Privacy Policy

This policy explains what personal data Prevnt, Inc. (“Prevnt”, “we”, “our”) collects, why we collect it, and what choices you have. It covers our marketing site (prevnt.tech) and the Prevnt product (app.prevnt.tech). This is a draft pending counsel review; if anything here conflicts with your signed agreement, the agreement governs.

1. Who we are

Prevnt, Inc. provides a computerized maintenance management system (CMMS) for field and industrial teams. Contact us any time at privacy@prevnt.tech.

2. What we collect

• Account data — name, work email, company, role. You provide this when you sign up.
• Customer content — assets, work orders, PM schedules, and any data you upload. You own this data; we process it to deliver the service.
• Usage telemetry — pages visited, actions taken, device/browser, approximate geography. Used for product analytics and reliability.
• Communications — support tickets, emails, scheduled call notes.
• Marketing site analytics — first-party analytics (Vercel Analytics, Vercel Speed Insights) with cookie-less visitor measurement. No cross-site tracking, no advertising pixels.

3. Why we process it

• To provide, secure, and improve the service (contractual basis).
• To communicate about your account, billing, and outages (contractual basis).
• To meet legal, tax, and compliance obligations (legal obligation basis).
• To send product updates and research invitations (legitimate interest basis — you can opt out any time).

4. Subprocessors

We use a short list of vendors to operate the service. The current list is available on request to privacy@prevnt.tech. We notify customers before adding a new subprocessor to categories touching customer content.

5. How long we keep it

• Customer content: for the life of your subscription, plus 30 days for recovery, then deletion.
• Account data: while your account is active, plus 24 months for legal and tax records.
• Usage telemetry: up to 18 months.
• Support communications: up to 36 months.

6. Where it lives

Primary processing in the United States (AWS us-east-1). Enterprise customers can request EU or APAC residency. Transfers out of the EEA rely on the EU Standard Contractual Clauses (SCCs).

7. Your rights

Depending on where you live (GDPR / UK GDPR / CCPA / CPRA) you can request access, correction, deletion, export, or restriction of processing of your personal data, and object to processing based on legitimate interest. Email privacy@prevnt.tech. We reply within 30 days.

We don’t sell personal information, and we don’t use it for cross-context behavioral advertising.

8. Security

Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access is role-based and logged. We are targeting SOC 2 Type II certification. Report vulnerabilities to security@prevnt.tech.

9. Children

Prevnt is not directed to children under 16. We don’t knowingly collect data from them.

10. Changes

We’ll post material changes here and notify account admins at least 30 days before they take effect.

11. Contact

Privacy questions: privacy@prevnt.tech. Legal notices: legal@prevnt.tech.