Privacy PolicyOver Air Entry LLC
Effective Date: September 8, 2026
Last Updated: September 8, 2026Over Air Entry LLC (“Over Air Entry,” “OAE,” “we,” “us,” or “our”) provides mobile credential, cloud-based access-control, and related technology services. This Privacy Policy explains how we collect, use, disclose, retain, and protect information when individuals use our mobile applications, websites, cloud services, mobile credentials, Bluetooth Low Energy (“BLE”) access-control devices, and related services (collectively, the “Services”).Our Services are generally used to provide authorized access to doors, gates, amenities, facilities, and other secured areas on behalf of property owners, homeowners associations, property managers, employers, facility operators, and other organizations (“Customers”).By using the Services, you acknowledge the practices described in this Privacy Policy.1. Information We CollectThe information we collect depends on how the Services are configured and how you interact with them.Account and Credential InformationWe may collect or process information used to establish, administer, or authenticate your mobile access credential, including:Name;Email address;Telephone number, if provided;User or account identifier;Mobile credential identifier;License or activation code;Customer, property, community, or organization affiliation;Doors, gates, amenities, or locations to which you have been granted access;Access schedules, permissions, and expiration dates; andAccount status and credential status.Some of this information may be provided directly by the Customer that authorized your access rather than by you.Access-Control ActivityWhen you use a mobile credential to interact with an OAE-enabled access-control device, we may process information concerning the access event, such as:Credential or user identifier;Door, gate, reader, or device identifier;Date and time of the access request;Whether access was granted or denied;Credential status;Device or system status associated with the transaction; andTechnical information necessary to diagnose or secure the access transaction.These records may constitute an access history showing when a credential was presented at a particular access-controlled location.Mobile Device InformationWe may automatically receive limited technical information about the device used with our Services, including:Device type;Operating system and version;Application version;Device or application identifiers;Bluetooth capabilities and status;Network and connectivity information;Diagnostic information;Crash information; andSecurity-related information necessary to authenticate or protect the mobile credential.We limit collection of device information to information reasonably necessary to provide, secure, maintain, and improve the Services.2. Bluetooth and Nearby Device AccessThe OAE mobile application uses Bluetooth Low Energy (“BLE”) to communicate with compatible access-control hardware.Bluetooth may be used to:Detect compatible OAE access-control devices;Establish communication between the mobile device and access-control hardware;Authenticate an authorized mobile credential;Request that an authorized door, gate, or other access point be unlocked; andConfirm or troubleshoot communications with access-control equipment.Depending on the mobile operating system and version, Apple or Google may require the application to request Bluetooth, Nearby Devices, or similar system permissions.Bluetooth Is Not GPS TrackingOAE's use of Bluetooth for access control does not, by itself, mean that OAE continuously tracks the physical location of your mobile device.The Services may, however, create an access event when your credential interacts with a known access-control device. Because a particular access-control device may be associated with a known door, gate, or facility, an access record may indicate that your credential was used at that location at a particular time.This is different from continuously monitoring the geographic location of your phone.3. Location InformationUnless expressly disclosed in the application and permitted by you, OAE does not use GPS or similar technologies to continuously track your geographic location.Certain mobile operating systems may categorize Bluetooth or nearby-device functionality as location-related functionality or may historically have required location permissions for Bluetooth scanning.Where a device's operating system requires a permission to enable BLE functionality, the application may request the permission necessary to provide the access-control feature.We do not use such permission for unrelated continuous location tracking unless we separately disclose that use and obtain any consent required by applicable law.4. How We Use InformationWe may use information collected through the Services to:Create, activate, authenticate, and manage mobile credentials;Determine whether a user is authorized to access a particular door, gate, facility, or amenity;Communicate with BLE access-control devices;Process access requests;Maintain access-event and security records;Allow Customers to administer users, credentials, doors, and access schedules;Diagnose device, application, connectivity, or access-control problems;Provide customer support;Detect unauthorized access, credential misuse, fraud, or security threats;Maintain and improve the reliability and security of the Services;Send operational or security-related communications;Comply with contractual obligations;Comply with applicable law, regulation, legal process, or governmental requests; andProtect OAE, our Customers, users, and others.We do not use access-control activity to create advertising profiles based on a user's movements.5. Our Customers and Your Access AdministratorIn many deployments, OAE provides the Services on behalf of a Customer, such as an HOA, property manager, community association, employer, building operator, facility manager, or other organization.That Customer determines matters such as:Who receives access;Which doors or facilities a person may access;When access is permitted;When a credential is suspended or revoked;What identifying information is associated with a credential; andHow access records are used for the Customer's legitimate operational or security purposes.In these circumstances, the Customer may act as the organization responsible for determining how your personal information is used, while OAE processes information to provide the Services on the Customer's behalf.Questions concerning why you were granted or denied access, your access schedule, or a Customer's use of your access records should generally be directed to the organization that issued your credential.6. How We Disclose InformationWe may disclose information as reasonably necessary to operate and provide the Services.This may include disclosure to:Customers and Access Administrators. The organization responsible for your credential may have access to information relating to your credential, permissions, and access activity.Service Providers. We may use infrastructure, hosting, communications, security, analytics, customer-support, and other vendors that process information on our behalf.Security and Legal Purposes. We may disclose information when reasonably necessary to investigate fraud, unauthorized access, security incidents, violations of our agreements, or threats to persons or property.Legal Requirements. We may disclose information when required by law, subpoena, court order, legal process, or other valid governmental request.Business Transactions. Information may be transferred as part of a merger, acquisition, financing, reorganization, sale of assets, or similar corporate transaction.We do not sell personal information merely because a user uses an OAE mobile credential.We do not sell access histories for third-party behavioral advertising.7. Data RetentionWe retain personal information for as long as reasonably necessary to:Provide the Services;Maintain active credentials;Fulfill our contractual obligations to Customers;Maintain appropriate security and access-control records;Resolve disputes;Enforce agreements;Meet legitimate business requirements; andComply with applicable law.Retention periods may differ depending on the Customer's configuration, contractual requirements, the type of information, and applicable legal requirements.When information is no longer reasonably necessary, we may delete, anonymize, or aggregate it, subject to applicable legal and contractual obligations.8. SecurityBecause the Services control access to physical locations, security is an important part of our operations.We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, loss, or destruction.Depending on the applicable system and deployment, these measures may include authentication controls, encrypted communications, credential protections, access restrictions, monitoring, and other security safeguards.However, no mobile application, wireless communication technology, network, cloud service, or electronic storage system can be guaranteed to be completely secure.Users should protect their mobile devices, device passcodes, account information, and activation or license codes from unauthorized use.9. Lost or Stolen DevicesIf a device containing an OAE mobile credential is lost, stolen, transferred to another person, or otherwise compromised, you should promptly notify the organization that issued your credential or the appropriate access administrator.The credential may be disabled or revoked to prevent unauthorized use.10. Application PermissionsThe OAE application may request operating-system permissions necessary for particular functionality.Depending on the device and operating system, these may include:Bluetooth / Nearby Devices: Used to discover and communicate with compatible access-control hardware.Notifications: If enabled, used to provide relevant application, credential, access, or service notifications.Network Access: Used to communicate with OAE cloud services and support credential and account functionality.OAE will seek to request only permissions reasonably related to features provided by the application.You may manage certain permissions through your device settings. Disabling a required permission, particularly Bluetooth or Nearby Devices, may prevent mobile access from functioning correctly.11. Analytics and DiagnosticsWe may collect application performance, crash, diagnostic, and usage information to maintain and improve the reliability, security, and performance of the Services.Where third-party service providers process such information for us, we require them to process information in accordance with their contractual obligations and applicable law.We do not use access-control activity for third-party targeted advertising.12. Children's PrivacyThe Services are not designed or marketed as consumer services directed to children under 13.A Customer may, however, authorize credentials for members of a household or other authorized individuals where permitted by applicable law and the Customer's policies.If we learn that personal information has been collected in violation of applicable children's privacy laws, we will take appropriate steps to address the information.13. Your Privacy RightsDepending on where you reside and applicable law, you may have rights concerning your personal information, including rights to:Request access to certain personal information;Request correction of inaccurate information;Request deletion of certain information;Obtain information regarding categories of information collected or disclosed; orExercise other rights provided by applicable privacy law.Because OAE frequently processes information on behalf of Customers, we may direct a request concerning Customer-controlled information to the Customer that issued your credential.We may need to verify your identity before processing a privacy request.We will not unlawfully discriminate against you for exercising an applicable privacy right.14. U.S. State Privacy DisclosuresResidents of certain U.S. states may have additional privacy rights under applicable state privacy laws.Where such laws apply, OAE will process requests and provide required disclosures in accordance with applicable law.OAE does not sell personal information or share personal information for cross-context behavioral advertising based solely on an individual's use of an OAE mobile access credential.15. Third-Party ServicesOur Services may interact with or rely upon services provided by third parties, including mobile operating-system providers, cloud infrastructure providers, communications providers, property-management platforms, and access-control systems.Those third parties may process information according to their own privacy policies when you interact directly with their products or services.This Privacy Policy applies to information processed by OAE and does not replace the privacy policies of a Customer, property manager, HOA, employer, Apple, Google, or another third party.16. Changes to This Privacy PolicyWe may update this Privacy Policy periodically to reflect changes in our Services, technology, legal requirements, or business practices.When we make changes, we will update the “Last Updated” date above. Where required by law, we will provide additional notice or obtain consent before material changes become effective.17. Contact UsQuestions, concerns, or requests regarding this Privacy Policy or OAE's privacy practices may be directed to: mswanson@overairentry.com