Privacy Policy

Effective June 7, 2026

vMaint (“we”, “our”, “us”) is a maintenance management platform for shop floors. This policy explains what data we collect, how we use it, and your rights. By using vMaint you agree to this policy.

1. What we collect

  • Account data — name, email address, and password hash when you sign up.
  • Organization data — your organization name, team members you invite, assets, work orders, parts, production entries, and any other records you create inside the app.
  • Usage data — pages visited, actions taken, and timestamps. Used to improve the product and diagnose errors.
  • Payment data — processed by Stripe. We never see or store your full card number.
  • OAuth data — if you sign in with Google we receive your name, email, and profile picture from Google.

2. How we use your data

  • To provide, maintain, and improve the vMaint service.
  • To send transactional emails (email verification, invitations, billing receipts).
  • To process payments and manage your subscription.
  • To respond to support requests.
  • To comply with legal obligations.

We do not sell your data. We do not use your data for advertising.

3. Third-party services

We use the following sub-processors to operate vMaint:

  • Vercel — hosting and edge infrastructure (US / global).
  • Neon — PostgreSQL database (US region). Your org data is row-level isolated.
  • Stripe — payment processing. Stripe Privacy Policy.
  • Pusher — real-time WebSocket events (e.g. work order updates, safety alerts). No message content is stored by Pusher.
  • Resend — transactional email delivery.
  • Google OAuth — optional sign-in. Governed by Google's Privacy Policy.

4. Data retention

Your data is retained for as long as your account is active. If you cancel your subscription or delete your account, we will delete your organization’s data within 30 days, unless retention is required by law.

5. Security

Passwords are hashed with bcrypt and never stored in plain text. All data in transit is encrypted with TLS. Database access is restricted with row-level security (RLS) so each organization can only access its own data.

6. Cookies and sessions

We use a single encrypted session cookie to keep you signed in. We do not use third-party tracking cookies or analytics cookies.

7. Your rights

You may at any time:

  • Request a copy of your personal data.
  • Request correction of inaccurate data.
  • Request deletion of your account and associated data.

To exercise these rights, email us at hello@vmaint.com.

8. Children

vMaint is not directed at children under 16. We do not knowingly collect data from anyone under 16.

9. Changes to this policy

We may update this policy from time to time. We will notify active users by email of material changes. Continued use after the effective date constitutes acceptance.

10. Contact

Questions? Email hello@vmaint.com or use our contact page.