AadeeDraft. This policy describes what the software stores today. It must be reviewed by a qualified lawyer (UK GDPR and India's Digital Personal Data Protection Act 2023) before AadeeRMM is offered to paying customers.
1. Who is responsible
Aadee Infosys Ltd (England and Wales) runs AadeeRMM. Contact: aadeermm@aadeeinfosys.com.
- For the accounts of our subscribers and their technicians, and for this website, we are the controller.
- For data about the computers our subscribers manage and the people who use them, the subscriber is the controller and we process it on their behalf. People using a managed computer should contact the organisation that manages it first.
2. What we process and why
| Data | Why | How long |
|---|---|---|
| Technician accounts: name, email, role, password hash, two-factor secret (encrypted), sign-in sessions and IP addresses | To provide secure sign-in (contract, security) | While the account exists |
| Device information: computer name, Windows version, hardware, installed software, update status, performance figures, local and public IP address, signed-in user name | Monitoring and management (contract) | While the device is managed |
| Audit log: who did what and when, including remote sessions, chat messages, terminal commands as typed, and file transfers (names and paths) | Security and accountability for the subscriber and the people using managed computers | While the subscription exists |
| Screen recordings (only when a technician chooses to record a session; the user is told) | Quality and dispute resolution for the subscriber | Encrypted; deleted after the subscriber's retention period (default 30 days) |
| Files transferred to or from a computer | To deliver the transfer | Deleted from our server once delivered, and after 1 hour at the latest |
| Script and terminal output | So the technician can see the result | Script output is kept with the run history; terminal output is not stored |
| Voice calls | Real-time conversation only | Never recorded or stored; only the fact of the call and its length are logged |
| Billing contact details and payment records | Invoicing and tax law | As long as tax law requires |
We do not sell personal data, use it for advertising, or use your data to train AI models.
3. Where it is kept and who else sees it
The Service runs on servers operated by Aadee Infosys; the location is stated in your order. We use a small number of suppliers: our email provider (for notifications), Let's Encrypt (web certificates, no personal data) and Microsoft (code signing of our software, no personal data). When data moves between countries, we use the safeguards the law requires.
4. Security
All traffic is encrypted (HTTPS/TLS). Passwords are hashed; two-factor secrets and recordings are encrypted at rest. Access is limited by roles, and every sensitive action is written to a tamper-evident audit log. Remote sessions, chats and calls on a managed computer are always visible to the person using it.
5. Your rights
Depending on where you live, you can ask to access, correct, delete or export your personal data, object to or restrict processing, and complain to a data protection authority (in the UK, the Information Commissioner's Office; in India, the Data Protection Board). If your data is in the Service because an organisation manages your computer, please contact that organisation; we will help them answer you.
6. Cookies
The AadeeRMM console uses only the cookies needed to keep you signed in securely. This website does not use tracking or advertising cookies.
7. Changes
We will post updates here and tell subscribers about important changes.