1Scope & Controller Information
This policy applies to all services provided under the GridFix CMMS web platform and offline-first mobile applications. For enterprise customer facilities, GridFix acts as a Data Processor, maintaining strict data segregation where operational records remain the sole property of the subscribing tenant.
2Information We Collect
Account & Identity Data
Name, professional email, assigned roles (Manager, Technician, Requester), and MFA tokens.
Asset & Maintenance Records
Equipment specifications, work order history, meter readings, checklist logs, and manuals.
Offline Mobile Database Sync
Encrypted local SQLite database on technician devices with Last-Write-Wins conflict resolution.
Security & Audit Logs
Immutable mutation audit logs, IP login access timestamps, and error diagnostics.
3Security & Multi-Tenant Isolation
We enforce strict multi-tenant isolation through PostgreSQL Row Level Security (RLS) policies. All communication between browser, mobile app, and backend APIs is encrypted using TLS 1.3 with AES-256 encryption at rest.
4Data Subject Rights (GDPR / PDPL / CCPA)
Subscribers and individual users maintain the right to access, rectify, export in standard formats (Excel, CSV, JSON), or request full erasure of their personal profile data in accordance with GDPR, CCPA, and Saudi PDPL regulations.
Contact Our Privacy Office
If you have any questions or requests concerning data protection, please contact us at: