated data.
• Right to Data Portability: You can export your device configurations.

To exercise these rights, please contact us at admin@oceanremote.net. We will respond within 30 days.

7. International Data Transfers

Our servers are located in the United States (via PythonAnywhere). If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer.

8. Children's Privacy

The Service is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of the Service after such modifications constitutes your acknowledgment of the modified Privacy Policy.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: legal@oceanremote.net
OceanRemote – Data Protection Officer

By creating an account, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.