JEKA Policies

Version 1.8 — in force since September 7, 2026. If you accepted this policy inside a JEKA application, the version you accepted there governs. All policies

MYWATCHTOWER PLATFORM PRIVACY NOTICE

Version 1.8 • Effective Date: September 7, 2026

This Platform Privacy Notice explains how JEKA Software, Inc., a Delaware corporation with its principal office in Land O’ Lakes, Florida (“JEKA,” “we,” “us”), collects, uses, shares, and retains information through the MyWatchtower platform — its web application, entry kiosks, cameras, mobile applications, and related services (the “Platform”). It supplements the JEKA Software Website Privacy Policy at portal.jekasoftware.com/policies/site-privacy/, which covers our marketing websites; where this Notice and the website policy overlap for Platform data, this Notice controls.

MyWatchtower serves communities — homeowners’ associations, community development districts, and property operators (each, a “Community”). An important starting point: as between JEKA and each Community, the Community owns the records generated by its use of the Platform (its “Facility Data”). JEKA processes that data to deliver the service. Your Community and its administrators decide who is credentialed, what access rules apply, and how entry information is used within the Community.

1. What We Collect

  • Account and profile information. Name, email address, phone number, unit or property association, role (administrator, resident, staff), and login credentials.
  • Sign-in provider information. If you create or access an account using a third-party sign-in provider — Facebook, Google, or Apple — we receive your name, email address, and account identifiers from that provider. If you use Sign in with Apple, the email address we receive may be an Apple private-relay address rather than your personal email.
  • Entry and access records. Who or what entered or exited, the property involved, the access point or lane, the entry method, the outcome (approved or denied), timestamps, and related notes.
  • Photographs. A photograph is captured on every kiosk entry.
  • Video clips and Live Assist recordings. Kiosks record a short video clip of each entry; the clips do not include audio, and on-screen notice of recording is displayed at each kiosk. Calls placed from a kiosk to a resident are live and are not recorded. MyWatchtower Live Assist sessions — including any call a Live Assist agent places to a resident — may be recorded for quality assurance, training, and entry documentation; an audible notice is played when a Live Assist session begins.
  • Vehicle information. License plate captures from license plate recognition (LPR) cameras, and vehicle records including make, model, year, color, plate, and state of registration.
  • Credential data. Access credentials issued through the Platform — QR codes, PINs, card and fob identifiers (including card numbers and facility codes), and mobile passes — and their use history.
  • Guest, vendor, and visitor records. Names and visit details for people your Community or its residents authorize, including standing entries such as delivery services.
  • Identity verification scans. At kiosks and at staffed gates, a visitor’s government-issued identification (such as a driver’s license, passport, or state ID) may be scanned to verify identity. Our systems are designed to extract only the visitor’s name from the scan to generate a unique reference value (a hash) and not to retain the identification image, the ID number, date of birth, or any other field from the document.
  • Restricted-entry records. Communities may maintain records of individuals who are not to be admitted; these records are created and controlled by the Community.
  • Communications data. Support tickets, notification history, and — if you opt in to text messages — the SMS data described in the JEKA Software SMS / Text Messaging Terms at portal.jekasoftware.com/policies/sms-terms/, which are incorporated here.
  • Usage and device data. Log data, device and browser information, and analytics about how the Platform is used, collected through cookies and similar technologies.

2. Where It Comes From

We receive information directly from you (when you create an account, issue a guest credential, or contact support); from your Community and its administrators (rosters, property records, access rules, restricted-entry records); automatically from kiosks, cameras, and LPR equipment at your Community; from third-party sign-in providers (Facebook, Google, or Apple) when you choose to authenticate through them; from authorized integrators servicing your Community’s account; and from third-party platforms your Community uses with MyWatchtower, such as Brivo or HID access control and Eagle Eye Networks video services.

3. How We Use It

We use Platform information to operate the service: processing entries and access decisions, delivering entry notifications (which may include photographs and recordings) to the relevant residents and administrators, maintaining the Community’s entry and audit records, providing Live Assist entry processing where purchased, and providing user and platform support. We also use it for safety documentation and community administration, to secure the Platform and prevent fraud and misuse, to maintain and improve the service — including developing, training, and improving our AI-enabled entry- and visitor-processing features — and to comply with law. Recipients of entry notifications may use included photographs and recordings only for entry management, safety documentation, and community administration — the use limits in the MyWatchtower Terms of Service & EULA apply.

4. How We Share It

  • With your Community. Administrators and, as configured, residents see entry records, recordings, and related data for their Community — that is the product working as intended.
  • With authorized integrators. The integrator servicing your Community’s account may access data as reasonably necessary to service it, and no more.
  • With service providers. Vendors that host, deliver messages for, or otherwise help us operate the Platform, under obligations to protect the data. The service providers that process Community Personal Data on our behalf are identified in the MyWatchtower Sub-processor List, published at https://portal.jekasoftware.com/policies/subprocessors/, which we update before a new provider begins processing that data.
  • With third-party platforms your Community uses. Where your Community’s deployment integrates Brivo, HID, Eagle Eye Networks, or similar services, data flows between the Platform and those services to make the integration work. Their own terms and privacy policies govern their services.
  • For legal reasons. When required by law, subpoena, or similar process, or to protect rights, safety, and the integrity of the service.
  • In a business transfer. In connection with a merger, acquisition, or sale of assets, subject to this Notice’s commitments.

We do not sell personal information, and we do not share it with third parties for their own marketing.

5. Retention

Entry records, photographs, and recordings are retained for 24 months unless your Community’s configuration or agreement provides otherwise, or law requires different treatment; after that period, deletion occurs on our periodic deletion cycles or upon a verified request. Account information is retained for the life of the account and a reasonable period after. When a Community’s subscription ends, we provide exports of the Community’s Facility Data upon the Community’s written request (or the written request of another person entitled under its agreement), in commercially reasonable tools and formats, if requested within 30 days after termination; after that window we may delete the data in the ordinary course.

6. Your Choices and Rights

You can review and update your account information in the Platform, manage notification preferences, and opt out of text messages by replying STOP. Because most Platform records belong to your Community, requests about entry records, recordings, or restricted-entry records are generally directed to your Community, and we support Communities in responding. Your rights under state privacy laws, and how to exercise them, are described in Section 7.

7. State Privacy Rights

Depending on where you live, you may have rights under state privacy laws, including the laws of California (the California Consumer Privacy Act, as amended by the California Privacy Rights Act — CCPA/CPRA), Colorado (CPA), Connecticut (CTDPA), Virginia (VCDPA), Texas (TDPSA), and Florida (the Florida Digital Bill of Rights, for covered controllers), and other state privacy laws as applicable. Where these laws apply to the personal information we hold about you, they may give you the right to:

  • Know and access. Confirm whether we process your personal information and obtain a copy of it.
  • Correct. Request correction of inaccurate personal information.
  • Delete. Request deletion of personal information, subject to legal and contractual retention requirements.
  • Portability. Receive a copy of the personal information you provided to us in a portable and, to the extent technically feasible, readily usable format.
  • Opt out. Opt out of the sale or sharing of personal information and of targeted advertising. As stated in Section 4, we do not sell personal information and we do not share it with third parties for their own marketing, so there is nothing to opt out of today; if that ever changes, we will update this Notice and honor opt-out requests as the law requires.
  • Non-discrimination. Exercise these rights without discriminatory treatment.

Submitting and verifying requests. Submit requests to legal@jekasoftware.com with your name, the email address associated with your account, your Community, and the right you wish to exercise. We verify requests by matching the information you provide against our records — typically by confirming control of the email address on the account and, where reasonably necessary for sensitive requests, by asking for additional information used only for verification.

Authorized agents. Where the law allows, an authorized agent may submit a request on your behalf; we require proof of the agent’s written authorization and may still verify your identity directly with you.

Appeals. If we decline to act on your request, you may appeal by replying to our decision or emailing legal@jekasoftware.com with the subject line “Privacy Appeal.” We will respond to your appeal within the window the applicable statute sets, and if we deny your appeal, you may contact the Attorney General of your state.

Community-owned records. Because the Community owns most Platform records, requests that concern entry records, recordings, or restricted-entry records are routed to your Community as the owner of its Facility Data; your Community is responsible for responding, and JEKA reasonably supports the Community in doing so within the windows applicable to the Community. Requests about your own account and profile information may come to us directly.

Global Privacy Control. Where applicable law requires, we treat a Global Privacy Control (GPC) signal as a valid request to opt out of any sale or sharing of personal information covered by that law. Because we do not sell personal information or share it for targeted advertising, there is no sale or sharing for a GPC signal to stop today; if that changes, we will process GPC signals accordingly.

8. Security

We use administrative, technical, and physical safeguards appropriate to the nature of the data, including access controls and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children

Platform accounts are for adults 18 and over. The Platform is not directed to children under 13, and we do not knowingly collect information from children under 13. Information about minor household members, if any, is provided and managed by the Community or the responsible account holder. Entry cameras may incidentally capture images of minors present at an entry; such recordings are part of the Community’s entry records and are Facility Data managed by the Community.

10. Recording Notices

On-screen notice of video recording is displayed at each kiosk, and an audible notice is played when a Live Assist session begins. Kiosk clips carry no audio, and kiosk-to-resident calls are not recorded. Your Community is responsible for any additional signage or resident disclosures required by applicable law for recording at its property. JEKA does not perform facial recognition or otherwise use recordings or photographs to identify individuals biometrically, and does not derive biometric identifiers used to identify an individual from recordings or photographs.

11. Changes and Contact

We may update this Notice from time to time; for material changes we will provide notice through the Platform or by email, and the posted version governs. Questions or requests: legal@jekasoftware.com, or through the support portal at support.jekasoftware.com. JEKA Software, Inc., 16703 Early Riser Avenue, Suite 533, Land O’ Lakes, FL 34638.