Beacon Services Data Use Policy
Version and effective date: 10/02/2026

1. Purpose and application

This Data Use Policy describes how Beacon Services, Inc. ("Beacon," "we," "us," or "our") may create and use aggregated or de-identified data in connection with our services. It applies to a customer ("Customer") when expressly incorporated into a signed services agreement or otherwise validly agreed to in writing (the "Agreement"). Merely visiting this page does not amend an existing Agreement or grant new rights in previously collected data.

This Policy supplements the Agreement and applicable privacy notices. It does not replace privacy disclosures, legally required notices or consents, or an applicable data-processing agreement. If this Policy conflicts with the Agreement or an applicable data-processing agreement, that agreement controls. Nothing in this Policy authorizes processing prohibited by applicable law, third-party rights, or a binding confidentiality obligation that has not been validly modified.

2. Customer Data and service information

"Customer Data" means information, content, communications, recordings, and records supplied by Customer or processed on Customer's behalf in connection with the services. Customer retains its rights in Customer Data. This Policy does not transfer ownership of Customer Data to Beacon.

Subject to the Agreement, applicable law, and any applicable data-processing agreement, Customer grants Beacon a nonexclusive, worldwide, royalty-free license to process Customer Data to provide, support, secure, and maintain the services and to create De-Identified Data under this Policy. Sources may include Wi-Fi and network telemetry, device status, surveillance-system performance, access-control-system performance, and helpdesk or support-ticket information lawfully collected or processed in providing the services.

The permission to create De-Identified Data does not authorize additional interception or collection of network communications or other content beyond what is lawfully authorized for the services.

3. De-Identified Data

"De-Identified Data" means data derived from Customer Data or service information that has been aggregated or otherwise transformed so that it cannot reasonably identify, be linked to, permit identification of, or be used to infer information about a particular individual, household, or device. It must also not reasonably identify Customer or disclose Customer-specific Confidential Information as defined in the Agreement.

Removing names, hashing identifiers, or assigning replacement identifiers does not, by itself, establish that data meets this standard. Beacon will take reasonable measures to address identification risks from indirect identifiers, combinations of data, and information reasonably available to a recipient. Data that fails this standard remains subject to applicable privacy and confidentiality obligations.

4. Permitted uses and commercialization

Beacon may retain, reproduce, analyze, modify, and use De-Identified Data for research, statistical analysis, benchmarking, personnel training, service improvement, product development, and the development, training, testing, and evaluation of algorithms, machine-learning models, and other systems.

Beacon may also publish, sell, license, or otherwise commercialize De-Identified Data and insights derived from it, subject to the safeguards in this Policy and applicable law. Examples include network-reliability benchmarks, equipment-failure trends, and support-resolution statistics that satisfy the de-identification standard.

These permissions apply to qualifying De-Identified Data and outputs. They do not authorize identifiable Customer Data or Customer-specific Confidential Information to be included in training datasets, published outputs, or commercial disclosures. Beacon will take reasonable measures to ensure that models and other outputs developed using De-Identified Data do not expose protected information.

5. Safeguards and third-party recipients

Beacon will maintain reasonable technical and organizational measures to protect De-Identified Data and prevent identification or reidentification. Beacon publicly commits to maintaining and using De-Identified Data in that form and will not attempt to reidentify it.

Before providing De-Identified Data to a third party, Beacon will contractually require that recipient to maintain equivalent protections, refrain from identification or reidentification, and impose equivalent restrictions on any permitted further recipients. These requirements apply to purchasers, licensees, research partners, and technology providers receiving De-Identified Data, including model-training providers.

If Beacon determines that a dataset or output no longer meets this Policy's standard, Beacon will suspend its use or disclosure under this Policy until the issue is remedied and take reasonable steps to address affected recipients and copies.

6. Exclusions and confidentiality

This Policy does not authorize the use or disclosure of identifiable surveillance footage, audio recordings, individual access histories, credentials, or unredacted support communications for training or commercialization. Such information may still be processed as authorized to provide, support, secure, and maintain the services.

Customer-specific trade secrets, security configurations, business information, and other Confidential Information must not be exposed in De-Identified Data or resulting outputs. Where the Agreement expressly permits it, Beacon may process Confidential Information solely as necessary to create qualifying De-Identified Data. The underlying information remains protected under the Agreement.

Automated email footers and similar notices do not, by themselves, amend the Agreement or impose additional contractual obligations. Such notices may identify information as confidential under the Agreement. Their presence or absence does not remove protection arising under the Agreement, another binding agreement, or applicable law.

7. Ownership and retention

As between Beacon and Customer, Beacon owns the datasets and analytical works it creates under this Policy, excluding Customer's rights in underlying Customer Data. This ownership does not override the safeguards or restrictions in this Policy.

Beacon may retain and use qualifying De-Identified Data after expiration or termination of the Agreement, subject to continuing compliance with this Policy and applicable law. This permission does not authorize indefinite retention of identifiable source data, reidentification keys, or Confidential Information; those materials remain subject to applicable retention and deletion requirements.

8. Policy versions and changes

The version expressly incorporated into Customer's Agreement governs that relationship. Beacon may publish revised versions for future agreements, but publication alone does not amend an existing Agreement. Changes applicable to an existing Customer must comply with the Agreement's amendment requirements and applicable law. This Policy does not retroactively expand rights in previously collected data contrary to the commitments governing that data.

9. Contact

Questions about this Policy may be directed to:
Beacon Services, Inc.
Email: ops @beaconservices.io

‍