Legal
Privacy Policy
How we collect, use, and protect your personal data.
What we collect
The data we hold about you
We collect only what is necessary to operate the service and communicate with you. We do not use tracking pixels or work with ad networks.
- Account data: name, email address, and company name provided during sign-up
- Usage data: pages visited and features used within the product
- Form submissions: messages sent via our contact forms
How we use your data
What we do with the data we hold
Your data is used exclusively to operate the product, send communications you have requested, and improve the service. We never sell your data to third parties.
- Product operation: delivering the service you signed up for
- Communications: sending updates and responses you requested
- Service improvement: understanding how the product is used
Data storage & security
Where your data lives and how it is protected
All data is hosted on EU infrastructure (AWS Frankfurt). Data is encrypted at rest and in transit. Upon request, we delete your data within 30 days.
- EU-hosted infrastructure — AWS Frankfurt region
- Encryption at rest and in transit
- Data deleted within 30 days of a verified deletion request
Your rights
Your GDPR rights, and how to exercise them
Under GDPR you have the right to access, rectify, erase, and port your personal data. Contact us at innovation@mach8.io. A Data Processing Agreement (DPA) is available on request.
- Right of access: request a copy of the data we hold about you
- Right to rectification: ask us to correct inaccurate data
- Right to erasure: request deletion of your personal data
- Right to portability: receive your data in a machine-readable format
- Contact: innovation@mach8.io — DPA available on request