Privacy Policy

Effective date: September 10, 2026

1. Who We Are

MachConnect is a mobile and web application published by Edge Solutions LLC, a company headquartered in the United States.

MachConnect is available on the following platforms:

• iOS (iPhone and iPad)
• Android
• Web (machconnect.cloud)

Edge Solutions LLC is the data controller responsible for the personal information collected through MachConnect.

If you have questions about this policy, or wish to exercise any privacy right described herein, please contact us at:

Privacy contact: privacy@machmotion.com

2. Scope of This Policy

MachConnect is a business-to-business (B2B) application. It is not a consumer product. Access is granted exclusively by invitation: your employer or the account administrator for your organization must create your account before you can sign in. MachConnect is not open for public registration.

All customers served by MachConnect are located in the United States of America. Edge Solutions LLC does not market, sell, or distribute MachConnect to individuals or organizations located in the European Union, the United Kingdom, or Switzerland. The application is not published in App Store or Google Play regions restricted to those territories, and no support is provided for users accessing MachConnect from those jurisdictions.

Because MachConnect is a US-only, invite-only B2B application, this policy focuses on the privacy obligations applicable to US-based business customers and their employees. If applicable law changes, or if MachConnect is made available in additional territories, this policy will be updated accordingly.

3. Information We Collect

We collect information in three ways: through information you or your organization provides directly to us, through the machines and devices connected to MachConnect, and automatically through your use of the application.

3.1 Account and Identity Information

Because MachConnect is invite-only, your account is created by an administrator within your organization. In connection with that process, we collect or receive:

• Name — your first and last name, as entered by you or your administrator.
• Email address — used as your login identifier and for system notifications.
• Organization — the name of the employer or entity whose account you are associated with.
• Role and permissions — the access level assigned to you by your administrator (e.g., operator, supervisor, administrator).

We do not collect payment information directly from individual users. Billing is handled at the organizational account level.

3.2 Machine and Operational Data

MachConnect is designed to monitor and interact with CNC machines and related industrial equipment. When machines are connected to MachConnect, we collect and transmit:

• Machine status and state data — including run state, feed rate, spindle speed, current program, active alarms, and similar operational telemetry.
• Machine identifiers — names, serial numbers, or other identifiers assigned to individual machines within your organization's account.
• Command and control inputs — actions taken through the application that affect machine behavior, along with the user account that initiated them.
• Alarm and event logs — records of machine faults, operator interventions, and other notable events.

This data is associated with your organization's account and with the specific machines in your facility. It is not associated with consumer identities or used for advertising.

3.3 Camera and Video Data

If your organization has enabled camera monitoring, MachConnect may transmit live or recorded video streams from cameras mounted on or near connected machines.

• Live video streams are transmitted in real time over an encrypted connection and are not stored by Edge Solutions LLC beyond what is necessary for the live session.

Your organization is responsible for posting appropriate notices in any area where cameras are in use, and for complying with any workplace monitoring laws applicable to your jurisdiction.

3.4 Usage and Technical Data

When you use MachConnect, we may collect certain technical information about your session:

• Device information — we may collect device type, operating system version, and application version.
• Session and log data — we may collect timestamps of logins and logouts, features accessed, and application errors or crash reports.
• Network information — we may collect IP address and general network conditions to support connectivity diagnostics.

Any technical data collected is used solely to operate, maintain, and improve the application. It is not sold or shared with advertisers.

3.5 Stored Credentials and Session Tokens

To keep you signed in between sessions, MachConnect stores the following items in your device's local storage:

• Authentication tokens — issued by our identity provider and stored in encrypted device storage. These are cleared when you sign out.
• Push notification token — a device-specific token issued by Apple Push Notification service (APNs) on iOS or Google Firebase Cloud Messaging (FCM) on Android. This token is registered against your user account so that machine alerts can be delivered to your device. It is removed from our servers when you sign out.
• LAN connection state — the IP address(es), port, and TLS certificate fingerprint of each on-premise CNC machine are advertised by the machine itself to our servers as part of its component catalog, and are stored in our database (AWS DynamoDB) associated with the machine record. When you navigate to a machine in the app, MachConnect retrieves this information from our servers so that it can attempt a direct local connection. This data is associated with the machine, not with your individual user account, and is used solely to enable LAN-direct connectivity and to validate the machine's identity via its TLS certificate before establishing a command-and-control session. The app also caches this information locally on your device (in browser or app storage, with a short time-to-live) to avoid redundant server requests; this local cache is not tied to sign-out.

3.6 Maintenance Evidence Photos

When completing a preventive-maintenance task in MachConnect, you may capture a photo using your device camera or select an existing photo from your device's photo library to attach as evidence.

• Photos selected or captured for this purpose are uploaded to and stored on our servers as part of the maintenance record. This is distinct from the live video streams described in §3.3, which are not stored.
• Before upload, MachConnect strips image metadata, including any embedded GPS location information, from photos. Only the image content itself is stored.
• Uploaded evidence photos are associated with your user account and your organization's maintenance records.

3.7 Device Permissions

MachConnect requests the following device permissions on iOS and Android. Most permissions are requested when you first use the feature that requires it; you may grant or deny each one individually, and you can change your choices at any time in your device settings.

On iOS, the system will prompt you the first time the app attempts to connect to a machine on your local network; you can change this choice at any time in Settings. On Android, local network access is granted automatically when you install the app and cannot be revoked separately.

Denying a permission limits the corresponding feature but does not affect your ability to use the rest of the application.

3.8 Sensitive Personal Information

Under the California Consumer Privacy Act (CCPA) as amended, certain categories of information are classified as Sensitive Personal Information (SPI). Of the data described in this section, the following may qualify as SPI under applicable law:

• Precise geolocation — maintenance evidence photos may contain embedded GPS coordinates. MachConnect strips this metadata before upload; geolocation data is not stored by Edge Solutions LLC.
• Account log-in credentials — authentication tokens stored in encrypted device storage (§3.5).
• Information about employees in their capacity as employees — machine command inputs and maintenance records are associated with named user accounts.

Edge Solutions LLC uses Sensitive Personal Information only for the purposes for which it was collected (as described in Section 4) and does not use or disclose it for inferring characteristics about individuals. California residents have the right to limit the use and disclosure of their Sensitive Personal Information; see Section 9 for how to exercise that right.

4. How We Use Your Information

We use the information described in Section 3 for the purposes set out below. For each purpose, we also identify the basis on which we rely: contractual necessity (processing is required to deliver the service your organization has contracted for), legitimate interest (processing serves a reasonable business need that does not override your privacy interests), or consent (processing is conditional on permission you have explicitly granted and can withdraw at any time).

4.1 Authentication and Account Management

We use your name, email address, organization, role, and authentication tokens to:

• Create and maintain your user account.
• Authenticate you each time you sign in.
• Enforce the access permissions assigned to you by your administrator.
• Deliver account-related communications, such as password-reset emails or administrator notifications.

Without this information, we cannot create or maintain your account and you cannot access MachConnect.

4.2 Machine Monitoring and Control

We use machine status and operational data, machine identifiers, command and control inputs, and alarm and event logs to:

• Display real-time machine status, alarms, and performance metrics within the application.
• Record commands sent to machines and the user account that issued them, for safety and auditability purposes.
• Generate historical analytics, such as cycle counts, uptime, and OEE metrics, for your organization's operational review.
• Deliver alarm and event notifications (see §4.4 below).

Without machine data, we cannot display machine status, generate operational reports, or deliver machine-event alerts.

4.3 Preventive Maintenance Records

We use maintenance evidence photos and the user account associated with each completed task to:

• Associate photographic evidence with the correct maintenance record in your organization's account.
• Provide a verifiable audit trail of maintenance activity.

Photos are stored as described in §3.6. Stripping of geolocation metadata occurs automatically before upload and is not optional.

Without this information, the preventive-maintenance feature cannot function.

4.4 Push and Email Notifications

We use your email address and, if you have granted permission, your push notification token to:

• Deliver machine alarm and warning notifications to your device or inbox.
• Notify you when a job or program completes.
• Deliver maintenance-due reminders and other machine-event alerts configured by your organization's administrator.

Email notifications are sent using the email address associated with your account and are part of the core service. Push notifications require your explicit permission (granted through your device's notification prompt); you may revoke this permission at any time in your device's system settings. Revoking push-notification permission does not affect email notification delivery or any other part of the application.

4.5 Camera and Video Monitoring

When your organization has enabled camera monitoring, MachConnect receives live video streams from cameras mounted on or near connected machines. These streams originate from the machine-side CameraService, are relayed through the Cloudflare Realtime SFU via WebRTC, and are played back on your device. Your device receives video — it never transmits video through this feature, and your device's camera is not accessed.

As described in §3.3, stream content is not stored by Edge Solutions LLC; it transits Cloudflare infrastructure transiently for the duration of the live session only.

No device permission is required to receive these streams. The camera permission listed in §3.7 applies only to capturing maintenance evidence photos (§4.3), not to the video-monitoring feature described here.

4.6 Local Network Connectivity

Each on-premise CNC machine running mcBridge advertises its LAN IP address(es), port, and TLS certificate fingerprint to our servers as part of its component catalog (§3.5). We store this information in AWS DynamoDB, associated with the machine record, and serve it to authorised users of that machine so that the app can attempt a direct local connection. We use this information to:

• Allow the app to discover and connect directly to the machine on the same local network, without routing traffic through our cloud infrastructure.
• Validate the machine's identity via its TLS certificate before establishing a command-and-control session.

This information is associated with the machine, not with individual user accounts.

On iOS, the app will ask for your permission before connecting to machines on your local network. You may revoke this at any time in Settings; doing so will prevent direct connections to on-premise machines. On Android, local network access is granted automatically at install and cannot be revoked separately.

4.7 Service Operation, Security, and Improvement

We use technical and operational data (§3.4) to operate, maintain, and improve MachConnect, including:

• Diagnosing and resolving connectivity or performance issues.
• Detecting and responding to security incidents.
• Monitoring infrastructure reliability.

This data is not used to profile individual users, build behavioral models, or make automated decisions about individuals.

4.8 Consequences of Not Providing Information

The table below summarizes which information is required to use MachConnect and what happens if it is not provided.

5. Who We Share Your Data With

Edge Solutions LLC does not sell or share your personal information with advertisers, data brokers, or any third party for their independent commercial purposes. We disclose personal information only to the service providers (sub-processors) listed below, each acting solely on our behalf and under contractual obligation to protect your data.

All AWS data is stored at rest in us-east-1 (Virginia, USA). Cloudflare video streams transit Cloudflare edge infrastructure globally but are not stored beyond the live session.

Edge Solutions LLC is not a data broker and does not disclose personal information to data brokers.

6. Data Retention

We retain personal information for as long as it is needed to provide the service or as required by law. The table below sets out the retention period for each category.

When an account is deleted, we will remove or anonymize the associated personal information within 30 days, except where a longer retention period is required by applicable law or needed to resolve a dispute or enforce our agreements.

7. Security

Edge Solutions LLC uses commercially reasonable technical and organizational measures to protect the personal information we hold, including:

• Encryption in transit — all communication between the app, our servers, and connected machines uses TLS 1.2 or higher (WSS for WebSocket connections).
• Encryption at rest — data stored in AWS services (DynamoDB, S3) is encrypted using AWS-managed encryption keys.
• Access controls — access to production systems and personal data is restricted to authorized personnel on a need-to-know basis.

If we become aware of a data breach that is likely to result in a risk to the rights and freedoms of affected individuals, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach and will notify affected individuals without undue delay where the breach poses a high risk to them. We will also comply with applicable US state breach-notification statutes.

No system is completely secure. If you have reason to believe your account has been compromised, please contact us immediately at privacy@machmotion.com.

8. International Data Transfers

MachConnect is a US-based service. All account and machine data is stored in AWS us-east-1 (Virginia, USA).

Certain data may transit or be processed outside the United States in limited circumstances:

• Live video streams may transit Cloudflare edge nodes located in EU or APAC regions in real time; this content is not stored by Cloudflare or Edge Solutions LLC.
• Push notifications on iOS transit Apple infrastructure (USA) and on Android transit Google infrastructure (USA).

Because MachConnect is a US-only service not marketed or made available to residents of the European Union, United Kingdom, or Switzerland, we do not anticipate being subject to GDPR, UK GDPR, or the Swiss FADP in connection with the processing described in this policy. If that position changes, this section will be updated to identify the transfer mechanism relied upon (such as the EU–US Data Privacy Framework, UK Extension to the DPF, or Standard Contractual Clauses).

9. Your Privacy Rights

9.1 Rights Available to All Users

Regardless of where you are located, you may contact us at privacy@machmotion.com to:

• Access — request a copy of the personal information we hold about you.
• Correct — ask us to correct inaccurate or incomplete personal information.
• Delete — ask us to delete your personal information, subject to any legal or contractual retention obligations.
• Withdraw consent — revoke any consent-based permission (camera, photo library, push notifications) at any time through your device settings or by contacting us. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal.

We will respond to verifiable requests within 30 days. If we need additional time (up to 60 additional days for complex or numerous requests), we will notify you of the extension and the reason for it.

9.2 California Residents — Additional Rights

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you the following additional rights:

• Right to know the categories and specific pieces of personal information collected, used, disclosed, and sold.
• Right to opt out of sale or sharing — Edge Solutions LLC does not sell or share your personal information as those terms are defined under CCPA. No opt-out link is required, but we affirm this right unconditionally.
• Right to limit use of Sensitive Personal Information — you may direct us to use your Sensitive Personal Information only for the purposes for which it was collected. Contact privacy@machmotion.com to exercise this right.
• Right to non-discrimination — we will not deny you services, charge you a different price, or provide a degraded level of service because you exercised any right under this section.

9.3 B2B — Employee Rights

Because MachConnect is an employer-administered application, some requests (for example, account deletion or data correction) may require coordination with your organization's account administrator to fulfill. You may contact Edge Solutions LLC at privacy@machmotion.com, or ask your organization's administrator to act on your behalf.

10. Automated Decision-Making

MachConnect does not make any decisions about you based solely on automated processing that produce legal effects or similarly significant effects on you as an individual.

Operational metrics such as machine OEE or cycle counts are calculated automatically and displayed to authorized users, but no automated decision about an individual person (employment, compensation, access, or similar) is made using these metrics.

11. No Advertising or Analytics

MachConnect does not include any advertising SDK, analytics SDK, or crash-reporting SDK that reports to a third-party advertising network.

• We do not collect or use advertising identifiers (IDFA on iOS or equivalent on Android).
• We do not place third-party tracking cookies or serve targeted advertisements.
• We do not “sell” or “share” personal information as those terms are defined under the California Consumer Privacy Act or equivalent state laws. No “Do Not Sell or Share My Personal Information” link is displayed, and none is required.

Regarding Global Privacy Control (GPC) and similar universal opt-out signals: because Edge Solutions LLC does not sell or share personal information, these signals have no effect on our data practices. We note their receipt and confirm no sale or sharing occurs.

12. Children’s Privacy

MachConnect is a business application for workplace use. It is not directed at individuals under the age of 18. We do not knowingly collect personal information from anyone under 18.

Access to MachConnect requires an employer-issued account; that account-creation process is controlled by organizational administrators, not by individuals. If we become aware that a user is under 18, we will deactivate that account and delete the associated personal information.

13. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, our services, or applicable law.

When we make a material change, we will notify you by posting a notice within the MachConnect application and, where appropriate, by sending an email to the address associated with your account. Material changes take effect when notice is given, unless a longer period is required by law.

We encourage you to review this policy periodically. The effective date at the top of this document indicates when it was last updated.

14. Contact Us

If you have questions about this privacy policy, wish to exercise a privacy right, or want to report a concern about how your data is handled, please contact us at:

Privacy contact: privacy@machmotion.com