Privacy Policy

1. Who is responsible for your information

Enmight is used by businesses. Two roles apply:

• Inspection and workspace content (inspections, photos, reports, documents) belongs to the business whose workspace it is, our "Customer". We process it on the Customer's behalf and under its instructions. Questions about that content should usually go to the Customer that invited you.
• Account and service information (your sign-in, how you use the Service) is information we are responsible for, as described below.

2. Information we collect

Account information. Your name, email address and profile picture, from the account you sign in with (email code, Google or Microsoft), plus the workspace and role your organization gives you.

Inspection content. What you and your colleagues enter or capture: photos, measurements, grades, notes, commodity and shipment details, documents and generated reports.

Location. With your permission, the iOS app records your device's precise location when you create an inspection and attaches it to that inspection. You can turn location off in your device settings; inspections still work without it.

Camera and photos. With your permission, the iOS app uses the camera to take inspection photos and to read text on labels, and can save photos to your library. Label text is read on your device.

Shared Spaces. When you share documents with people outside your organization, we collect the names and email addresses you enter for them, and any files they send back to you.

Connected email accounts. If you connect Gmail or Outlook to send reports from your own address, we store an encrypted authorization from Google or Microsoft and the address you send from. We do not read your mailbox. We only send the messages you ask the Service to send.

Device and usage information. IP address, device type, operating system, app version and timestamps, which our servers log as the Service runs. We use this to operate, secure and fix the Service.

Support. What you send us when you contact us.

Payments. Card payments for self-serve plans are processed by Stripe. We receive the plan and billing status, not your full card number.

3. How we use information

• To provide the Service: sign you in, store and show your organization's inspections, generate reports, and send the emails you ask it to send.
• To send service messages: sign-in codes, invitations, and notices about documents shared with you.
• To keep the Service secure: prevent abuse, rate-limit requests and investigate problems.
• To support you, and to improve the Service using information about how it performs.
• To meet legal obligations.

We do not sell personal information, share it for cross-context behavioral advertising, or use it to show you ads.

4. Information from Google and Microsoft

If you sign in with Google or Microsoft, we receive your name, email address and profile picture, and use them only to create and maintain your account.

If you connect Gmail or Outlook, we use Google's or Microsoft's permission to send email on your behalf from your own address. We use this access only to send messages you initiate in the Service.

Enmight's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use information from Google or Microsoft APIs for advertising, sell it, or use it to train AI or machine-learning models. People at Enmight do not read it, except with your permission, for security purposes, or to comply with the law.

You can disconnect Gmail or Outlook in the Service at any time. You can also revoke access from your Google Account or your Microsoft account settings.

5. How we share information

• Within your organization. Workspace content is visible to other members of your Customer's workspace, according to the roles your organization assigns.
• With people you share with. Documents you share through Shared Spaces are visible to the recipients you choose.
• With service providers that run the Service for us, bound by contract to use the information only for that purpose:

• For legal reasons. To comply with the law, respond to lawful requests, or protect the rights, safety and security of our users, Customers, Enmight or others.
• In a business transfer. If Enmight is involved in a merger, acquisition or sale of assets, information may transfer as part of it, subject to this policy.

6. Cookies and similar technologies

The web app stores your sign-in session in your browser's local storage. That is strictly necessary for the Service to work. We do not use advertising cookies or third-party analytics trackers.

7. How long we keep information

We keep account information while your account is active, and workspace content for as long as the Customer's workspace exists or the Customer directs. When information is deleted, it is removed from our systems, and from backups within 35 days as they expire. We may keep limited information longer where the law requires it or to resolve disputes.

8. Security

The Service uses encryption in transit (TLS) and at rest. Authorizations for connected email accounts are separately encrypted with managed keys, and access to production systems is restricted. No system is completely secure, and we cannot guarantee the absolute security of your information.

9. Your choices and rights

• Access, correction and deletion. You can ask to access, correct or delete your personal information, or for a copy of it, by emailing [email protected]. For content in a Customer's workspace, we may refer your request to that Customer.
• Deleting your account. In the iOS app, go to Settings and tap Delete Account. Or email [email protected] from the address on your account. Deleting your account removes your sign-in and personal details; inspections and comments you made stay in your organization's workspace, attributed to a deleted user.
• Permissions. Turn location, camera and photo access on or off in your device settings.
• California residents have the right to know, delete and correct personal information, and to not be discriminated against for exercising these rights. We do not sell or share personal information as the California Consumer Privacy Act defines those terms. You can use an authorized agent; we may need to verify your identity first.
• The Service is currently offered to customers in the United States. Before we offer it in the EU, UK or Switzerland, we will update this policy with the rights that apply there.

We respond to requests within the time the applicable law requires.

10. Children

The Service is for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.

11. Where information is processed

Enmight is based in the United States, and the Service stores and processes information in the United States.

12. Changes to this policy

We may update this policy. If a change is material, we will notify you through the Service or by email before it takes effect. The effective date above shows when it last changed.

13. Contact

Enmight Technologies Inc
574 Sylvan Ave, Englewood Cliffs, NJ 07632
[email protected]