Alexa Smart Home Skill Privacy Policy

Effective date: March 23, 2026

This privacy policy applies specifically to the ComfortClick Alexa Smart Home Skill (the "Alexa Skill"). It explains how ComfortClick d.o.o., Meskova ulica 4, SI-1000 Ljubljana, Slovenia ("ComfortClick", "we", "us", or "our"), processes information when you enable the Alexa Skill, link your ComfortClick account, discover compatible devices, and control those devices through Amazon Alexa.

This page is intended to address Amazon Alexa certification requirements for a skill that uses account linking and processes customer information needed to provide smart home functionality. For information about your use of comfortclick.com and your general ComfortClick account, please also see our general Privacy Policy.

What This Policy Covers

This policy covers data processed for the Alexa Skill and the related account-linking, device-discovery, device-control, state-reporting, support, security, and troubleshooting functions. It does not cover Amazon's own processing of Alexa voice recordings, Alexa app activity, or other Amazon account data that Amazon handles under its own privacy terms.

Information We Process

1. Account Linking and Identity Information

When you link the Alexa Skill to your ComfortClick account, we process information needed to identify the linked user and authorized controller connection, such as your ComfortClick account email address, internal user identifier, controller access identifier, and the group name you authorize for Alexa access.

2. Authentication Tokens and Integration Data

To keep the Alexa Skill connected, we process OAuth-related data used for account linking and Alexa event handling, such as authorization codes received from Amazon, access tokens, refresh tokens, token expiry data, and the Alexa event-gateway region associated with the integration.

3. Device and Smart Home Data

To provide smart home functionality, we process device and controller information needed to discover and operate your connected devices. This may include controller identifiers, endpoint or device names, endpoint descriptions, capabilities, device state information, commands sent from Alexa, and change-report or response data returned by your ComfortClick-connected system.

4. Technical and Diagnostic Information

We may process operational records such as timestamps, error details, and request/response payloads needed to secure, maintain, and troubleshoot the Alexa Skill and related integrations.

5. Information We Do Not Collect Directly Through the Alexa Skill

We do not receive your Alexa voice recordings or raw audio through the Alexa Skill. We also do not receive your Amazon account password. If you sign in to your ComfortClick account during account linking, those credentials are handled through ComfortClick's authentication flow and not exposed to the Alexa Skill itself.

How We Use This Information

• to authenticate and maintain the account link between Amazon Alexa and your ComfortClick account
• to discover the devices and endpoints you authorize for Alexa use
• to send, route, and fulfill smart home commands and queries
• to send device state changes and event notifications to Amazon where supported
• to detect, prevent, and investigate errors, abuse, fraud, and security incidents
• to provide support and maintain service reliability
• to comply with legal obligations and enforce our agreements

Legal Bases for Processing

Where GDPR or similar laws apply, we generally process Alexa Skill data because it is necessary to provide the service you request, to take steps at your request before providing that service, to pursue our legitimate interests in security, fraud prevention, debugging, and service improvement, and to comply with legal obligations.

How We Share Information

We do not sell personal data obtained through the Alexa Skill. We may share relevant information only as needed for the following purposes:

• Amazon and Alexa services: to complete account linking, device discovery, directive handling, and Alexa event processing.
• Your linked ComfortClick system and connected controllers: to discover devices, execute commands, and report device state.
• Service providers and infrastructure providers: where they support hosting, storage, monitoring, security, or other operational needs on our behalf and under appropriate obligations.
• Legal and compliance purposes: where disclosure is required by law, court order, or a valid request from a public authority, or where needed to protect rights, security, and the integrity of our services.

International Transfers

The Alexa Skill depends on Amazon Alexa services and internet-based infrastructure that may involve processing in countries outside your own, including outside the European Economic Area. Where required, we take reasonable steps to use appropriate safeguards for such transfers.

Retention

We retain Alexa Skill data only for as long as reasonably necessary for the purposes described in this policy, including providing the linked smart home service, maintaining security, troubleshooting issues, and meeting legal obligations. Stored Alexa integration tokens may remain in our systems until they are replaced, removed, or otherwise no longer needed for the integration. Diagnostic and operational logs may be retained in line with our operational, security, and legal retention practices.

Your Choices and Rights

You can stop future Alexa Skill processing by disabling the skill or unlinking your account in the Alexa app. You may also contact us to request access, correction, deletion, restriction, objection, or portability, where applicable under law. If you use a ComfortClick account, you can also update certain account information through your ComfortClick account settings.

Security

We use reasonable technical and organizational measures designed to protect information related to the Alexa Skill. However, no internet-based service can be guaranteed to be completely secure.

Children

The Alexa Skill is not intended for children and requires a linked ComfortClick account used for smart home control. We do not intend to collect personal data from children through this Alexa Skill.

Changes to This Policy

We may update this policy from time to time. When we do, we will update this page and revise the effective date shown above.

Contact Us

If you have questions about this Alexa Smart Home Skill Privacy Policy or would like to exercise applicable privacy rights, contact us at info@comfortclick.com.

ComfortClick d.o.o.
Meskova ulica 4
SI1000 Ljubljana
Slovenia