Privacy Policy

BeaverPaw is operated by ZeroShare, Inc., a Rhode Island corporation ("we", "us", "our"). This Privacy Policy explains how we collect, use, store, share, and protect your information when you use the BeaverPaw website (beaverpaw.com), the BeaverPaw mobile application, the BeaverPaw cloud platform, and BeaverPaw hardware devices (collectively, the "Service").

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, do not use the Service.

1. Information We Collect

Account Information

When you create a BeaverPaw account, we collect your name, email address, and authentication credentials. Account authentication is handled through Auth0, a third-party identity provider. We do not store your password directly — Auth0 manages your login credentials and session tokens on our behalf.

Device Information

When you register a BeaverPaw hardware device, we collect the device serial number, MAC address, firmware version, hardware revision, and configuration settings. During normal operation, your device transmits:

• Alarm state changes (armed, disarmed, triggered)
• Sensor events (motion detection triggers with timestamps and accelerometer data)
• Connectivity status (WiFi signal strength, cloud connection state)
• Diagnostic information (uptime, memory usage, error logs)
• Firmware update status

Usage Data

We collect information about how you interact with the Service, including app usage patterns, feature usage, alarm arm/disarm events, notification interactions, group membership activity, and firmware update history. We also collect standard web analytics data: browser type, operating system, IP address, referring URLs, and pages visited.

Purchase Information

When you make a purchase, we collect your name, email address, shipping address, and order details. Payment processing is handled entirely by Stripe. We do not receive, store, or have access to your full credit card number, CVV, expiration date, or other sensitive payment card data. We receive only a transaction confirmation, the last four digits of your card, and card type for order records.

Location Data

BeaverPaw devices do not include a GPS module and do not track the geographic location of your motorcycle. The device does not collect or transmit location data. We may infer your approximate region from your IP address for analytics purposes and to comply with applicable tax and regulatory requirements.

Communications

When you contact our support team or send us email, we collect the content of your messages, your email address, and any attachments you provide. We use this information solely to respond to and resolve your inquiry.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the Service, including device communication, push notifications, remote control, event history, and group sharing
• Process and fulfill your orders, including shipping, invoicing, and customer support
• Deliver firmware updates to your BeaverPaw device over the air
• Send transactional communications: order confirmations, shipping updates, security notices, and group invitations
• Improve the product based on aggregated, de-identified usage data and error reports
• Detect, prevent, and address technical issues, fraud, abuse, and security incidents
• Comply with legal obligations and enforce our Terms of Service

We do not sell your personal information. We do not use your data for advertising. We do not share your information with third parties for their marketing purposes.

3. Data Storage and Security

Your data is stored on Amazon Web Services (AWS) infrastructure in the United States (us-east-1 region). Data is encrypted in transit using TLS 1.2 or higher and encrypted at rest using AES-256 encryption.

Communication between your BeaverPaw device and our cloud platform uses TLS-encrypted MQTT connections through AWS IoT Core. Communication between your phone and your BeaverPaw device over Bluetooth Low Energy uses LE Secure Connections with authenticated encryption.

OTA firmware updates are cryptographically signed using Ed25519 digital signatures. Your device verifies the signature before applying any update, preventing unauthorized firmware from being installed.

We implement industry-standard security measures including IAM access controls, audit logging, and encrypted storage. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify affected users within 72 hours as required by applicable law.

4. Third-Party Services

We use the following third-party services to operate BeaverPaw. Each processes only the data necessary for their specific function:

• Stripe, Inc. — Payment processing. Stripe collects and processes your payment card information directly under their own PCI DSS-compliant infrastructure. Privacy policy: stripe.com/privacy
• Auth0 (Okta, Inc.) — Authentication services. Auth0 processes your login credentials, manages session tokens, and stores hashed passwords. Privacy policy: auth0.com/privacy
• Firebase Cloud Messaging (Google LLC) — Push notification delivery. Google processes device tokens necessary for notification routing. Privacy policy: policies.google.com/privacy
• Amazon Web Services (AWS) — Cloud infrastructure for data storage, computing, IoT device communication, and email delivery (SES). Privacy policy: aws.amazon.com/privacy

We do not share your personal information with any other third parties except as required by law (see Section 8).

5. Data Retention

When you delete your account, your personal information is removed within 30 days, except where retention is required by law (e.g., purchase records for tax compliance). De-identified, aggregated data may be retained indefinitely for analytics purposes.

6. Your Rights

Depending on your jurisdiction, you have the right to:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate personal data
• Deletion — Request deletion of your personal data (subject to legal retention requirements)
• Portability — Request your data in a machine-readable format
• Withdrawal of Consent — Withdraw consent for optional data processing at any time
• Opt-Out of Sale — We do not sell personal information, but you may exercise this right at any time

To exercise any of these rights, contact privacy@beaverpaw.com. We will respond within 30 days (or within the time required by applicable law). We may need to verify your identity before processing your request.

7. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information:

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale/Sharing: We do not sell or share (as defined by CCPA/CPRA) your personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To submit a CCPA request, email privacy@beaverpaw.com with the subject line "CCPA Request". We will verify your identity and respond within 45 days.

In the preceding 12 months, we have collected the following categories of personal information: identifiers (name, email), commercial information (purchase history), internet activity (usage data, device events), and geolocation (approximate, from IP). We have not sold any personal information.

8. Disclosure to Law Enforcement

We may disclose your personal information if required to do so by law or in response to valid legal process, including subpoenas, court orders, or government requests. We will notify you of such requests unless prohibited by law or court order.

We may also disclose information when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

9. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will delete it within 30 days. If you believe we have collected information from a minor, please contact us immediately at privacy@beaverpaw.com.

10. International Data Transfers

Your data is processed and stored in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to this transfer.

11. Cookies and Tracking

We use essential cookies for authentication session management (provided by Auth0) and shopping cart functionality. These cookies are necessary for the Service to function and cannot be disabled.

We do not use advertising cookies, tracking pixels, or third-party analytics services that track you across websites. We do not participate in cross-site tracking or targeted advertising.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page, updating the "Last updated" date, and sending a notice to the email address associated with your account at least 30 days before the changes take effect. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or have a privacy concern, contact us at: