Privacy Notice

Effective July 15, 2026

This Privacy Notice explains how EccMaintain ("we", "us", "our"), acting as data controller for the Service, collects, uses, and shares personal data about visitors to our website and users of the Service. If you have questions about this notice, contact us at support@eccmaintain.com.

1. Who we are

We operate EccMaintain and are the data controller responsible for personal data processed in connection with the Service. Paddle, our reseller and Merchant of Record, acts as an independent controller for payment data it collects during checkout.

2. Personal data we collect

• Account data: name, email address, hashed password, company name, role, preferred language, timezone, and currency.
• Profile & workspace content:avatar, contact details, and the maintenance data you enter (assets, work orders, parts, procedures, comments, attachments).
• Support & communications:messages you send us or in-app support chats, including any information you choose to share.
• Usage & telemetry: log data, device information, browser type, IP address, timestamps, and pages viewed.
• Authentication: session identifiers and, where you sign in via a third-party provider, the profile information that provider returns to us.
• Cookies & similar technologies:essential cookies required to keep you signed in and to secure the Service.

Payment card details are collected and processed directly by Paddle. We do not receive or store your full card number.

3. Why we use your data

• Provide the Service — creating and managing your account, hosting your workspace data, delivering features you use. Legal basis: performance of a contract.
• Security & fraud prevention — authenticating you, detecting abuse, protecting the Service. Legal basis: legitimate interests and legal obligation.
• Customer support — responding to requests, troubleshooting, and follow-up. Legal basis: performance of a contract and legitimate interests.
• Product improvement — understanding how the Service is used to improve reliability and usability. Legal basis: legitimate interests.
• Legal compliance — accounting, tax, and responding to lawful requests. Legal basis: legal obligation.
• Communications — service updates and, where you have opted in or where permitted by law, occasional product news. Legal basis: consent or legitimate interests.

4. Who we share data with

• Paddle — as our Merchant of Record, Paddle receives the personal data needed to process your purchase, manage your subscription, calculate and remit taxes, issue invoices, and handle refunds. See Paddle's privacy notice.
• Hosting & infrastructure providers — cloud hosting, database, and storage providers acting as processors on our behalf.
• Support & communication tools — email delivery and support tooling used to communicate with you.
• Analytics — privacy-conscious product analytics used only to improve the Service.
• AI service providers — where you use AI-assisted features, prompts and the minimum context required to fulfil your request are sent to the AI provider that powers that feature.
• Professional advisers — legal, accounting, and audit advisers under duties of confidentiality.
• Authorities — when required by applicable law, regulation, or valid legal process.

We do not sell your personal data.

5. International transfers

Our providers may store or process personal data outside your country of residence, including in the United States and the European Economic Area. Where personal data is transferred from the UK or EEA to a country without an adequacy decision, appropriate safeguards such as the European Commission's Standard Contractual Clauses are used.

6. Data retention

We retain personal data only for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete or anonymise your personal data within a reasonable period, except where longer retention is required by law (for example, tax and accounting records held by Paddle).

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or restrict processing of your personal data; to object to processing; to portability; and to withdraw consent where processing is based on consent. Users in the UK or EEA also have the right to lodge a complaint with a supervisory authority. To exercise any of these rights, contact us at support@eccmaintain.com. We will respond within the timeframe required by applicable law (typically one month).

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, encryption at rest for supported stores, row-level access controls, least-privilege access to production data, and audit logging. No system is completely secure; if you become aware of a vulnerability, please contact us.

9. Cookies

The Service uses essential cookies to keep you signed in and to protect your session. We may also use privacy-conscious analytics cookies to understand how the Service is used. You can manage cookies through your browser settings; blocking essential cookies may prevent you from signing in.

10. Children

The Service is not directed at children under 16 and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes to this notice

We may update this Privacy Notice from time to time. When we do, we will update the "Effective" date above and, where appropriate, notify you through the Service.

12. Contact

EccMaintain — Data controller. Email: support@eccmaintain.com.