Privacy Policy

1. Introduction

Welcome to WarrantyPlus, a battery warranty management system. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using WarrantyPlus, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 User Account Information

When you create an account or use our service, we may collect:

• First name and last name
• Email address
• Phone number (optional)
• Location assignment
• Role and permissions
• Login credentials and authentication information
• Account activity and login history

2.2 Customer Information

When processing warranties and service records, we may collect customer information including:

• Customer name
• Email address
• Phone number
• Physical address
• Vehicle identification number (VIN)

2.3 Warranty and Service Information

We collect information related to warranties and service records:

• Warranty numbers and invoice information
• Purchase and installation dates
• Battery serial numbers
• Service dates and technician notes
• Odometer readings and voltage measurements
• GPS location data (latitude and longitude) for service records
• Customer signatures

2.4 Documents and Media

We may store documents and photos uploaded in connection with warranties, service records, and claims, including:

• Service record photos
• Document attachments
• Customer signature images

2.5 Usage and Technical Information

We automatically collect certain information when you use our service:

• Audit logs of all user actions and system activities
• IP addresses and browser information
• Device information
• Access times and dates

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our warranty management services
• Account Management: To create and manage user accounts, authenticate users, and control access to the system
• Warranty Processing: To process, track, and manage battery warranties and service records
• Claims Processing: To handle warranty claims and related documentation
• Communication: To communicate with you about your account, warranties, service records, and system updates
• Compliance: To comply with legal obligations and enforce our terms of service
• Security: To detect, prevent, and address security issues and fraudulent activity
• Audit and Reporting: To maintain audit trails and generate reports for business operations
• Multi-Tenant Isolation: To ensure proper data isolation between different tenant organizations

4. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Sensitive data is encrypted using AES encryption algorithms
• Access Controls: Role-based access control ensures users can only access data appropriate to their role
• Multi-Tenant Isolation: Data is isolated by tenant to prevent unauthorized access between organizations
• Secure Authentication: We use ASP.NET Core Identity with secure password hashing
• Database Security: Data is stored in a secure PostgreSQL database with restricted access
• Audit Logging: All user actions are logged for security monitoring and compliance
• HTTPS: All data transmission is encrypted using HTTPS/TLS protocols

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to improve our security measures.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Within Your Organization: Information may be shared with authorized users within your tenant organization based on their role and permissions
• Service Providers: We may share information with trusted service providers who assist in operating our service, subject to confidentiality agreements
• Legal Requirements: We may disclose information if required by law, court order, or government regulation
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction
• Protection of Rights: We may disclose information to protect our rights, property, or safety, or that of our users or others

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Account information is retained while your account is active and for a reasonable period after account closure
• Warranty and service record information is retained for the duration of the warranty period and as required by law
• Audit logs are retained for security and compliance purposes
• Documents and attachments are retained in accordance with business and legal requirements

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to legal and business requirements
• Data Portability: Request a copy of your data in a portable format
• Objection: Object to certain processing of your personal information
• Account Management: Update your account information through your account settings

To exercise these rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request within a reasonable timeframe.

8. Multi-Tenant Data Isolation

WarrantyPlus is a multi-tenant application. Your data is isolated by tenant organization to ensure that:

• Data from one tenant organization is not accessible by users from another tenant organization
• Each tenant's data is stored and processed separately
• Access is controlled through tenant-specific authentication and authorization

9. Children's Privacy

WarrantyPlus is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our service, you consent to the transfer of your information to these countries.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

13. Compliance

This Privacy Policy is designed to comply with applicable data protection laws, including but not limited to:

• General Data Protection Regulation (GDPR) for users in the European Union
• California Consumer Privacy Act (CCPA) for California residents
• Other applicable local and international privacy laws