RIMOT PRIVACY POLICY

When you visit the Site or use our Service, we collect certain Personal Information from you, both directly and by automated means.

We also collect and use non-personal information (“Client Business Data”) on behalf of our Clients to provide technical services, which falls outside the scope of privacy regulations. This data may include operational data on remote site performance, weather observations, equipment logs and related information.

a. Directly collected information
We require certain Personal Information from Clients and end users in order to login, access and use the RimotRF Service and RimotHEALTH Screening Service (collectively referred to as the “Business Service”). For example, when you sign in to the Business Service, you are asked to provide your email address and a password. Depending on the services requested, we may ask you for contact information (such as your name and phone number), billing and payment information, or other information. When you are using the Business Services, we may also collect Personal Information from you through messages you send to our support or sales teams, or through your use of interactive tools.

Any time we collect Personal Information from you, we will advise you at or before the time of collection the purpose for the collection. If you decide not to provide certain information to us, or to withdraw your consent for our use of certain information, we will advise you of the effect that may have on our ability to provide the Business Service to you.

RimotHEALTH Screening Service
The RimotHEALTH Screening Service may be configured by Clients to collect and handle Personal Information. What Personal Information is collected, how it is used, with whom it is shared and for how long it is retained is under the control of the Client. The information collected through this Service is used to provide the RimotHEALTH Screening Service (specifically, screening of individuals for health matters using temperature readings), and more generally to improve the Service.

While the kinds of Personal Information collected and used by Clients will vary by Client and may evolve over time, generally information collected may include an end-user’s first and last name, responses to a Questionnaire, temperature readings, proof of vaccination (POV) verification (through scanning of a unique QR Code or otherwise), thermal facial images and facial maps, and information that may help an employer/other organization identify you for screening purposes.

Note that Rimot does not retain any facial images, and all such images are transitory records used to determine the accuracy of temperature readings and are purged from our system on a regular basis. Similarly, identifying information associated with any of the information collected through the RimotHEALTH Screening Service is deleted after 14 days, so that only non-identifying information (such as Questionnaire responses no longer tied to an individual user) remains available for our use in accordance with this Policy (as described in this Policy).

For the purposes of this Policy, a QR Code includes date of vaccine(s), first and last name of the individual, and location/jurisdiction where vaccine(s) were received. Proof of Vaccination (POV) is stored by Rimot as either a Valid or an Invalid POV (actual vaccination records are not stored) and is based on an individual’s vaccination status. Rimot does not collect or use any other personal information to confirm the identify of an end-user – this is instead under the control of the Client using the RimotHEALTH Screening Service.

A valid POV is when an individual has received at least two or more doses of any approved covid-19 vaccine. An Invalid POV is when an individual has received less than two doses of any of the approved covid-19 vaccines.

b. Automatically collected information
If you are visiting our Site or accessing our Business Service, we collect the following Personal Information provided by your browser or mobile device (“Usage Information”):

• Pages accessed
• Time of visit
• Time of last visit
• Name of the owner of the IP address
• Reverse domain of the IP address
• Referring site, application, or service, including the relevant search queries that led you to the Site
• Browser information
• Operating system and device information
• IP address (from users signing into the service, for security purposes)

c. Media
If you upload images to the Site, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the Site can download and extract any location data from images on the website.