Deleting your DOTRAMA account

This page is here so that you can ask us to delete your DOTRAMA account without signing in — from a phone you no longer have, or an app you have already removed. It covers the DOTRAMA account, the DOTRAMA app and the connection of your hub to our cloud.

The service is run by Denis Shelaev, NIF Z1356139H, Carrer de Francesc Planas i Casals 57, 08911 Badalona, Barcelona, Spain. What we hold and why is set out in full in the privacy policy; this page says only how to end it.

Write to info@dotrama.com from the email address the account uses. Nothing else is needed: no form, no reason, no photograph of a document. We answer from the same address.

The address is what tells us the request is yours. A letter from a different address cannot delete an account, and we will not act on one.

There are buttons for this as well, and they do the same thing: in your account on this site under Security, and in the DOTRAMA app under Settings. Either asks you to confirm your password first, and says plainly what the button will do before you press it. Writing to us goes on working beside both — a person locked out of the account is exactly the person who needs it.

The account stops working the moment we take the request: sign-ins end, and the app and your account here stop opening.

For 30 days nothing is erased, and two different things stop it. One is the Cancel button on the screen that shows the date. The other is simply signing in again, on any device — which is useful on the day you change your mind on a phone that has no app on it. Signing in means a fresh sign-in with your password: reopening an app that was already inside is not enough. Either way the deletion is called off entirely, with nothing lost.

After the 30 days the account is erased and your hubs stop being linked to it.

The account itself: the email address, the name if you gave one, the password, and the record of where you were signed in.

Everything your hub sent our cloud about your home, which the privacy policy describes one kind at a time: the devices and their readings, the state of the rooms, the floor plan and the file you traced it from, the photograph of your home, its name and its address, the summaries about life at home, the hub's own diagnostics, the settings of the things on your plan and the log of your scenarios.

The history of alerts. If you connected Telegram, the number of your chat there goes too. One thing on this subject is not erased, and it is fairer to say so here than to let you find out: the copy of each hub's own Wi-Fi password stays with the hub. It was written by the factory when the label was printed, it is tied to the equipment rather than to you, and it is the way back in for whoever owns that hub if the label is lost.

Records kept to protect accounts: that a hub was linked or released, that an emergency reset file was issued, that an account was deleted — what happened and when, never a password. How long they are kept is being settled at the moment: today they have no automatic removal, and this page and the privacy policy will state the period as soon as it is set. They are how we could answer later if somebody said an account had been taken from them.

Three more things stay, and none of them is about you. The hub itself keeps a record here: its serial number, the versions it runs and the certificates it signs in with — it is a machine we made, and that record is what lets it be linked to an account again. The commands your account sent your hub, together with the hub's answers, go with the account itself; one kind of answer carries a picture of your home as it was at that moment, which is why it is named here rather than left for you to find out. While an account is alive they wait seven days after they finish and then go by themselves. And of the emails we sent you only a trace is left: the address and the words are wiped, and the line saying a letter went stays.

Encrypted copies of the databases made before the deletion disappear as they expire. The sign-in database is copied daily and only the last 30 copies are kept. The main database is copied every night; a copy older than thirty days is deleted, and the last ten are kept whatever their age.

None of this is used for anything else, and none of it is shared.

Deleting the account does not take the hub away: it is your equipment. What ends is the link between it and the account, and with it the way to reach your home from outside it.

What the hub holds at home — your plan, your devices, their history — is not touched by any of this. It is erased on the hub itself, by resetting it to factory settings, and that is a separate thing you do with the hub in your hands. Three things the hub does let go of by itself when the link ends, because none of them was ever about the house: its copy of your alert settings, the row saying a Telegram chat was connected to them, and your name, which it only held so that its own screen could greet you.