Privacy policy

1. Who is responsible

Edcora Inc. operates Mantenix, its trade name. Each customer company decides which people use Mantenix and what information it records in its account; for that data, the customer company is the controller and Edcora Inc. acts as a processor on its behalf.

For any privacy question, write to support@mantenix.com.

2. How accounts are created

The mobile app does not allow sign-up: only people their company invited from the web platform can sign in. The company account is created by an administrator on the web.

3. Data we process

• Account data: name, email, password (stored as a hash, never in plain text), company, role and assigned sites, and, if you enable them, the second factor and passkeys.
• Work data: work orders, checklists, meter readings, spare part usage, permits to work and lockouts (LOTO), with the date, time and who made each change.
• Photos and files: the photos you take with the camera on a work order, of the equipment or its nameplate, and the documents that are attached.
• Voice notes: the audio you record with the microphone on a work order and its transcription to text.
• Signatures: the electronic signature of whoever closes or receives a job (also the name of the customer or contractor staff who sign without an account) and a fingerprint of the signed record.
• QR requests: whoever reports a failure by scanning an asset’s QR code can leave their name, contact details, a description, a photo and a voice note.
• Contractors: name, ID document, phone and email of contractor staff registered by your company, and their entries to and exits from the plant.
• Technical data: IP address and browser in the server’s security logs, and the session token the app stores encrypted on the device.

Mantenix does not use your location (GPS), does not access your contacts or your photo library, does not send push notifications from the app, does not show ads and does not use third-party tracking or analytics tools.

4. What we use it for

• Providing the service: planning and carrying out maintenance, showing each person their work and keeping an auditable history.
• Working offline: the app keeps a copy of your sites’ work orders, assets and spare parts on the device and syncs it when the connection returns.
• Artificial intelligence assistance (see section 5).
• Sending service emails: invitations, password resets, work notices and the weekly report.
• Security: protecting accounts, preventing abuse and handling incidents.

We do not sell personal data or use it for advertising.

5. Artificial intelligence

Some features send information to AI providers to return a suggestion that a person reviews: classifying failures, suggesting priority, technician and permits, reading an asset’s nameplate, preparing preventive plans from a manual, preparing and reviewing lockout (LOTO) procedures and drafting the weekly report.

What is sent: the text of work orders and requests, the names of assets, sites and technicians, and, depending on the feature, photos of assets or nameplates and PDF manuals (to Anthropic) and voice notes to transcribe them (to OpenAI). These providers process the data to respond and, under their terms for API customers, do not use it to train their models.

6. Who we share it with

Only with providers that help us deliver the service, under contract and for that purpose:

• Laravel Cloud: hosting of the application (on Amazon Web Services infrastructure) and storage of the files (Laravel Cloud Object Storage, on Cloudflare R2).
• Supabase: the database (managed PostgreSQL).
• PowerSync: syncing data with the mobile app and offline work.
• Resend: sending emails.
• Anthropic and OpenAI: the artificial intelligence features described above.

7. Security

Data travels encrypted (HTTPS/TLS). Files are kept in private storage and only open through temporary links. Each company sees only its own data, and each person’s access can be limited to the sites assigned to them.

8. How long we keep it

For as long as the customer company keeps its account active. Maintenance records, signatures and permits form the company’s audit history and are kept even if the person who made them stops using Mantenix. When a company ends the service, its data is deleted as agreed in its contract.

9. Deleting your account and your rights

You can delete your account from the web platform under Mi perfil › Eliminar cuenta (My profile › Delete account), or ask your company or support to do it. Once deleted you lose access immediately; the work records you made stay in your company’s history.

You can also request access to, correction or deletion of your data by writing to support@mantenix.com. If your company manages your account, we will coordinate the request with it.

10. Minors

Mantenix is a work tool for companies and is not intended for people under 18.

11. Changes

If we change this policy, we will publish the new version on this page with its date.