LEGAL

Privacy Policy

Last updated: March 2026

Key distinction: MyWiFi processes guest WiFi data on behalf of Resellers. Resellers are the data controller; MyWiFi is the data processor. See our DPA for full processing details.

Information We Collect

MyWiFi Networks collects two categories of personal data: (1) data provided directly by Resellers in connection with their platform accounts, and (2) guest personal data processed on behalf of Resellers through deployed captive portals.

Reseller account data includes: name, email address, company name, billing address, payment method details (held by our payment processor, Stripe), IP address, and usage data generated through your use of the dashboard, API, and associated services.

Guest portal data — collected on behalf of Resellers — includes: email address, phone number, authentication identifiers (oAuth provider, WhatsApp), device MAC address, device type and operating system, connection timestamps, dwell time, and location identifiers. The specific fields collected depend on the portal configuration each Reseller has deployed.

How We Use Your Information

We use Reseller account data to: provision and maintain your platform account, process subscription payments, provide customer support, send transactional communications (receipts, alerts, product updates), and improve the Service through aggregated analytics.

Guest portal data is processed strictly on behalf of the Reseller as data controller. MyWiFi does not use guest data for its own marketing, does not sell guest data to third parties, and does not profile guests for purposes beyond what is specified in the applicable Data Processing Agreement.

We may use aggregated, anonymized data across all accounts — for example, aggregate connection counts or regional usage statistics — to publish benchmarks and improve the platform. Such data cannot be used to identify any individual guest or Reseller.

Data Sharing

We share personal data only as necessary to deliver the Service. This includes sharing with sub-processors (cloud infrastructure, email delivery, payment processing, analytics tooling) under contractual data protection obligations. A current list of sub-processors is available on request.

We do not sell, rent, or trade personal data. We may disclose data if required by law, court order, or governmental authority, or to protect the rights, property, or safety of MyWiFi, our Resellers, or others. We will notify affected parties of such requests where legally permitted.

In the event of a merger, acquisition, or asset sale, personal data held by MyWiFi may be transferred to the acquiring entity. We will provide notice of such transfers and require the acquiring party to maintain equivalent protections.

Guest Data vs. Reseller Data

This distinction is critical: MyWiFi processes guest WiFi data on behalf of Resellers. Resellers are the data controller for all guest personal data collected through portals they deploy. MyWiFi is the data processor. This means Resellers determine the purpose and means of processing guest data; MyWiFi processes it only according to Reseller instructions and our Data Processing Agreement.

As data processor, MyWiFi does not make independent decisions about how guest data is used, retained, or shared beyond what is required to deliver the Service to the Reseller. Resellers are responsible for providing guests with appropriate privacy notices at the point of WiFi connection and for handling any data subject requests that guests may make.

Guests seeking to exercise rights over their personal data (access, erasure, rectification) should contact the venue operator or Reseller who deployed the portal they used. MyWiFi will assist Resellers in fulfilling such requests as required by applicable law.

GDPR and Privacy Rights

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) or equivalent legislation. These include: the right to access your personal data, the right to rectify inaccurate data, the right to erasure ("right to be forgotten"), the right to restrict or object to processing, and the right to data portability.

For Reseller account data, MyWiFi is the data controller. To exercise your rights regarding your account data, contact us at privacy@mywifinetworks.com. We will respond to all verified requests within 30 days.

MyWiFi's lawful basis for processing Reseller account data is: contract performance (account registration and service delivery), legitimate interests (security, fraud prevention, product improvement), and legal obligation (financial record-keeping). We do not process Reseller data based on consent.

Data Retention

Reseller account data is retained for the duration of the subscription and for 7 years thereafter for tax and financial compliance purposes. Support tickets and communications are retained for 3 years. Dashboard usage logs are retained for 90 days.

Guest portal data retention periods are configured by Resellers within the platform (minimum 30 days, maximum 7 years). Upon Reseller account termination, guest data is retained for 30 days to allow data export, then permanently deleted unless a longer retention is required by law.

You can request deletion of your Reseller account data at any time by contacting privacy@mywifinetworks.com. Note that some data may be retained for legal compliance purposes even after an account deletion request.

Cookies and Tracking

The MyWiFi dashboard and marketing website use cookies and similar technologies for authentication (session cookies), security (CSRF protection), and analytics (aggregate usage statistics via privacy-focused analytics). We do not use advertising cookies or cross-site tracking.

Captive portals deployed by Resellers may use cookies as configured by the Reseller. Resellers are responsible for ensuring that portal cookie usage complies with applicable law, including obtaining consent where required.

You can control cookies through your browser settings. Disabling authentication cookies will prevent access to the platform dashboard.

Contact

For privacy enquiries, data subject requests, or questions about this Policy, contact our Privacy team at privacy@mywifinetworks.com. For EU/UK data protection matters, our Data Protection Officer can be reached at dpo@mywifinetworks.com.

Guest Networks Inc., 100 King Street West, Toronto, Ontario, M5X 1C7, Canada.