PublicHome/Software/Products/SplX23/PrivacyPolicy - Revision history

WikiAdmin at 16:46, 6 August 2026

2026-08-06T16:46:09Z

WikiAdmin at 16:41, 6 August 2026

2026-08-06T16:41:29Z

WikiAdmin at 16:08, 6 August 2026

2026-08-06T16:08:33Z

WikiAdmin at 16:07, 6 August 2026

2026-08-06T16:07:31Z

WikiAdmin at 16:06, 6 August 2026

2026-08-06T16:06:25Z

WikiAdmin at 06:31, 28 July 2026

2026-07-28T06:31:54Z

WikiAdmin at 06:27, 28 July 2026

2026-07-28T06:27:02Z

Show changes

WikiAdmin at 06:20, 28 July 2026

2026-07-28T06:20:58Z

WikiAdmin at 06:13, 28 July 2026

2026-07-28T06:13:36Z

Show changes

WikiAdmin: Created page with "SpartanLync X23 Manager Privacy Policy == XXXX == YYY"

2026-07-28T03:27:18Z

Created page with "<strong>SpartanLync X23 Manager Privacy Policy</strong> == XXXX == YYY"

New page

<strong>SpartanLync X23 Manager Privacy Policy</strong>

== XXXX ==

YYY

← Older revision		Revision as of 16:46, 6 August 2026
Line 106:		Line 106:

	Fleet data (status, alerts, logs, statistics) is stored in the X23-Mgr-Service database. It is '''not additionally encrypted at rest'''; it is protected by the transport encryption, authentication, session and role-based controls above, plus the operational security of the hosting environment.		Fleet data (status, alerts, logs, statistics) is stored in the X23-Mgr-Service database. It is '''not additionally encrypted at rest'''; it is protected by the transport encryption, authentication, session and role-based controls above, plus the operational security of the hosting environment.
−
−	~~== Section 9 — Keeping and deleting data ==~~

	== Section 9 — Keeping and deleting data ==		== Section 9 — Keeping and deleting data ==

@@ Line 106: / Line 106: @@
 Fleet data (status, alerts, logs, statistics) is stored in the X23-Mgr-Service database. It is '''not additionally encrypted at rest'''; it is protected by the transport encryption, authentication, session and role-based controls above, plus the operational security of the hosting environment.
 == Section 9 — Keeping and deleting data ==
@@ Line 112: / Line 114: @@
 * '''Delete your cloud data from the App''' — when you're signed in and have data stored in the cloud, the App's '''Factory Reset''' (Settings screen) offers an opt-in to '''delete your X23 Fleet account preferences from the cloud''' before it wipes the App. The App confirms the cloud deletion actually succeeded first; if it can't reach the service, the reset is cancelled so nothing is left half-deleted.
 * '''In the cloud''' — any remaining data is kept only as long as needed to provide the service, or as required by law. You can request deletion at any time at support@spartanlync.com.
 == Section 10 — Children ==

@@ Line 91: / Line 91: @@
 Shared data goes to SpartanLync's cloud only to reach authorized Fleet members. It is '''never sold''' or shared with third parties for advertising.
-== Section 7 — Cloud archival ==
+== Section 7 — Cloud Archival and Sync ==
 Once you're signed in, the Gateway/Node Logs, Statistics and Alerts/Status cached on your device may upload to the '''SpartanLync X23-Mgr-Service'''.

@@ Line 74: / Line 74: @@
 When you sign in, we process your '''email, credentials and account role''' (User, Subscriber, Partner, Partner_Manager, Staff or Admin) to authenticate you and decide which features you can use.
-Sign-in runs through SpartanLync's single sign-on (Keycloak). Your password is validated there and is '''never stored''' by the App or the X23-Mgr service.
+Sign-in runs through SpartanLync's single sign-on (Authentication Server). Your password is validated there and is '''never stored''' by the App or the X23-Mgr service.
 == Section 6 — Fleet-Share ==
@@ Line 103: / Line 103: @@
 Traffic between the App and the '''SpartanLync X23-Mgr-Service''' is protected in transit by '''SSL/TLS (HTTPS)'''. The service is a Laravel web application on a LAMP stack.
-Access requires authentication. Sign-in validates your credentials against SpartanLync single sign-on (Keycloak) over TLS. The service then issues a session token and stores only a one-way '''SHA-256 hash''' of it — never the token itself. Every request is authorized by that token and scoped to your Fleet and role. Inactive sessions expire and are removed automatically.
+Access requires authentication. Sign-in validates your credentials against SpartanLync single sign-on (Authentication Server) over TLS. The service then issues a session token and stores only a one-way '''SHA-256 hash''' of it — never the token itself. Every request is authorized by that token and scoped to your Fleet and role. Inactive sessions expire and are removed automatically.
 Fleet data (status, alerts, logs, statistics) is stored in the X23-Mgr-Service database. It is '''not additionally encrypted at rest'''; it is protected by the transport encryption, authentication, session and role-based controls above, plus the operational security of the hosting environment.

← Older revision		Revision as of 16:06, 6 August 2026
Line 94:		Line 94:

	Once you're signed in, the Gateway/Node Logs, Statistics and Alerts/Status cached on your device may upload to the '''SpartanLync X23-Mgr-Service'''.		Once you're signed in, the Gateway/Node Logs, Statistics and Alerts/Status cached on your device may upload to the '''SpartanLync X23-Mgr-Service'''.
		+
		+	Each upload is labelled so your Fleet can make sense of it. Alongside the Logs, Statistics and Alerts/Status themselves, we transmit the Gateway/Node ECU identifier the data came from, your Fleet ID, and the email address of the signed-in account. Sensor IDs and Gateway/Node Bluetooth addresses are included where they form part of the Train configuration you publish. These identifiers remain associated with your account for as long as the record is kept (see Section 9).

	This powers Fleet-wide status, historical archival and reporting for your organization. It happens for authenticated users only.		This powers Fleet-wide status, historical archival and reporting for your organization. It happens for authenticated users only.

@@ Line 108: / Line 108: @@
 * '''On your device''' — kept until you delete it in the App or uninstall.
-* '''In the cloud''' — kept as long as needed to provide the service, or as required by law. Request deletion any time at support@spartanlync.com.
+* '''Delete your cloud data from the App''' — when you're signed in and have data stored in the cloud, the App's '''Factory Reset''' (Settings screen) offers an opt-in to '''delete your X23 Fleet account preferences from the cloud''' before it wipes the App. The App confirms the cloud deletion actually succeeded first; if it can't reach the service, the reset is cancelled so nothing is left half-deleted.
 == Section 10 — Children ==

← Older revision		Revision as of 06:20, 28 July 2026
Line 1:		Line 1:
−	< [[PublicHome/Software/Products/SplX23\|SpartanLync X23 System]]	+	[[PublicHome/Software/Products/SplX23\|SpartanLync X23 System]]

	= SpartanLync X23 Manager — Privacy Policy =		= SpartanLync X23 Manager — Privacy Policy =