Back to Home

Privacy Policy

Last updated: September 27, 2026

1. Introduction

DOVAmfg ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our manufacturing execution system.

2. Information We Collect

2.1 Personal Information

We collect personal information that you provide directly to us, including:

  • Name, email address, and phone number
  • Company/organization information
  • Job title and role within your organization
  • Account credentials and authentication information

2.2 Production and Business Data

As part of providing our manufacturing execution system, we collect and process:

  • Work order information and production schedules
  • Manufacturing metrics and OEE (Overall Equipment Effectiveness) data
  • Downtime records and production tracking data
  • Quality control and inspection records
  • Operator activity and time tracking information
  • Excel files and imported schedule data

2.3 Technical Information

We automatically collect certain technical information, including:

  • IP addresses and device identifiers
  • Browser type and version
  • Operating system information
  • Usage patterns and feature interactions
  • Log files and system performance data

3. How We Use Your Information

We use the collected information for the following purposes:

  • Providing and maintaining the DOVAmfg service
  • Processing production data and generating analytics
  • Managing user accounts and authentication
  • Sending service-related communications and notifications
  • Providing customer support and technical assistance
  • Improving our service features and functionality
  • Ensuring security and preventing unauthorized access
  • Complying with legal obligations and industry standards

4. Data Security and Protection

4.1 Security Measures

We implement industry-standard security measures to protect your data:

  • Encryption of all traffic in transit (TLS 1.2 or higher)
  • Encrypted data storage using advanced encryption standards
  • Multi-tenant architecture with row-level security (RLS)
  • Role-based access control (RBAC) with hierarchical permissions
  • Two-factor authentication (authenticator-app codes), enforced for administrative access and available to every user
  • Secure authentication mechanisms including password policies
  • Append-only audit logging of administrative and security actions

4.2 Data Isolation

Your organization's data is logically separated from other organizations through our multi-tenant architecture. Each company's data is secured with row-level security policies that prevent unauthorized access between organizations.

5. Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties, except:

  • With your explicit consent
  • To comply with legal obligations or court orders
  • To protect our rights, property, or safety
  • In connection with a business transfer or acquisition
  • To trusted service providers who assist in service delivery (under strict confidentiality agreements)

6. Data Retention

We retain your personal information and production data for as long as necessary to provide our services and comply with legal obligations. You may request deletion of your data, subject to certain exceptions for legal and operational requirements.

7. International Data Transfers

Your information may be processed and stored in countries other than your own. We ensure appropriate safeguards are in place to protect your data during international transfers, including compliance with applicable data protection regulations.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

  • Access to your personal information
  • Correction of inaccurate or incomplete data
  • Deletion of your personal information
  • Restriction or objection to processing
  • Data portability
  • Withdrawal of consent

9. Cookies and Tracking Technologies

Inside the application we use only essential cookies (authentication and session state) and functional cookies (preferences such as theme); there is no third-party tracking in the application. We count page views with Vercel Web Analytics, which is cookieless and does not identify you. On our public website only, and only if you accept the cookie banner, the Google Ads tag sets a cookie that tells us which of our ads brought a visitor who booked a demo; ad personalisation is switched off. See our Cookie Policy for details.

10. Third-Party Services

Our service may integrate with third-party services for functionality such as:

  • Email delivery services (Resend)
  • Database, authentication, and storage (Supabase)
  • Application hosting (Vercel)
  • Payment processing (Stripe)
  • Error tracking, with personal details removed before sending (Sentry)
  • Optional schedule-file sync with Google Drive / Sheets and Microsoft SharePoint / OneDrive, only where your company connects them

These services have their own privacy policies, and we encourage you to review them. The full, current list is published at dovamfg.com/subprocessors.

11. Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Changes become effective immediately upon posting.

13. Regional Privacy Laws

13.1 GDPR (European Union)

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with a supervisory authority.

13.2 CCPA (California)

California residents have specific rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to delete personal information.

14. Data Processing Lawful Basis

We process your data based on the following lawful bases:

  • Contract performance (providing the service you requested)
  • Legitimate interests (service improvement and security)
  • Legal compliance (meeting regulatory requirements)
  • Consent (where explicitly provided)

15. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

  • Email: privacy@dova.manufacturing
  • Data Protection Officer: dpo@dova.manufacturing
  • Website: www.dova.manufacturing

This Privacy Policy is effective as of December 16, 2024.