NIMBORA Alexa Skill - Privacy Policy

Last Updated: January 5, 2026

Introduction

This Privacy Policy describes how NIMBORA ("we," "us," or "our") collects, uses, and protects your information when you use the NIMBORA Alexa skill (the "Skill").

Information We Collect

Account Information

When you link your NIMBORA account to the Alexa skill, we access:

• Email address (used for account identification)
• Firebase User ID (to authenticate your account)
• Device information (irrigation controller data)

Usage Information

When you use the Skill, we collect:

• Voice commands sent to Alexa (processed by Amazon)
• Irrigation zone control requests
• Zone status queries
• Soil moisture sensor readings

Automatically Collected Information

• Access tokens for authentication
• Skill usage logs and timestamps
• Error logs for troubleshooting

How We Use Your Information

We use the collected information to:

• Authenticate your identity and link your NIMBORA account
• Process your voice commands to control irrigation zones
• Retrieve and display zone status and sensor data
• Provide customer support and troubleshooting
• Improve the Skill functionality and user experience
• Maintain security and prevent fraud

Data Sharing and Third Parties

Amazon Alexa

When you use the Skill, Amazon processes your voice commands according to their privacy policy. We receive the processed intent (e.g., "turn on zone 1") but not the audio recording.

Firebase/Google Cloud

We use Firebase services (owned by Google) to:

• Authenticate users
• Store irrigation system data
• Process skill requests

Your data is stored on Google's secure servers in compliance with their privacy policies.

No Selling of Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Data Security

We implement industry-standard security measures to protect your information:

• OAuth 2.0 authentication for account linking
• Encrypted HTTPS connections for all data transmission
• HMAC-SHA256 signed tokens for API authentication
• Secure Firebase Realtime Database with access controls
• Regular security audits and updates

Data Retention

We retain your information for as long as:

• Your NIMBORA account is active
• Necessary to provide the Skill services
• Required by law or for legitimate business purposes

You can request deletion of your account and associated data at any time.

Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal information
• Correction: Update or correct your account information
• Deletion: Request deletion of your account and data
• Unlink: Disconnect the Skill from your Alexa account at any time
• Opt-out: Disable the Skill to stop data collection

To exercise these rights, contact us at info@nimbora.tech

Children's Privacy

The NIMBORA Skill is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

International Users

Your information may be transferred to and processed in the United States and other countries where our service providers operate. By using the Skill, you consent to such transfers.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Updating the "Last Updated" date
• Posting the new policy on our website
• Notifying users through the NIMBORA app (if applicable)

Your continued use of the Skill after changes constitutes acceptance of the updated policy.

Amazon Alexa Privacy

Please also review Amazon's privacy policies:

• Amazon Privacy Notice
• Alexa Terms of Use

Compliance

This Privacy Policy complies with:

• Amazon Alexa Skill Privacy Requirements
• General Data Protection Regulation (GDPR) where applicable
• California Consumer Privacy Act (CCPA) where applicable
• Children's Online Privacy Protection Act (COPPA)

---

By using the NIMBORA Alexa skill, you acknowledge that you have read and understood this Privacy Policy.