سياسة الخصوصية

1. Information We Collect

We collect essential operational and technical information to deliver reliable compliance services:

• Account Information: When signing in via Google or Microsoft, we receive your name and email address strictly for authentication and role management via Google Firebase.
• Usage Data: Information regarding interactions with forms, checklists, and procedures to maintain comprehensive ISO audit trails.
• Device Information: Device model, OS version, and display parameters to optimize responsive user experience across devices.

2. How We Use Information

Collected data is used strictly for legitimate business and operational purposes:

• Providing, maintaining, and enhancing our ISO compliance software suite.
• Authenticating users securely via Firebase (Google/Microsoft Auth).
• Delivering technical support and resolving operational inquiries.
• Safeguarding systems against unauthorized access and security risks.

3. Required Device Permissions

Our application may request the following permissions during relevant actions:

4. Data Sharing & Non-Sale Policy

We do not sell, rent, or monetize your personal or company information under any circumstances. Data is shared only with trusted enterprise cloud infrastructure providers (such as Google Firebase) strictly for hosting and authentication purposes.

5. Data Security Standards

We employ enterprise-grade security controls including end-to-end SSL/TLS encryption, user database isolation, and automated backups. Users are encouraged to maintain confidential credentials and access security.

6. Third-Party Services

Our application integrates Google Play Services and Google Firebase for authentication and push notifications, subject to Google's official privacy standards.

7. Children's Privacy

Our services are designed exclusively for business organizations and professional teams, and do not knowingly collect information from children under 13.

7-A. Data Retention & Account Deletion for Non-Payment

MECHANISMA is fully transparent about our data retention practices following subscription expiry. Our complete policy is:

• Account freeze: Upon subscription expiry without payment, the account is automatically frozen while all data is retained during the grace period.
• Daily reminder for 30 days: The system sends one daily email reminder to the registered address during the grace period, including the countdown and a payment link.
• Complete deletion after 30 days: If payment is not received, all facility data is permanently and completely deleted from our cloud servers, including all records, files, and user accounts.
• Final notification: A final deletion notification email is automatically dispatched to the facility upon deletion.
• Email release: All email addresses associated with the deleted account are released and become eligible for new account registration.

We recommend periodically exporting data backups from within the platform to ensure continuity of quality and compliance records regardless of subscription status.