Privacy Policy

Last Updated: November 20, 2024

WH011 Maintenance Bot ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our mobile application.

1. Information We Collect

We collect the following types of information:

• Account Information: Email address, full name, phone number (optional), and employee ID (optional)
• Authentication Data: Microsoft account information when using Microsoft login
• Usage Data: Questions asked to the maintenance bot, timestamps, and interaction history
• Technical Data: Device information, IP address, and app usage statistics

2. How We Use Your Information

We use your information to:

• Provide and maintain the maintenance assistance service
• Authenticate your access to the application
• Improve our AI-powered responses and service quality
• Track usage for internal analytics and reporting
• Communicate with you about service updates
• Ensure security and prevent fraud

3. Data Storage and Security

Your data is stored securely using industry-standard encryption:

• Passwords are hashed using bcrypt encryption
• Data is stored in secure cloud infrastructure (Supabase)
• All communications use HTTPS encryption
• Access to data is restricted to authorized personnel only

4. Data Sharing

We do not sell or share your personal information with third parties except:

• With your employer (Ninsar) for business purposes
• When required by law or legal process
• With service providers who assist in operating our application (e.g., Supabase, Railway)

5. Microsoft OAuth

When you use Microsoft login:

• We receive your Microsoft account email and name
• Microsoft's privacy policy also applies to their authentication service
• We do not access your Microsoft emails or other Microsoft services

6. Data Retention

We retain your data:

• Account information: Until you request account deletion
• Query history: Indefinitely for service improvement, unless you request deletion
• Audit logs: Up to 1 year for security and compliance purposes

7. Your Rights

You have the right to:

• Access your personal information
• Request correction of inaccurate data
• Request deletion of your account and data
• Opt-out of certain data collection practices
• Export your data in a portable format

8. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this policy.

10. International Data Transfers

Your data may be transferred to and stored in countries outside your country of residence. We ensure appropriate safeguards are in place for such transfers.

This privacy policy is provided in good faith and complies with GDPR (General Data Protection Regulation) requirements for European users.