1. Introduction
UniCMMS ("we", "us", or "our") operates the UniCMMS platform and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services. Please read it carefully.
By accessing or using the Services, you consent to the practices described in this Privacy Policy.
2. Information We Collect
2.1 Information You Provide
- Account data: Name, email address, company name, job title, phone number
- Billing data: Payment method details (processed securely through our payment processor)
- Content data: Assets, work orders, maintenance records, inventory, files, and other content you upload
- Communications: Messages you send to us via support channels or email
2.2 Automatically Collected Information
- Usage data: Pages visited, features used, session duration, click events
- Device data: IP address, browser type, operating system, device identifiers
- Log data: Server logs, error reports, access timestamps
- Cookies: As described in our Cookie Policy
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the Services
- Process payments and manage subscriptions
- Send transactional emails (account creation, password reset, invoices)
- Send service announcements and important updates
- Respond to support requests and communicate with you
- Monitor and analyze usage patterns to improve performance
- Detect, prevent, and address security incidents and fraud
- Comply with legal obligations
We do not sell your personal information to third parties.
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:
- Contract performance: Processing necessary to provide the Services you subscribed to
- Legitimate interests: Improving and securing the Services, fraud prevention
- Legal obligation: Compliance with applicable laws
- Consent: Where you have given explicit consent (e.g., marketing communications)
5. Information Sharing and Disclosure
We may share your information with:
- Service providers: Third-party vendors who assist in providing the Services (see our Sub-Processors list)
- Business transfers: In connection with a merger, acquisition, or sale of assets
- Legal requirements: When required by law, court order, or government authority
- Safety: To protect the rights, property, or safety of UniCMMS, our users, or the public
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Services. After account termination:
- You have 30 days to export your data
- Customer data is deleted within 90 days of account closure
- Some data may be retained for legal or regulatory purposes
- Anonymized/aggregated data may be retained indefinitely
7. Data Security
We implement industry-standard technical and organizational measures to protect your data, including:
- Encryption in transit (TLS 1.2+) and at rest (AES-256)
- Regular security audits and penetration testing
- Access controls and multi-factor authentication
- Employee security training and confidentiality obligations
No method of transmission or storage is 100% secure. We encourage you to use strong, unique passwords and enable two-factor authentication on your account.
8. International Data Transfers
Your data may be transferred to and processed in countries other than your own. When we transfer data from the EEA, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.
9. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your personal data ("right to be forgotten")
- Portability: Receive your data in a structured, machine-readable format
- Restriction: Request restriction of processing in certain circumstances
- Objection: Object to processing based on legitimate interests
- Withdraw consent: Where processing is based on consent, withdraw it at any time
To exercise these rights, contact us at privacy@unicmms.com. We will respond within 30 days.
10. Cookies
We use cookies and similar tracking technologies as described in our Cookie Policy. You can control cookie preferences through your browser settings or our cookie consent manager.
11. Children's Privacy
The Services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or a prominent notice in the Services. Continued use after the effective date constitutes acceptance of the updated policy.
13. Contact Us
For privacy-related inquiries or to exercise your rights:
Data Protection Officer
Email: privacy@unicmms.com