Privacy Policy

1. Introduction

DOVA Manufacturing Management System ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our manufacturing execution system.

2. Information We Collect

2.1 Personal Information

We collect personal information that you provide directly to us, including:

• Name, email address, and phone number
• Company/organization information
• Job title and role within your organization
• Account credentials and authentication information

2.2 Production and Business Data

As part of providing our manufacturing execution system, we collect and process:

• Work order information and production schedules
• Manufacturing metrics and OEE (Overall Equipment Effectiveness) data
• Downtime records and production tracking data
• Quality control and inspection records
• Operator activity and time tracking information
• Excel files and imported schedule data

2.3 Technical Information

We automatically collect certain technical information, including:

• IP addresses and device identifiers
• Browser type and version
• Operating system information
• Usage patterns and feature interactions
• Log files and system performance data

3. How We Use Your Information

We use the collected information for the following purposes:

• Providing and maintaining the DOVA service
• Processing production data and generating analytics
• Managing user accounts and authentication
• Sending service-related communications and notifications
• Providing customer support and technical assistance
• Improving our service features and functionality
• Ensuring security and preventing unauthorized access
• Complying with legal obligations and industry standards

4. Data Security and Protection

4.1 Security Measures

We implement industry-standard security measures to protect your data:

• End-to-end encryption for data transmission
• Encrypted data storage using advanced encryption standards
• Multi-tenant architecture with row-level security (RLS)
• Role-based access control (RBAC) with hierarchical permissions
• Regular security audits and vulnerability assessments
• Secure authentication mechanisms including password policies

4.2 Data Isolation

Your organization's data is logically separated from other organizations through our multi-tenant architecture. Each company's data is secured with row-level security policies that prevent unauthorized access between organizations.

5. Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties, except:

• With your explicit consent
• To comply with legal obligations or court orders
• To protect our rights, property, or safety
• In connection with a business transfer or acquisition
• To trusted service providers who assist in service delivery (under strict confidentiality agreements)

6. Data Retention

We retain your personal information and production data for as long as necessary to provide our services and comply with legal obligations. You may request deletion of your data, subject to certain exceptions for legal and operational requirements.

7. International Data Transfers

Your information may be processed and stored in countries other than your own. We ensure appropriate safeguards are in place to protect your data during international transfers, including compliance with applicable data protection regulations.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• Access to your personal information
• Correction of inaccurate or incomplete data
• Deletion of your personal information
• Restriction or objection to processing
• Data portability
• Withdrawal of consent

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, maintain session state, and analyze usage patterns. You can manage cookie preferences through your browser settings, though some features may not function properly with cookies disabled.

10. Third-Party Services

Our service may integrate with third-party services for functionality such as:

• Email delivery services (Resend)
• Authentication services (Supabase)
• Cloud hosting and database services
• Analytics and monitoring tools

These services have their own privacy policies, and we encourage you to review them.

11. Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Changes become effective immediately upon posting.

13. Regional Privacy Laws

13.1 GDPR (European Union)

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with a supervisory authority.

13.2 CCPA (California)

California residents have specific rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to delete personal information.

14. Data Processing Lawful Basis

We process your data based on the following lawful bases:

• Contract performance (providing the service you requested)
• Legitimate interests (service improvement and security)
• Legal compliance (meeting regulatory requirements)
• Consent (where explicitly provided)

15. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@dova.manufacturing
• Data Protection Officer: dpo@dova.manufacturing
• Website: www.dova.manufacturing

This Privacy Policy is effective as of December 16, 2024.