Who we are
This policy explains how [legal business name] (“Sterling Security”) handles personal information collected through sterlingsecurity.org, Sterling Security accounts and the Sterling Lake host program.
Information we collect
Account information
- Email address, password (stored only as a one-way hash), optional display name.
- Security information: two-factor authentication settings, sign-in times, a shortened network address (for example the first three parts of an IPv4 address) and browser description for each session.
Sterling Lake host applications
- Full legal name, contact email, phone number and installation property address.
- A description of the location, confirmation of your authority to approve installation, whether Wi-Fi is available and the Wi-Fi network name (SSID).
- Your preferred payment method and, if you choose Cash App, your $Cashtag.
- Records of agreements you accepted and the status of your application.
We never ask for or store your Wi-Fi password online. Wi-Fi is configured on site by our technician using authorized installation equipment.
Identity verification
Identity is verified before approval, either in person by an authorized Sterling Security technician or through a third-party identity verification provider. We do not upload or store photos or scans of identification documents, or ID numbers, on our systems. For in-person checks we record only the outcome, who recorded it and when. If you use an online provider, the provider collects and processes your identification data under its own privacy terms and returns to us only a verification result and a reference number.
Equipment and environmental data
Installed equipment reports its connection status, firmware version and the environmental measurements described in the host agreement (for example water temperature). It does not collect audio, video or information about people at the property.
Contact messages
Name, email, topic and the message you send through our contact form.
How we use information
- To provide your account, keep it secure and send transactional emails (verification, password reset, application updates).
- To review applications, verify identity, schedule installation, maintain equipment and pay host compensation.
- To respond to inquiries and comply with legal obligations.
We do not sell personal information and do not use it for third-party advertising.
How we protect information
- All traffic is encrypted with HTTPS.
- Application details, notes and contact messages are encrypted in our database.
- Administrator access requires two-factor authentication, is limited by role and is recorded in an audit log.
- Backups are encrypted at rest on restricted storage.
Sharing
We share information only with service providers that help us operate the Service — such as our hosting provider ([hosting provider]), our email delivery provider ([email provider]) and, if used, our identity verification provider ([provider]) — or when required by law.
Retention
- Account information is kept while your account is open.
- Personal details in declined or closed applications are deleted [365] days after closing.
- Closed contact inquiries are deleted after [365] days; email delivery logs after [180] days.
- Payment amounts and dates may be kept longer for financial records, without other personal details.
Your choices
You can update your profile, download your data and request account deletion from account settings, or contact us with a privacy request. [Add any state-specific rights that apply.]
Children
The Service is not directed to children and accounts are for adults 18 and over.
Changes and contact
We will post updates here and notify account holders of material changes. Contact us through the contact page.