Privacy Policy
Effective 2026-09-22 · Version 1 · LarsCo LLC
1. Scope of this policy
This Privacy Policy describes how LarsCo LLC ("LarsCo," "we," "us") collects, uses, discloses, and protects information when you visit roamiq.com (the "Site"). It does not govern the ROAMiQ Cloud subscription service or the ROAMiQ Home Assistant add-on, both of which are covered by the ROAMiQ Cloud Privacy Policy.
The Site is currently offered to residents of the United States. If you access it from outside the US, you do so on your own initiative and are responsible for compliance with local law.
2. Who we are
LarsCo LLC is a South Dakota limited liability company with its principal place of business in Sioux Falls, South Dakota. You can reach our privacy team at [email protected].
3. What we collect
When you use the Site we collect:
- Information you provide — your name, email address, and message contents when you fill out our contact form or email signup.
- Usage data — pages viewed, links clicked, browser and device info, approximate location derived from IP, referrer URL. Collected via Google Analytics 4 unless you opt out (see §6).
- Email engagement — opens, clicks, and unsubscribes, when we send you a marketing email via Klaviyo.
- Server logs — IP address, user-agent, timestamps, kept by our hosting provider (Vercel) for operational and security purposes.
We do not knowingly collect biometric data, precise GPS coordinates, health information, or financial-account numbers through the Site. Payment-card data is never handled on this Site; subscriptions to ROAMiQ Cloud are billed by Stripe via cloud.roamiq.com.
4. How we use it
- Operate, secure, and improve the Site.
- Respond to your inquiries and provide customer service.
- Send marketing communications when you have opted in. You can unsubscribe any time by clicking the link in any email or by emailing [email protected].
- Produce aggregated, de-identified statistics about Site traffic and conversion.
- Comply with law and prevent fraud or abuse.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
7. Retention
- Contact-form submissions: 24 months from receipt.
- Klaviyo subscriber profile: retained until unsubscription plus 12 months for suppression-list purposes.
- Server logs and security events: 90 days (rolling) at Vercel and Cloudflare.
- GA4 user-level data: 14 months (configured retention).
8. Your rights
Subject to applicable law, you have the right to:
- Know what personal information we have about you.
- Access, correct, or delete that information.
- Withdraw consent to marketing or analytics.
- Receive a portable copy of information you provided to us.
- Lodge a complaint with the appropriate consumer-protection or data authority.
To exercise any of these rights, email [email protected]. We will respond within the timeframes required by applicable law (45 days for CCPA/CPRA; extensions where permitted).
9. California rights (CCPA / CPRA)
If you are a California resident, you have specific rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act. You may request to:
- Know the categories of personal information we collect.
- Access the specific pieces of personal information we hold.
- Delete personal information.
- Correct inaccurate personal information.
- Opt out of any future sale or sharing of personal information (note: we currently do neither).
- Limit use of sensitive personal information.
- Be free from discrimination for exercising any of the above.
We do not sell personal information or share it for cross-context behavioural advertising. We have a 30-day right-to-cure period under Civ. Code § 1798.150(b).
10. Children
The Site is not directed to anyone under 16. We do not knowingly collect personal information from a child under 13. If we learn we have collected such information from a child under 13, we will terminate the relevant account or record and delete the information within 14 days as required by COPPA (16 C.F.R. Part 312). Parents or guardians may contact [email protected] to request deletion.
11. Security
We use TLS in transit, modern password hashing where applicable, access controls limited to a small operations team, security-event monitoring, and security-by-design review for new features. Connected devices manufactured or sold by LarsCo follow California SB 327 (Cal. Civ. Code § 1798.91.04) baseline requirements, including unique pre-programmed credentials and required new- credential setup before first access.
No system is perfectly secure. To report a vulnerability, please see our Vulnerability Disclosure Policy or email [email protected].
12. International users
The Site is hosted in the United States and intended for US residents. If you visit from outside the US, your information will be transferred to and processed in the United States. ROAMiQ Cloud subscriptions are not offered outside the United States.
13. Changes to this policy
We may update this policy from time to time. The effective date and version above always show the current version. Material changes will be announced via a notice on the Site for at least 30 days before they take effect.
14. Contact
LarsCo LLC · Sioux Falls, South Dakota · [email protected]