Privacy Policy

We collect account information you provide during registration: your name, email address, organization name, and billing details. This is the minimum required to operate your subscription.

The desktop agent transmits normalized transaction data from your industrial devices — machine identifiers, transaction IDs, volumes, operator references, and timestamps. We do not collect raw device firmware data or device credentials.

Transaction data is stored to provide your centralized dashboard, analytics, and multi-depot reporting. It is the system of record for your operations.

Account and billing data is used solely to manage your subscription, enforce per-machine licensing, and provide support. We never sell your data to third parties.

All data in transit is encrypted using TLS. Transaction data is stored in an access-controlled PostgreSQL backend. API keys are hashed server-side and are never stored in plaintext.

The desktop agent retains a rolling local cache (typically 30–90 days) in an on-premises SQLite database. The cloud remains the durable system of record.

We retain your transaction data for the duration of your active subscription. On cancellation, data is retained for 30 days to allow export, after which it is permanently deleted unless legal obligations require otherwise.

You may request export or deletion of your organization data at any time through your account settings or by contacting support. Managers control team member access via role-based permissions.

We may update this policy to reflect changes in our practices or legal requirements. Material changes will be communicated by email to organization owners at least 30 days in advance.