Minimal data by default
The live website currently collects only the data described in the Privacy page. Future device telemetry is still a product and policy design area and will be documented before pilot collection begins.
Security
The data you never collect is the data you can't leak.
That's our basic rule. The only thing live right now is the website, but we're building the device side on the same rule.
Consent before analytics
Web analytics load only after you consent. You can reset that choice at any time from the link in the footer.
Encrypted transport
The website currently uses HTTPS and security headers. Device encryption and key lifecycle stay targets until the implemented protocol is reviewed and validated.
No secrets reach the browser
Private keys and service tokens never appear in code that ships to the browser. They stay in protected server-side configuration.
Vulnerability reporting
If you find a security issue on the site or in pre-launch materials, write to info@sismosmart.com. We're grateful to researchers who disclose responsibly.
Device security plan
Signed firmware, encrypted storage, per-device keys and rollback-capable update design are security targets, not deployed claims. They will be published as current capabilities only after implementation and review evidence exists.