Privacy Policy

1. Introduction

This Privacy Policy describes how CMMS Platform ("we", "our", or "us") collects, uses, and shares your personal information when you use our computerized maintenance management system application (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account information (name, email address, phone number)
• Organization details (company name, address)
• Work order data and maintenance records
• Machine and equipment information
• Site and location data
• Communication and notes within the system

2.2 Automatically Collected Information

• Device information (browser type, operating system, device model)
• Usage data (pages visited, features used, time spent)
• Location data (if you grant permission)
• Cookies and similar tracking technologies
• IP address and network information

2.3 Offline Data Storage

When you use our Progressive Web App (PWA), certain data is stored locally on your device to enable offline functionality:

• Work order information you access
• Machine and equipment data
• Site information
• User preferences and settings
• Pending changes awaiting synchronization

This local storage is managed by your browser and can be cleared at any time through your browser settings.

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide and maintain our Service
• To process and fulfill work orders
• To manage preventive maintenance schedules
• To track equipment and inventory
• To send notifications about work assignments and alerts
• To improve and optimize our Service
• To provide customer support
• To detect and prevent fraud or security issues
• To comply with legal obligations

4. Data Sharing and Disclosure

4.1 Within Your Organization

Your data is shared with authorized users within your organization based on their role and permissions.

4.2 Service Providers

We may share your information with third-party service providers who assist us in:

• Cloud hosting and infrastructure (e.g., AWS, Vercel)
• Database services
• Analytics and monitoring
• Email delivery

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to protect our rights, property, or safety.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Role-based access control
• Regular security audits and monitoring
• Secure authentication (NextAuth.js with JWT)
• Password hashing (bcrypt)

However, no method of transmission over the Internet is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to provide our Service and comply with legal obligations:

• Active account data: Retained while your account is active
• Work order records: Retained for 7 years (or as required by law)
• Audit logs: Retained for 3 years
• Deleted data: Soft-deleted items retained for 90 days, then permanently deleted

7. Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data
• Portability: Receive your data in a structured format
• Restriction: Request limitation of processing
• Objection: Object to processing of your data
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact your organization administrator or email us at privacy@cmmsplatform.com

8. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences
• Analyze usage patterns
• Enable offline functionality (Service Workers)

You can control cookies through your browser settings. Disabling cookies may limit some features of our Service.

9. Children's Privacy

Our Service is not intended for users under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place for such transfers.

11. Progressive Web App (PWA) Specific

11.1 Local Storage

When installed as a PWA, the app stores data locally on your device for offline access. This includes:

• Cached API responses
• Work order data you've accessed
• User preferences
• Pending synchronization queue

11.2 Data Synchronization

Changes made offline are stored locally and synchronized when you're back online. On iOS, you need to manually trigger synchronization. On Android, synchronization happens automatically in the background.

11.3 Clearing PWA Data

You can clear all locally stored data by:

• Clearing your browser cache and site data
• Uninstalling the PWA from your device

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification for material changes

Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: