Privacy Policy

ENGINE ORDER TECHNOLOGIES - PRIVACY POLICY Version 1.0 | Effective Date: September 1, 2026 Engine Order Technologies LLC ("EOT," "we," "us," or "our") respects the privacy of users of Engine Order accounts, websites, software applications, and related services (collectively, the "Services"). This Privacy Policy explains what personal information we collect, why we collect it, how we use and disclose it, and the choices available to users. This Privacy Policy applies to Engine Order accounts and EOT Services that reference this Policy. Certain products may provide additional privacy notices where appropriate. 1. Information We Collect A. Account Information When you create or maintain an Engine Order account, we may collect: - first name; - last name; - email address; - internal account identifier; - account status; and - account creation and modification timestamps. We use email-based authentication and may verify that you control the email address associated with your account. B. Authentication and Device Information To authenticate users, maintain account security, and support offline functionality, we may collect or generate information such as: - device or installation identifiers; - authentication-token records; - login and authentication timestamps; - session information; - last-access or last-seen timestamps; and - security-related account information. Authentication tokens or credentials may be stored on a user's device to permit continued use of certain Services without a continuous Internet connection. C. Agreement and Acceptance Records When you electronically accept EOT's General Terms of Use, product-specific Supplemental Terms, or other agreements, we may retain records reasonably designed to establish what you accepted and when. These records may include: - your first and last name as associated with your account at the time of acceptance; - your verified email address as associated with your account at the time of acceptance; - your internal account identifier; - device or installation identifier; - date and time of acceptance; - applicable application and application version; - agreement name and version; - cryptographic hash or other identifier associated with the exact agreement accepted; and - reasonable technical information associated with the acceptance event. Historical acceptance records may retain the name and email address associated with your account at the time of acceptance even if you later change your account information. D. Product Verification Records Certain EOT products may require users to confirm that particular information has been independently reviewed or verified. For example, Engine Order Tanks may require a User to confirm verification of vessel-specific profile information before operational use. Where such functionality is provided, EOT may retain records concerning the verification event, including: - account identifier; - device or installation identifier; - date and time; - applicable product and version; - profile or data-set identifier; and - the fact that the User represented that verification had been completed. Unless otherwise disclosed, such a verification record does not necessarily mean that EOT receives or stores the underlying vessel data being verified. E. Technical and Security Information When you communicate with EOT's online infrastructure, our systems and service providers may automatically receive technical information necessary to operate and secure the Services. This may include: - Internet Protocol (IP) address; - request date and time; - browser type; - operating-system or device information; - requested service or endpoint; - error information; - security events; and - other ordinary server or network logs. We may use this information for security, fraud prevention, troubleshooting, reliability, and administration of the Services. F. Communications and Support If you contact EOT, report a problem, participate in beta testing, or request support, we may receive the information you voluntarily provide, including your contact information, message contents, screenshots, exported files, vessel information, or other materials you choose to send us. We use this information to respond to you, investigate problems, improve our products, and provide requested support. 2. Operational and Vessel Data Stored Locally Certain EOT products are designed to operate locally on a user's device, including when an Internet connection is unavailable. As currently designed, EOT does not automatically upload or centrally store vessel profiles, tank soundings, transfer records, fuel quantities, inventory records, or other operational vessel data entered into locally operated EOT applications merely through ordinary use of those applications. Such information may remain stored locally on the user's device unless: - the User intentionally exports or sends it to EOT; - the User requests support requiring the information; - a future synchronization, cloud-storage, fleet-management, or similar feature is expressly enabled; or - EOT otherwise provides notice that particular information will be transmitted. If EOT later introduces cloud synchronization, fleet management, vessel management, or similar functionality involving centralized storage of operational data, EOT will update this Privacy Policy or provide an appropriate additional notice before collecting such information through that functionality. 3. How We Use Information EOT may use information collected under this Privacy Policy to: - create and administer Engine Order accounts; - authenticate users; - send six-digit email verification codes and account-related communications; - maintain secure authenticated sessions; - permit authorized offline access; - determine whether required agreements have been accepted; - preserve evidence of electronic acceptance; - maintain product-verification records; - provide and operate EOT Services; - respond to support requests; - troubleshoot errors and technical problems; - protect EOT systems and users from fraud, abuse, unauthorized access, or security threats; - maintain and improve the reliability of the Services; - comply with legal obligations; - enforce applicable agreements; and - establish, exercise, or defend legal claims. We do not collect personal information merely because it might become useful later. We intend to limit collection to information reasonably related to operating EOT and providing the Services. 4. Transactional Email EOT may use the email address associated with your account to send transactional messages, including: - six-digit email verification codes; - security notices; - account-related notices; - required legal or Terms updates; - important product or service notices; and - support communications. Transactional account communications are different from promotional or marketing communications and may be necessary to operate your Engine Order account. EOT currently uses Resend or another transactional email provider to deliver certain account-related email. We may change service providers from time to time. 5. Service Providers EOT uses third-party service providers to operate portions of its infrastructure. These providers may process limited information on EOT's behalf as necessary to provide their services. Current providers may include: Cloudflare - hosting, serverless computing, database infrastructure, security, networking, and related services. Resend - transactional email delivery, including authentication messages. We may use additional providers for infrastructure, security, support, analytics, payments, communications, or other business functions as EOT develops. We do not authorize service providers to use personal information on EOT's behalf for purposes unrelated to providing their services to EOT, except as permitted by applicable law or their applicable agreements. 6. How We Disclose Information EOT may disclose personal information: - to service providers acting on our behalf; - when directed or authorized by the User; - where reasonably necessary to provide requested Services; - to comply with applicable law, regulation, subpoena, court order, or other valid legal process; - to protect the rights, safety, security, or property of EOT, our users, or others; - to investigate fraud, abuse, or security incidents; - to establish, exercise, or defend legal claims; or - in connection with a merger, acquisition, financing, reorganization, sale of assets, or transfer of all or part of EOT's business. EOT does not sell, rent, or trade personal information. EOT does not share personal information for cross-context behavioral advertising or process personal information for targeted advertising. 7. Data Retention EOT retains information for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing Services, maintaining security, complying with legal obligations, resolving disputes, and enforcing agreements. Different categories of information may be retained for different periods. In particular, EOT may retain: - account records while an account remains active and for a reasonable period afterward; - authentication and security records for security and troubleshooting purposes; - agreement-acceptance records for an extended period where reasonably necessary to establish the terms governing historical use of an EOT product; - archived copies of historical agreements associated with acceptance records; - product-verification records where reasonably appropriate; and - support communications where useful for resolving issues, maintaining records, or protecting EOT's legitimate interests. Deletion of an Engine Order account does not necessarily require deletion of records that EOT reasonably needs to retain for legal compliance, security, fraud prevention, dispute resolution, or establishment or defense of legal claims. 8. Data Security EOT uses reasonable administrative, technical, and organizational measures designed to protect information under our control. These measures may include: - encrypted network communications; - passwordless authentication; - hashed authentication tokens; - restricted database access; - encrypted or protected infrastructure secrets; - access controls; and - use of established infrastructure providers. No method of electronic transmission, storage, or authentication is completely secure. EOT therefore cannot guarantee absolute security. Users are responsible for maintaining reasonable security over their email accounts, devices, verification codes, authenticated sessions, and locally stored information. 9. User Choices and Account Information Users may be able to review or update certain Engine Order account information through EOT account functionality. Users may contact EOT to request assistance concerning their personal information. Depending upon applicable law and the User's jurisdiction, a User may have rights to request: - access to certain personal information; - correction of inaccurate personal information; - deletion of certain personal information; or - information concerning EOT's processing or disclosure of personal information. These rights may be subject to exceptions permitted by law, including where information must reasonably be retained for security, legal compliance, contract enforcement, or establishment or defense of legal claims. EOT may take reasonable steps to verify the identity of a person making a privacy request. 10. Local Device Data Information stored locally by an EOT application may be controlled primarily through the User's device rather than through EOT's servers. Removing an application, clearing browser or application storage, resetting a device, or deleting locally stored information may permanently remove locally stored data. Unless expressly provided by a particular Service, EOT cannot retrieve locally stored information that was never transmitted to EOT. Users are responsible for maintaining appropriate exports or backups of locally stored information they wish to preserve. 11. Children's Privacy EOT Services are designed for professional and operational use and are not directed to children. EOT does not knowingly solicit Engine Order accounts from children under 13 years of age. If EOT learns that personal information from a child under 13 has been collected contrary to applicable law, EOT will take reasonable steps to address the information as required by law. 12. International Users EOT is a United States company and operates its Services primarily from the United States. If you access the Services from outside the United States, information associated with your Engine Order account may be processed or stored in the United States or other jurisdictions in which EOT's service providers operate. Privacy and data-protection laws in those jurisdictions may differ from those in your location. If EOT intentionally markets or provides Services to users in jurisdictions subject to GDPR, UK GDPR, Canadian provincial/federal privacy regimes, or other international privacy laws, additional disclosures, rights procedures, or contractual measures may be required. 13. Business Transfers If EOT is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or other transfer of all or part of its business, information governed by this Privacy Policy may be transferred as part of that transaction, subject to applicable law. Any successor receiving such information will remain subject to applicable legal obligations concerning the information. 14. Changes to This Privacy Policy EOT may update this Privacy Policy as its Services, technology, legal obligations, or information practices change. The updated Policy may identify a new effective date or version. If a change materially affects how EOT uses personal information, EOT may provide additional notice through an Engine Order account, an EOT application, email, or another reasonable method. Where required by applicable law, EOT will obtain consent before using information in a materially different manner requiring such consent. 15. Relationship to Terms of Use This Privacy Policy should be read together with the Engine Order Technologies General Terms of Use and any applicable product-specific Supplemental Terms. This Privacy Policy describes EOT's information practices. It does not modify operational responsibilities, warranty disclaimers, limitations of liability, or other contractual provisions contained in applicable Terms. 16. Contact Questions, requests, or concerns regarding this Privacy Policy or EOT's privacy practices may be directed to: Engine Order Technologies LLC Texas, United States Privacy/Support Email: legal@engineorder.com