F7 Software Inc ("Company", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Arc Cert welding equipment certification platform ("Service"). Please read this policy carefully. By using the Service, you consent to the data practices described in this policy.

---

1. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide when using the Service, including:

• Full name, email address, phone number, and job title
• Company name, business address, and billing information
• Account credentials (username and encrypted password)
• Profile information and preferences

Certification and Business Data

In the course of using the Service, you may provide:

• Equipment details, serial numbers, and manufacturer information
• Certification test results, measurements, and calibration data
• Customer records, job schedules, and service history
• Reference instrument details and calibration certificates
• Digital signatures and technician identifiers

Automatically Collected Information

When you access the Service, we may automatically collect:

• Device information (type, operating system, browser type and version)
• IP address, approximate geographic location, and time zone
• Usage data (pages viewed, features used, actions taken, timestamps)
• Cookies and similar tracking technologies (see Cookie Policy below)
• Error logs, crash reports, and performance data

---

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, operate, and maintain the certification platform
• Account Management: To create and manage your user account, process authentication, and manage subscriptions
• Communication: To send technical notices, security alerts, support messages, and service updates
• Billing: To process payments, generate invoices, and manage subscriptions
• Improvement: To analyse usage patterns, diagnose technical issues, and improve the Service
• Compliance: To comply with legal obligations and enforce our Terms of Service
• Security: To detect, prevent, and address fraud, abuse, and security incidents

---

3. Cookie Policy

We use cookies and similar technologies to enhance your experience. The types of cookies we use include:

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the Service. We do not use advertising or third-party tracking cookies.

---

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party providers who assist us in operating the Service (hosting, payment processing, email delivery), bound by confidentiality agreements
• Within Your Organisation: With other users within your tenant account as configured by your account administrator
• Legal Requirements: When required by law, court order, or governmental regulation, or to protect the rights, property, or safety of F7 Software Inc, our users, or the public
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, with notice to affected users
• With Your Consent: In any other case with your explicit consent

---

5. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Secure password hashing using industry-standard algorithms
• Role-based access controls and multi-tenant data isolation
• Regular security assessments and vulnerability testing
• Automated backups and disaster recovery procedures
• Server infrastructure hosted in SOC 2 compliant data centres

While we strive to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to taking all reasonable steps to protect your data.

---

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Certification records and test data may be retained for longer periods as required by industry regulations and standards (IEC 60974-14). When you close your account, we will delete or anonymise your personal information within 90 days, except where retention is required by law or for legitimate business purposes. Backups containing your data are purged within 180 days of account closure.

---

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete personal data
• Deletion: Request deletion of your personal data, subject to legal retention requirements
• Data Portability: Request an export of your data in a structured, machine-readable format
• Restriction: Request that we restrict processing of your personal data in certain circumstances
• Objection: Object to processing of your personal data for certain purposes
• Withdrawal of Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the details below. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

---

8. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy, including the use of standard contractual clauses and other transfer mechanisms approved by applicable data protection authorities.

---

9. Children's Privacy

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us and we will take steps to remove such information.

---

10. Third-Party Links

The Service may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policy of every site you visit.

---

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice via email or an in-app notification. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

---

12. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about our data practices, please contact us at: