1. Introduction
ICYWALL ("we", "our", or "us") operates the LockStep lab management platform. This Privacy Policy describes how we collect, use, store, and share information when you use our website, dashboard, and agent software (collectively, the "Service").
By using the Service, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Account Information
When you register or request a demo, we collect:
- Name, email address, and organization name
- Username and hashed password (we never store plaintext passwords)
- Role information (admin, assistant, superadmin)
2.2 Device Data
When the LockStep agent is installed on managed devices, it reports:
- Device hostname, operating system, and IP address (local network only)
- CPU and memory utilization metrics
- Online/offline status and last-seen timestamps
- Screenshots (when initiated by an authorized administrator)
2.3 Usage Data
We automatically collect limited technical data to improve the Service:
- Browser type and version when accessing the dashboard
- Pages visited and features used within the dashboard
- Error logs and performance metrics
3. How We Use Your Information
We use collected information to:
- Provide, maintain, and improve the LockStep platform
- Authenticate users and enforce role-based access control
- Deliver device monitoring, exam mode, and broadcast features
- Send transactional emails (account confirmation, password resets)
- Respond to support requests and demo inquiries
- Detect and prevent security incidents
4. Data Retention
- Screenshots are automatically deleted after 24 hours by default (configurable by the institution administrator).
- Device metrics (CPU, memory) are kept for up to 30 days for historical analysis.
- Account data is retained as long as the account is active. Upon deletion, data is purged within 30 days.
- Command logs are retained for audit purposes for up to 90 days.
5. Data Sharing
We do not sell your data. We may share information only in these circumstances:
- With your institution: Administrators within your organization can access device data and user activity within their scope.
- Service providers: We use trusted third-party infrastructure (hosting, database, error tracking) that process data on our behalf under strict confidentiality agreements.
- Legal obligations: We may disclose data if required by law, legal process, or governmental request.
6. Security
We take data protection seriously and implement industry-standard measures:
- All API communication is encrypted via HTTPS/TLS
- Passwords are hashed using bcrypt with salt rounds
- JWT tokens with refresh rotation and expiration
- Rate limiting, NoSQL injection protection, and HTTP security headers
- Optional two-factor authentication (TOTP) for admin accounts
- WebSocket connections require token-based authentication
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict certain data processing
- Data portability (receive your data in a structured format)
To exercise any of these rights, contact us at icywall.me@gmail.com.
8. Cookies
The ICYWALL website uses minimal cookies:
- Authentication cookies: Required to maintain your logged-in session on the dashboard.
- Preference cookies: Store UI preferences (theme, layout).
We do not use third-party advertising or tracking cookies.
9. Children's Privacy
The Service is intended for use by educational institutions and their authorized personnel. We do not knowingly collect personal information from children under 13. The agent software collects device-level data only, not student personal data.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the Service after changes constitutes acceptance of the revised policy.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us: