Fleet personal data processing policy

1. Scope and roles

For Fleet account data, service security and communications with organization representatives, the controller is ООО «КАЙОН РОБОТИКС», OGRN 1267700203539, INN 7751392516, KPP 775101001, registered address: 108821, г. Москва, вн.тер.г. муниципальный округ Филимонковский, ул. Усадебный Парк, д. 5, помещ. 78К. Personal data contact: hello@kaionrobotics.ru.

When an organization uploads information about its employees, devices or other people and independently determines the purposes of processing, it remains the controller. Kaion Robotics processes that data under its documented instructions. The applicable processing instructions and version are available to an authorized representative inside Fleet.

2. Data subjects and data

• Fleet users: name or display name, work email, organization, role, access status and last sign-in time.
• Security data: IP address, user agent, sessions, sign-in events, role changes and significant actions.
• Organization data: name, service status, subscription settings, device limit and user information.
• Device data: device, robot and node identifiers, platform, version, connectivity, health and update state.
• Support enquiries and information voluntarily supplied by the user or organization.

3. Purposes and grounds

• Providing and protecting access, enforcing roles, support and performance of Fleet terms.
• Managing the device fleet, displaying status and carrying out explicitly requested updates.
• Administering the organization’s subscription, limits and service status.
• Logging significant actions, preventing abuse, investigating errors and protecting both parties’ rights.
• Acting under the organization’s instructions for data it uploads.
• Meeting duties imposed by law.

4. Processing on behalf of organizations

The organization establishes a lawful basis for transferring data to Fleet, informs its users and avoids uploading excessive information. Kaion Robotics processes such data within Fleet functions and documented instructions.

Organization terms, processing instructions, acceptable use, service and update rules are displayed after authorization. They do not disclose the internal Hub environment.

5. Retention and ending processing

• A Fleet session lasts up to eight hours unless ended earlier.
• Account, organization and device data is processed while access and the relationship with the organization remain active.
• After access ends, data is restricted, returned, erased or retained in a limited form in accordance with the contract, instructions, legal requirements and the need to protect rights.
• Security events and legally significant confirmations may be retained longer than operational data within published or contractual periods.

6. Storage, sharing and protection

Collection and initial processing of Russian citizens’ personal data use databases in the Russian Federation. The standard Fleet service processes data in the Russian Federation. If a different transfer arrangement is needed for an organization, it is documented in advance and performed in compliance with law.

Access is role-based. Secure connections, time-limited sessions, logging of significant actions, backups and access management procedures are used.

7. Rights and enquiries

• Obtain information about processing of their personal data.
• Request correction, restriction or destruction where legal grounds exist.
• Contact their organization about data it uploaded to Fleet as controller.
• Send requests to Kaion Robotics at hello@kaionrobotics.ru. Proof of identity, organization and connection to an account may be required to protect data.