Privacy Policy

1. Introduction

Albert Mureen Consulting LLC (“AMC,” “we,” “us,” or “our”) operates the AMC Focus Flow platform. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, company name, and password when you register.
• Billing Information: Payment details are collected and processed by Stripe. We do not store your full credit card number on our servers.
• Production Data: Value stream configurations, station parameters, process times, shift records, and other operational data you enter into the platform.
• Communications: Information you provide when contacting us via the contact form or support email.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, and interactions with the platform.
• Device Information: Browser type, operating system, screen resolution, and IP address.
• Cookies: Session cookies for authentication and preferences. We do not use third-party tracking cookies for advertising.

3. How We Use Your Information

• Service Delivery: To provide, maintain, and improve the AMC Focus Flow platform.
• Account Management: To manage your account, process subscriptions, and provide customer support.
• Communications: To send verification emails, password resets, trial expiry reminders, and important service announcements.
• Analytics: To understand how the platform is used and identify areas for improvement.
• Security: To detect and prevent fraud, abuse, and security threats.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Third-Party Services

We use the following third-party services to operate the platform:

5. Data Retention

• Active Accounts: Data is retained for the duration of your subscription.
• Canceled Accounts: Data is retained in read-only mode for 90 days after cancellation, then permanently deleted.
• Email Logs: Transactional email records are retained for 12 months for troubleshooting.
• Backups: Encrypted database backups are retained for 30 days.

6. Data Security

We implement industry-standard security measures including:

• TLS/SSL encryption for all data in transit.
• Encrypted database connections (SSL required).
• Passwords hashed using bcrypt with a cost factor of 12.
• JWT-based authentication with configurable session expiry.
• Rate limiting on authentication endpoints.
• Environment-based secrets management (never stored in source code).

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your personal data (“right to be forgotten”).
• Portability: Request an export of your data in a machine-readable format.
• Objection: Object to processing of your data for specific purposes.

To exercise any of these rights, contact us at support@albertmureenconsulting.com. We will respond within 30 days.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete it, and the right not to be discriminated against for exercising your privacy rights. We do not sell personal information.

9. International Data Transfers

Your data may be processed and stored in the United States. By using the Service, you consent to the transfer of your data to the United States, where data protection laws may differ from those in your jurisdiction.

10. Children’s Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to account holders at least 30 days before taking effect. The “Effective Date” at the top of this page indicates when the policy was last revised.

12. Contact

For questions about this Privacy Policy or to exercise your data rights, contact us at: