Request deletion of your Encompass Blue account

Encompass Blue is a building-monitoring platform operated by Blue IoT Pty Ltd. Accounts are created for the staff of our business customers — there is no public sign-up — so account deletion is handled by us rather than through a self-service button.

This page explains how to ask us to delete your account, what gets deleted, what we have to keep, and how long it takes. It sits alongside our Privacy Policy.

How to submit a request

You can start a deletion request in either of these ways:

• From the mobile app. Open the Profile tab and tap Request account deletion. This opens a pre-addressed email with your account's email address already filled in.
• By email. Send a request to info@blueiot.com.au with the subject Encompass Blue account deletion request. Tell us the email address the account uses and the organisation it belongs to.

You do not need the app installed to make a request — email is enough.

How we verify who you are

Before we delete anything, we confirm that the request really comes from the account holder:

1. We check that the request arrives from, or names, an email address that matches an active Encompass Blue account.
2. We reply to that account's registered email address to confirm the request. Replying from that address is what authorises the deletion, so a request sent from another address cannot delete your account on its own.
3. Because Encompass Blue accounts belong to an organisation, we also notify your organisation's administrator that the account is being closed. Your administrator can tell us the account should not be deleted — for example, where it is still needed for a site under their operational control — and we will come back to you if that happens.

We do not ask you to send identity documents, and you should not send them to us.

What we delete

When a deletion request is completed, we remove:

• Your name, email address, phone number, role, bio, and profile photo.
• Your sign-in credentials and multi-factor authentication settings, which are deleted from AWS Cognito, ending your access to both the app and the web console.
• Your saved Encompass AI conversations and the messages in them.
• Your saved dashboards, views, and personal display preferences.
• Your identity in our web console analytics and error-monitoring tools.

You can also delete any individual Encompass AI conversation yourself, at any time, from within the app — you do not need to close your account to do that.

What we have to keep, and for how long

Some records cannot be deleted on request because they exist to keep the platform accountable or because our customers rely on them as building maintenance records. These are:

WhatWhy we keep itHow longAudit log entries, which include your user ID and email addressSecurity and accountability — they record who changed what and whenDeleted automatically 12 months after each entry is writtenOperational records: alert history and alert acknowledgement notes, including the identifier of the person who acknowledged an alertThey are your organisation's building maintenance records; an acknowledgement that cannot be attributed does not serve its purposeUp to 10 yearsBackup copiesDisaster recovery and the ability to reconstruct records that turn out to be corrupted or alteredRemoved as each backup expires: hourly backups after 7 days, daily after 35 days, weekly after 90 days, and monthly after 5 yearsRecords we are required to keep by law, or that we need to establish or defend a legal claimLegal obligationAs long as the obligation or claim lasts

Retained records are not used to contact you or to re-create your account. Backups are encrypted and access to them is limited to the staff who run recoveries; we do not open a backup to extract an individual's data, so personal information in a backup disappears when that backup expires rather than being removed from it individually.

Building and device telemetry — sensor readings and equipment status from your organisation's sites — belongs to your organisation, not to you personally, and is not deleted when an individual account is closed.

How long it takes

We acknowledge deletion requests within 5 business days and complete them within 30 days of verifying the request. If something delays a request beyond that, we will tell you why and give you a revised date.

Once deletion is complete, we send you a confirmation email, and your access to Encompass Blue ends immediately.

If your organisation leaves Encompass Blue

When an organisation stops being a customer, all of its accounts are closed and its data is deleted or returned in accordance with its agreement with us. You do not need to submit an individual request in that situation.

Questions

Email info@blueiot.com.au, or write to Blue IoT Pty Ltd, Level 1, 30/32 Compark Circuit, Mulgrave VIC 3170, Australia.

If you are not satisfied with how we have handled your request, you can complain to the Office of the Australian Information Commissioner (OAIC) online at oaic.gov.au/privacy/privacy-complaints, by phone on 1300 363 992, or by post to GPO Box 5218, Sydney NSW 2001.

‍