Privacy Policy

1. Data Collection

We process information needed for the functions you use. Depending on the service and configuration, this includes:

• Account and User Information: Names, contact details, account identifiers, property associations and permissions provided by you or an authorised administrator to manage access to the system.
• Device and System Data: Identifiers and status of connected controllers, sensors, lights, climate equipment, doors, gates and other configured devices, together with commands, scene settings, alarms and event timestamps.
• Video and Intercom Information: Images, video and supported audio from connected equipment when you use the corresponding functions. Availability, recording and storage depend on the equipment and configuration of the installation.
• Technical and Support Data: Information relevant to diagnostics and support, which may include application and operating system versions, device information, connection information, error reports and correspondence you send to us.

Information comes from you, authorised administrators, connected equipment and the technical services used by the application. Some information may be processed on a local controller, while enabled remote functions may require communication with supporting services.

The application may request permissions needed for the particular functions you use, such as notifications or access to supported device or network features. Where camera, microphone or location access is requested, the purpose should be explained when the function is used. Access to a connected property camera is distinct from access to the camera on your phone. You can review and revoke permissions in your device settings; the corresponding function may then be unavailable.

Depending on the enabled functions, the application may request the following permissions:

• Notifications: To deliver enabled alarms, service messages and status updates. You can disable notifications in your device settings.
• Location: When a location related function is available and selected, to support that function. The request explains why access is needed, and access can be revoked in your device settings.
• Camera: When a supported scanning or image capture function is selected. Permission to use your phone camera is separate from viewing a connected equipment camera.
• Microphone: When a supported voice or intercom function is selected. Access is subject to the permission granted in your device settings.
• Local Network: Where needed to discover or communicate with compatible equipment on your network.

Technical services and embedded components may process diagnostic information or identifiers needed for their functions. Websites or embedded services may use cookies or similar technologies. Optional processing requiring consent is subject to a separate consent request.

2. Purpose of Data Processing

Information is used for the following purposes:

• Control and Monitoring: To authenticate users, apply access permissions, display equipment status and carry out commands and configured scenes.
• Alarms and Notifications: To provide system events and enabled notifications relating to security, equipment status or maintenance.
• Service Reliability: To diagnose faults, provide technical support, maintain connected systems and prevent unauthorised access.

The legal basis depends on the particular activity. It may include performance of a contract with you, compliance with a legal obligation, legitimate interests in providing and protecting services, or consent where required. Optional processing that requires consent is explained separately, and consent may be withdrawn.

3. Data Sharing and Disclosure

We do not sell your personal data. Information is disclosed only for the purposes described in this policy and on an applicable legal basis.

Authorised property administrators and users receive information permitted by their roles. Installers, maintenance providers and technical partners may receive access where necessary and authorised for the service they perform.

Where a property owner, employer or building manager determines the purposes of monitoring, access logs or recordings, that organisation is responsible for its processing and privacy notices. iDomus may process these records on its instructions. Administrators must establish a lawful basis for monitoring other people and limit access to relevant records.

Providers acting on our behalf are required to protect information and use it for the authorised services. Some independent providers, including payment or public service organisations, have their own privacy notices. Information may also be disclosed to competent authorities when lawfully required.

If supporting services involve international data transfers, the transfers must follow applicable data protection requirements and use appropriate safeguards. You may contact us for information about the recipients and safeguards relevant to your service.

4. Data Security

We use technical and organisational safeguards designed to protect information against unauthorised access, disclosure, alteration and loss. These include appropriate access restrictions, confidentiality measures and protection of information handled by supporting services. Security controls depend on the service and connected equipment. No method of transmission or storage can guarantee absolute security.

5. Your Rights

Subject to the conditions in applicable law, you may request access to your personal data, correction, deletion, restriction of processing and portability. You may object to processing based on legitimate interests and withdraw consent where consent is the legal basis. Requests are handled within the time required by applicable law.

To submit a privacy or account deletion request, email [email protected], identify the application and provide enough information to locate your account or records. We may verify your identity before acting on a request. Please do not send passwords or payment credentials.

Account information is retained while access is needed to provide the service. Device events and diagnostics are kept for the operational, security and support purposes for which they were collected. Recordings, if enabled, are governed by the configuration and lawful retention requirements of the organisation responsible for the installation.

We retain personal data only as long as necessary for its purpose or an applicable legal requirement. Retention depends on the service relationship, enquiries, disputes and legal obligations. We delete or irreversibly anonymise information when the lawful need for identifiable data ends. Where a retention requirement limits deletion, we explain the reason and limit further use to that purpose.

Removing an account or revoking access can prevent remote control and receipt of alarms. Records controlled by a property operator or stored on local equipment may require a separate request to that operator. Uninstalling the application does not itself delete an account or locally stored system records.

You may complain to the National Center for Personal Data Protection of the Republic of Moldova or another competent supervisory authority.

C&Mon! is intended for authorised property users and administrators. Family and building administrators should manage access for minors appropriately. Camera or sensor records may concern children even where they have no application account. Contact us if you believe a child’s information has been processed unlawfully.

6. Contact Us

For questions about this Privacy Policy or the handling of your information, please contact:

We may update this Privacy Policy to reflect changes to the service or applicable requirements. The latest version carries an updated date and version number. Material changes are communicated where required, and processing requiring new consent is subject to a separate consent request.