DRAFT — pending legal review. This is template language and must be reviewed by counsel before public launch. Do not rely on it as legal advice.

Privacy Policy

Effective 2026-05-09

This Privacy Policy explains how MainTek (“MainTek”, “we”, “us”) collects, uses, and shares information when you use our maintenance management platform (the “Service”).

1. Information we collect

Account information. Name, email, password hash, organization, role, and profile details you provide at signup or later.
Workspace data. Assets, work orders, preventive maintenance schedules, files, comments, and other content you or your teammates create in the Service.
Usage data. Server logs, IP address, device and browser information, timestamps of requests, and feature interactions we capture for diagnostics and product improvement.
Payment information. Billing is handled by our payment processor (Polar.sh). MainTek does not store full card numbers; we receive subscription status and customer identifiers.

2. How we use information

To provide, maintain, and improve the Service.
To authenticate users and protect against fraud and abuse.
To send transactional emails (verification, password reset, invitations, billing notices).
To analyze aggregate usage and prioritize improvements.
To comply with legal obligations.

3. Sharing

We do not sell personal information. We share data with:

Service providers who host or operate parts of our infrastructure (e.g., cloud hosting, email delivery, error tracking, payment processing).
Other members of your organization, who can see workspace content according to their role.
Law enforcement or regulators when required by law.

4. Data retention

We retain account and workspace data for as long as your account is active. After account deletion, we delete or anonymize personal information within 90 days, except where retention is required by law or for legitimate business reasons (e.g., tax records, fraud prevention).

5. Security

We use industry-standard safeguards including TLS in transit, encryption at rest for backups, principle-of-least-privilege access controls, and routine dependency audits. No system is perfectly secure; if you suspect a breach affecting your account, contact us immediately.

6. Your rights

Depending on where you live (e.g., EEA, UK, California), you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. Contact us at the address below to exercise any of these rights.

7. International transfers

We process and store data in the United States and other jurisdictions where our service providers operate. By using the Service, you consent to these transfers.

8. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from them.

9. Changes

We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-product notice at least 30 days before they take effect.

10. Contact

Questions about this Privacy Policy can be sent to privacy@maintek.app.