Legal
Privacy Policy
Last updated: January 2026
What we collect
Account data (name, title, work email, password credential), organization data (business name, address, phone, size), enrollment and agreement records, subscription status, managed device inventory, support tickets and audit log entries describing actions taken in the portal.
Device monitoring telemetry
For devices enrolled with consent, monitoring software may collect hardware and OS inventory, patch and update state, endpoint protection and security events, performance and disk health metrics, installed software lists, logged-on account names and system event logs. We do not intentionally collect document contents, keystrokes, browsing history, webcam or microphone data, or screen recordings.
Remote support sessions
Attended remote sessions require an end user at the device to approve the connection. Session metadata (who connected, when, and for which ticket) may be retained for audit. Unattended remote control is not enabled without separate written authorization.
How we use data
To deliver and support the managed service, secure and maintain devices, communicate about tickets and billing, produce reporting, meet legal obligations, and improve service quality. We do not sell personal data or use it for advertising.
Legal basis and employee notice
Monitoring is performed on behalf of the client organization, which acts as the controller of employee-related data. The client is responsible for giving its personnel notice of monitoring and for obtaining any consent required by applicable law.
Sharing
We share data with service providers strictly as needed to run the service (for example hosting, monitoring tooling, and — once connected — a payment processor). Providers are bound by confidentiality and may not use the data for their own purposes. We may disclose data if required by law.
Payment data
No payment processor is currently connected. When one is, card details are entered directly with the processor and are never stored on our systems; we retain only a customer reference and subscription status.
Retention
Account, agreement and audit records are retained for the duration of the engagement plus seven years for contractual and tax purposes. Operational telemetry is retained for the engagement plus twelve months unless a longer period is required by law.
Security
We apply access controls, tenant isolation, least-privilege administration and audit logging. In the current preview build portal records are stored in your browser only, so do not enter real client data before a production database and hosted authentication are connected.
Your rights
Depending on your jurisdiction you may request access, correction, deletion or a copy of personal data. Contact support@1ok.com or call (212) 252-0051 and we will respond within applicable timeframes.
Cookies
The portal uses only storage strictly necessary to keep you signed in and remember portal state. No advertising or cross-site tracking cookies are used.
Contact
BH Consulting, Inc. · (212) 252-0051 · support@1ok.com